Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: 3IDjAw0bZA67n1m8c3xkpnssxVNXCFZ14xA5bsrxKYk=
Subject key identifier: 02:BA:45:0D:E3:12:F5:C2:BB:92:3D:A9:10:AC:1E:9F:76:17:AD:2F
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 01A001A628BB1E3D64C21FBBE108D09918E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 06FF
Signing time: Fri 14 Aug 2026 19:01:01 +0000
Manifest this update: Fri 14 Aug 2026 19:01:01 +0000
Manifest next update: Sat 15 Aug 2026 19:01:01 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: +42ljVstvDzbRVFWSJlQ2idWcQj8LzdXpDgxl+7p938=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:28:bb:1e:3d:64:c2:1f:bb:e1:08:d0:99:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Aug 14 19:01:01 2026 GMT
Not After : Aug 15 19:01:01 2026 GMT
Subject: CN=02ba450de312f5c2bb923da910ac1e9f7617ad2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:f8:d7:9c:04:26:41:a2:b3:43:9e:54:9a:
b1:92:18:9c:86:c3:c4:88:98:1f:0c:97:97:0f:0e:
bf:38:ab:52:f0:4d:0e:93:79:88:ff:17:31:e1:cc:
8b:e3:b2:7b:39:85:53:f0:91:f5:c2:45:62:1a:a2:
6b:55:33:b5:b6:cf:af:42:3c:ce:3c:33:57:3f:82:
59:14:ce:79:67:df:72:a4:8a:ad:22:7e:bd:2a:83:
ca:fc:fa:12:1a:ed:1d:36:63:56:6c:d0:be:43:10:
c8:39:37:92:de:32:05:80:c1:b3:f6:85:df:be:46:
eb:a2:af:4e:8f:db:d2:bf:62:a5:2d:40:89:51:d2:
80:08:5a:ef:59:b1:5a:39:72:9c:f5:34:4a:c0:9e:
6e:48:9a:88:6c:4f:4c:ff:a7:0a:08:f4:bd:a6:1b:
fb:d1:e2:b4:f0:b0:0f:4c:f9:83:f6:a7:83:c3:bf:
e7:79:cf:5a:5d:e5:a7:64:e1:c1:76:61:d9:15:0d:
b6:65:e9:b9:20:1c:f0:93:5b:03:42:fc:b1:df:b7:
58:e9:eb:86:47:4e:0b:34:78:b2:34:cc:02:c9:55:
f5:c5:9f:31:7c:05:2c:7d:a6:97:c4:54:9a:a1:69:
bb:02:13:e7:88:81:dc:65:eb:67:25:16:7f:83:34:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BA:45:0D:E3:12:F5:C2:BB:92:3D:A9:10:AC:1E:9F:76:17:AD:2F
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:61:ca:fe:c8:0c:9f:fe:5a:79:4d:c4:25:d7:2f:55:27:48:
10:07:07:f2:4b:e1:b3:af:63:d2:18:16:27:30:92:9a:ff:5e:
cc:4e:d0:47:a7:62:69:3b:f1:d8:90:03:05:98:ce:06:94:fb:
af:e7:e3:84:ef:cf:ed:ba:d5:49:02:26:b4:1d:7a:a5:f3:7e:
8b:9a:fa:02:96:a9:9f:98:34:a6:98:f7:41:f0:96:b4:94:df:
3b:e3:5d:58:48:da:fd:b3:d9:49:9f:2b:2c:00:5c:2c:3d:3e:
92:59:7a:fe:92:e7:56:3d:9b:6c:6a:b3:e6:e7:2e:32:be:e8:
8e:e4:1a:c3:7b:71:e7:5f:a1:60:60:f1:32:6e:01:ef:af:8f:
73:ae:fb:55:38:01:ea:84:2f:54:1b:e3:ae:fb:a3:06:b5:be:
fe:11:c4:01:3d:97:7b:f4:1c:f4:af:dc:63:eb:5b:d8:08:99:
4d:fe:66:c4:6e:20:cf:db:0f:22:0a:68:96:00:ff:10:89:5d:
d5:7f:66:61:56:e0:16:0b:25:58:8d:77:c7:8f:33:bf:46:f5:
43:69:df:a2:8f:f2:b4:6a:ea:eb:30:67:9b:ef:89:20:ae:c8:
03:26:4c:0d:a1:51:48:5e:4f:86:de:83:26:e0:40:43:a7:9e:
d2:5c:45:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpii7Hj1kwh+74QjQmRjoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2N2Q2N2RhODg2MGI4MzIyYzRmMjA0ZDYxMWIwMDYxMzhm
MWIzOTEwHhcNMjYwODE0MTkwMTAxWhcNMjYwODE1MTkwMTAxWjAzMTEwLwYDVQQD
EygwMmJhNDUwZGUzMTJmNWMyYmI5MjNkYTkxMGFjMWU5Zjc2MTdhZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJj415wEJkGis0OeVJqxkhichsPE
iJgfDJeXDw6/OKtS8E0Ok3mI/xcx4cyL47J7OYVT8JH1wkViGqJrVTO1ts+vQjzO
PDNXP4JZFM55Z99ypIqtIn69KoPK/PoSGu0dNmNWbNC+QxDIOTeS3jIFgMGz9oXf
vkbroq9Oj9vSv2KlLUCJUdKACFrvWbFaOXKc9TRKwJ5uSJqIbE9M/6cKCPS9phv7
0eK08LAPTPmD9qeDw7/nec9aXeWnZOHBdmHZFQ22Zem5IBzwk1sDQvyx37dY6euG
R04LNHiyNMwCyVX1xZ8xfAUsfaaXxFSaoWm7AhPniIHcZetnJRZ/gzRfuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK6RQ3jEvXCu5I9qRCsHp92F60vMB8GA1UdIwQY
MBaAFPZ9Z9qIYLgyLE8gTWEbAGE48bORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQt
YmYyYjhiNDg0NjVmLzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQtYmYyYjhiNDg0NjVm
LzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2HK/sgM
n/5aeU3EJdcvVSdIEAcH8kvhs69j0hgWJzCSmv9ezE7QR6diaTvx2JADBZjOBpT7
r+fjhO/P7brVSQImtB16pfN+i5r6Apapn5g0ppj3QfCWtJTfO+NdWEja/bPZSZ8r
LABcLD0+kll6/pLnVj2bbGqz5ucuMr7ojuQaw3tx51+hYGDxMm4B76+Pc677VTgB
6oQvVBvjrvujBrW+/hHEAT2Xe/Qc9K/cY+tb2AiZTf5mxG4gz9sPIgpolgD/EIld
1X9mYVbgFgslWI13x48zv0b1Q2nfoo/ytGrq6zBnm++JIK7IAyZMDaFRSF5Pht6D
JuBAQ6ee0lxF3Q==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:08 2026 by rpki-client