Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json)
Hash identifier: r1cPExWF0tUPahuMHACx9Oclf+Iy4XAe2JgQJz8Gxgk=
Subject key identifier: 14:90:21:B6:27:58:46:87:F7:11:A2:9E:4F:B9:5D:9D:68:4D:43:CC
Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Certificate serial: 01A08CE9391B3D4A1767C1653F7302F66611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
Manifest number: 095F
Signing time: Thu 10 Sep 2026 20:01:29 +0000
Manifest this update: Thu 10 Sep 2026 20:01:29 +0000
Manifest next update: Fri 11 Sep 2026 20:01:29 +0000
Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: 0t01DktElirtCrkovdrrZ+Gn+HOnY4aKxlM3Vi2uIYg=)
2: eCUldEuVJ_0jxDI76Og1yPBef88.roa (hash: O2xOPoQw7tP8dZhDbm7zmCq1owEVKxiXzBZzEk+JuX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:39:1b:3d:4a:17:67:c1:65:3f:73:02:f6:66:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95
Validity
Not Before: Sep 10 20:01:29 2026 GMT
Not After : Sep 11 20:01:29 2026 GMT
Subject: CN=149021b627584687f711a29e4fb95d9d684d43cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:18:71:7e:cf:28:9e:08:72:47:08:f2:c7:
f6:7d:96:43:62:12:f4:f1:e2:83:35:e6:6a:b3:63:
cb:62:f6:f4:de:64:aa:11:ec:f2:f8:c0:83:fc:74:
cd:18:ad:82:00:10:be:ca:ea:12:d9:3a:63:db:c2:
38:41:ca:25:ca:e8:06:bf:a7:2f:94:a4:6d:74:27:
0b:23:26:98:d6:b6:e7:5f:0c:54:72:a2:f7:a0:8e:
8e:7c:5b:e7:c1:7b:05:27:ad:99:5b:7d:37:8c:ad:
87:a4:56:1b:ed:ae:99:fa:5b:c3:90:28:de:f8:20:
cc:14:fd:0b:fd:0e:fb:a3:bf:ce:bf:3b:50:15:df:
ce:f7:22:93:2f:63:8b:7b:9c:79:70:3a:04:37:11:
e0:6b:14:83:f5:53:dd:7d:8c:40:32:8e:b5:3b:77:
19:d4:e1:69:3e:57:09:c1:76:d3:94:e5:d5:93:25:
1b:9b:7f:da:4c:44:87:3a:3d:ee:f0:1f:ca:04:0d:
3f:9a:d2:a7:d2:82:c9:90:0c:e7:3e:5f:79:70:75:
0a:e2:50:82:b0:94:e7:29:b5:17:0b:6f:f1:9b:26:
52:12:da:f8:ba:ab:0b:d4:21:6b:91:49:62:e8:e3:
8d:53:66:6b:56:54:37:9c:61:28:1a:c3:1a:57:97:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:90:21:B6:27:58:46:87:F7:11:A2:9E:4F:B9:5D:9D:68:4D:43:CC
X509v3 Authority Key Identifier:
keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:75:22:4f:65:5b:fe:38:46:eb:ad:4b:40:ab:ff:32:9e:cd:
d6:06:8c:01:93:d2:2b:88:91:08:da:28:44:d8:f2:1b:97:d9:
1c:43:8d:b5:70:75:a0:8b:94:19:de:bf:a6:a8:24:c8:34:0f:
7d:1d:f3:dc:47:3a:e8:2f:c8:80:45:3a:c8:c4:ea:37:e2:c2:
40:51:88:72:a8:dd:00:4e:04:20:5a:6f:b6:fb:07:24:9c:f0:
a3:a8:d6:b0:72:9a:c2:99:9e:99:80:09:e9:5e:bb:1c:5a:65:
bd:17:15:5e:b8:f0:73:51:07:c5:48:6b:9f:2c:05:5e:50:ff:
b5:22:bd:db:0a:5a:99:56:3c:1a:1c:c6:aa:62:3f:2f:34:57:
5b:1d:f6:ab:4d:c5:01:4e:82:77:dc:62:b4:9b:33:91:77:61:
dc:17:99:63:85:3c:2d:b4:21:88:d2:60:8c:29:84:ad:55:43:
c3:4f:cf:66:1b:e4:24:04:9a:82:ee:be:ac:93:77:4c:0d:e3:
61:15:20:6a:4a:13:78:2c:31:75:73:7a:2b:5e:4e:9e:4a:76:
4b:da:1a:86:b9:8c:9b:ff:31:08:07:2f:31:6d:11:91:e5:8a:
20:3b:3b:13:3e:08:b2:41:07:a4:d7:0a:55:2f:ab:11:0f:17:
80:fc:8c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:03 2026 by rpki-client