Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json)
Hash identifier: tfT0tXTuSdqrysKif1pjCKlXiKUmr0chsktu/xSdRKQ=
Subject key identifier: 4A:FC:06:86:F0:E4:3B:9A:81:7D:4F:67:36:42:86:B5:5F:7D:9A:EC
Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Certificate serial: 01A0897978EF6D2DE5F4361795543AFC12CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 04:00:34 +0000
Manifest this update: Thu 10 Sep 2026 04:00:34 +0000
Manifest next update: Fri 11 Sep 2026 04:00:34 +0000
Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: rT33v7ny2riSz3E+sM0SQEgKYzPavyE2oRNDVtCwQAk=)
2: L3FElQgN_OK9ME85XjkPB5d4njo.roa (hash: 7fKQw9/kLDh7zT4p1MB3dQg/LI4nczVMbuMgYO277J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:78:ef:6d:2d:e5:f4:36:17:95:54:3a:fc:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689
Validity
Not Before: Sep 10 04:00:34 2026 GMT
Not After : Sep 11 04:00:34 2026 GMT
Subject: CN=4afc0686f0e43b9a817d4f67364286b55f7d9aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:32:ae:51:fa:37:2a:c2:54:96:c6:22:a9:
5a:26:f0:55:8a:08:ff:d9:eb:0f:64:12:36:b1:59:
56:7d:3c:23:45:fd:05:56:89:90:37:4b:0b:c2:6c:
92:84:cf:32:63:e2:76:88:2f:fe:0f:32:37:b6:e4:
c5:13:d1:66:a5:00:ba:87:ac:42:38:38:8f:54:69:
f5:22:68:7e:ac:9c:f6:43:7e:f0:0e:6d:1a:87:01:
e7:f5:51:63:2c:d8:6b:25:c4:50:d4:47:c9:3e:de:
97:ea:d0:4e:d9:e3:05:6f:46:44:51:d5:c1:ad:df:
0f:fe:9b:24:ad:d2:66:88:12:1f:f7:fe:8e:61:96:
39:8f:28:3a:1e:09:97:cd:4a:eb:1d:25:d0:71:72:
52:f3:6e:13:4a:47:91:aa:35:9d:c4:5d:9c:b8:ed:
47:8f:19:46:01:74:50:c9:33:34:90:4f:c6:a3:e8:
58:19:5b:9c:05:ab:0a:a6:18:a2:ad:a6:89:f4:0c:
e0:cb:f1:1c:69:66:3e:ca:91:98:3c:f9:20:d5:14:
26:74:c7:c8:ec:60:79:6e:77:10:44:91:31:0c:40:
6e:5f:fb:c3:05:e5:e2:ad:23:50:52:0e:e8:ae:eb:
3f:8b:35:a8:3f:77:69:b1:38:84:e9:32:7d:97:d5:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FC:06:86:F0:E4:3B:9A:81:7D:4F:67:36:42:86:B5:5F:7D:9A:EC
X509v3 Authority Key Identifier:
keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ed:ae:95:12:78:53:7e:d4:77:56:5d:18:73:e8:42:dc:24:
4b:eb:01:5a:c5:b0:30:97:8b:e6:41:63:67:35:7e:a5:5b:77:
b8:2c:f1:0c:9d:f9:81:54:66:58:d3:a4:34:89:02:37:40:fe:
9e:0d:85:ba:85:74:85:3d:95:8e:df:4d:4c:89:0a:1c:e3:ef:
f9:58:b9:25:8b:cd:8a:aa:73:70:58:62:ae:11:e1:54:93:25:
5b:93:11:a2:a3:3f:8e:b5:ab:3e:87:f9:73:40:f8:16:13:f4:
e4:08:6a:f0:df:b7:14:9a:56:42:f3:d7:9f:fb:19:e3:9c:8e:
76:ad:ac:19:18:50:a3:de:17:bf:fc:d7:92:d1:93:a1:85:b4:
ae:4f:e8:1d:90:1a:fb:43:57:dc:b0:25:f6:4e:6e:55:4b:6d:
6f:e4:7a:e2:38:d0:db:b8:d0:80:60:a8:1e:19:c7:e1:e7:d2:
5d:7e:24:e7:63:b8:d1:14:1e:4b:cb:a7:2a:04:01:8d:b0:b6:
04:70:c6:30:6f:e5:43:9e:ee:00:a7:2b:e6:09:97:5e:ca:ff:
57:a8:88:c4:4d:4f:b6:29:66:a7:df:c9:2a:51:55:b3:f9:34:
ee:de:a5:bf:7f:83:6f:39:60:55:1c:78:ad:02:c0:74:c0:67:
1b:df:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:50:27 2026 by rpki-client