
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: pelwvnTq3YS3HZc5j1dzAJaeOUUTb8lo4Dk+J06qOzQ=
Subject key identifier: D0:B1:87:16:BA:07:12:4B:A8:0E:34:5E:A0:3E:50:7A:CC:0C:6C:A5
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 01A13E5CD554B26BD13BAD3C672828C5DC36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 07A3
Signing time: Thu 15 Oct 2026 07:00:33 +0000
Manifest this update: Thu 15 Oct 2026 07:00:33 +0000
Manifest next update: Fri 16 Oct 2026 07:00:33 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: qPTJnmGtHh7LaaSsw5S1Skpfm88xqGuXBYfJ+xb0DVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:d5:54:b2:6b:d1:3b:ad:3c:67:28:28:c5:dc:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Oct 15 07:00:33 2026 GMT
Not After : Oct 16 07:00:33 2026 GMT
Subject: CN=d0b18716ba07124ba80e345ea03e507acc0c6ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:a9:d8:0d:94:71:8c:19:cf:67:5c:a4:9f:
12:d4:b7:13:dc:87:dc:8d:72:a6:c0:a2:8d:ee:2d:
8c:86:e9:1d:2c:fe:8e:66:c0:38:ce:b6:55:ab:4d:
91:f4:b9:5d:c5:c3:b3:c5:cd:43:59:c5:9a:1d:a0:
b9:67:82:bd:cb:a2:84:ad:88:b5:fa:cd:5b:2d:cd:
42:31:b3:ef:7d:11:ce:54:cc:26:56:62:6f:75:4f:
1b:93:16:26:89:20:29:7a:20:75:97:23:d8:72:91:
75:06:24:c7:5a:d6:83:93:2f:25:c6:9b:73:c5:3f:
29:12:c9:3d:e9:32:30:01:a4:e6:4a:29:5c:10:5a:
f6:af:c0:34:5f:27:aa:63:fa:ca:5c:6b:8a:3c:c4:
19:79:7a:d3:cd:c7:de:d0:43:6b:d2:ad:8b:88:88:
90:3b:68:a4:98:f8:82:16:db:33:1b:6c:ab:59:19:
56:f5:ad:4b:a3:f3:8f:45:61:5c:e1:a1:1b:2e:a2:
8f:91:12:7c:2c:de:5f:e0:58:ce:f7:8e:5f:2f:56:
f0:94:4e:83:2d:a4:9e:13:d9:e1:e5:29:d6:e3:ba:
42:42:d2:98:45:f3:f3:08:10:0b:ed:4b:de:80:38:
3e:d2:9e:29:df:56:6b:a6:87:37:26:cd:23:2e:a7:
1a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B1:87:16:BA:07:12:4B:A8:0E:34:5E:A0:3E:50:7A:CC:0C:6C:A5
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:c4:70:07:ef:5b:05:0d:31:97:35:42:23:e6:8f:20:82:de:
1c:39:60:4b:56:f0:45:0f:35:4b:52:8a:cf:d6:15:bd:b1:9e:
02:64:ac:71:40:d8:da:64:39:a6:80:fe:3d:dc:eb:67:82:5b:
15:73:38:13:10:57:39:5f:e4:0a:cb:b3:1d:c5:c8:cb:0a:c4:
d1:b5:98:bf:7c:dd:df:72:04:78:6f:18:88:d3:a9:02:30:24:
c0:e5:a4:3e:d3:d4:c7:5a:13:5a:22:0a:4c:d2:29:96:0e:a4:
91:14:45:87:7b:c1:03:92:75:da:a2:0a:e3:1f:b6:cd:80:37:
c6:64:98:bb:73:86:a9:2b:c5:32:19:60:78:cb:43:02:a9:1c:
57:72:70:1c:e5:a6:4a:21:d5:df:d8:92:4c:15:38:fc:b4:ac:
89:02:0b:51:99:8b:0b:06:91:98:22:ef:82:92:d2:98:05:c0:
02:1a:35:a0:1d:77:c6:c0:b9:e3:cf:76:4d:8e:09:2b:1a:ff:
dc:e4:ba:4f:fc:20:56:6f:fa:dd:ff:a4:b0:67:d9:db:10:2f:
06:bd:8a:39:e6:c5:2f:6c:3b:0c:d6:19:aa:92:2a:fd:ca:70:
c5:ea:79:ba:f1:03:c9:d6:85:9b:fd:0e:3c:cb:35:0a:f4:2d:
43:aa:f2:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XNVUsmvRO608Zygoxdw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2N2Q2N2RhODg2MGI4MzIyYzRmMjA0ZDYxMWIwMDYxMzhm
MWIzOTEwHhcNMjYxMDE1MDcwMDMzWhcNMjYxMDE2MDcwMDMzWjAzMTEwLwYDVQQD
EyhkMGIxODcxNmJhMDcxMjRiYTgwZTM0NWVhMDNlNTA3YWNjMGM2Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSCp2A2UcYwZz2dcpJ8S1LcT3Ifc
jXKmwKKN7i2MhukdLP6OZsA4zrZVq02R9LldxcOzxc1DWcWaHaC5Z4K9y6KErYi1
+s1bLc1CMbPvfRHOVMwmVmJvdU8bkxYmiSApeiB1lyPYcpF1BiTHWtaDky8lxptz
xT8pEsk96TIwAaTmSilcEFr2r8A0XyeqY/rKXGuKPMQZeXrTzcfe0ENr0q2LiIiQ
O2ikmPiCFtszG2yrWRlW9a1Lo/OPRWFc4aEbLqKPkRJ8LN5f4FjO945fL1bwlE6D
LaSeE9nh5SnW47pCQtKYRfPzCBAL7UvegDg+0p4p31Zrpoc3Js0jLqcaFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCxhxa6BxJLqA40XqA+UHrMDGylMB8GA1UdIwQY
MBaAFPZ9Z9qIYLgyLE8gTWEbAGE48bORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQt
YmYyYjhiNDg0NjVmLzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQtYmYyYjhiNDg0NjVm
LzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAusRwB+9b
BQ0xlzVCI+aPIILeHDlgS1bwRQ81S1KKz9YVvbGeAmSscUDY2mQ5poD+PdzrZ4Jb
FXM4ExBXOV/kCsuzHcXIywrE0bWYv3zd33IEeG8YiNOpAjAkwOWkPtPUx1oTWiIK
TNIplg6kkRRFh3vBA5J12qIK4x+2zYA3xmSYu3OGqSvFMhlgeMtDAqkcV3JwHOWm
SiHV39iSTBU4/LSsiQILUZmLCwaRmCLvgpLSmAXAAho1oB13xsC54892TY4JKxr/
3OS6T/wgVm/63f+ksGfZ2xAvBr2KOebFL2w7DNYZqpIq/cpwxep5uvEDydaFm/0O
PMs1CvQtQ6ry2Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:46 2026 by rpki-client