Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: 4fl5hsoxUlEcCw10y7mff0PuGaZqwPD+MMb+VRcO/YM=
Subject key identifier: A2:4B:B8:23:B3:F1:DA:DD:BF:75:0E:67:17:09:91:86:D6:CF:19:34
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 01A114180C4965A153489E83DAF2F23EB858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 0A46
Signing time: Wed 07 Oct 2026 02:01:22 +0000
Manifest this update: Wed 07 Oct 2026 02:01:22 +0000
Manifest next update: Thu 08 Oct 2026 02:01:22 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: Zw04C/X6eBRLkf5Le+Km7iyP+uQuViNHI+qbwi9b7Xk=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:18:0c:49:65:a1:53:48:9e:83:da:f2:f2:3e:b8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Oct 7 02:01:22 2026 GMT
Not After : Oct 8 02:01:22 2026 GMT
Subject: CN=a24bb823b3f1daddbf750e6717099186d6cf1934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b3:2b:c3:1a:66:40:28:4f:77:57:d4:8f:17:
19:56:86:57:fe:a3:e1:22:e5:0b:d4:eb:dc:8f:c8:
13:97:ed:ad:9e:64:18:a9:5b:4b:59:40:25:12:e1:
27:3e:04:96:7d:6b:f8:75:cc:aa:15:2b:e4:d0:04:
b2:c6:b3:f9:d5:d2:6e:b5:1c:19:fc:61:19:c8:7b:
0f:23:60:9c:84:eb:f1:d6:e0:fe:85:a4:37:d2:09:
5b:d3:aa:b8:0c:22:a3:d2:2c:12:d6:e4:48:e2:92:
12:1a:f8:cd:83:1a:94:7a:05:03:fc:59:5c:b1:09:
b6:5b:f1:f0:46:78:0b:05:cb:09:44:b3:41:ce:83:
55:cd:96:26:ff:34:ed:f1:e4:ef:49:df:37:29:23:
b0:4e:5e:cf:93:82:53:c8:7c:f9:ab:c4:d4:dc:64:
14:ea:35:b3:ba:5b:27:b1:76:4f:5d:f3:97:19:8a:
36:c5:3d:c4:81:e9:13:fc:fe:53:28:fd:db:a5:9c:
70:a8:ca:55:59:c9:6a:8d:70:23:99:00:b3:1e:78:
bb:97:c5:81:b1:eb:84:92:6c:78:28:84:42:81:7f:
e7:3f:b2:58:d7:ca:a6:e6:06:ef:09:bc:b2:5d:99:
88:c6:87:12:8d:0f:6b:fa:28:48:5e:76:88:bd:b5:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:B8:23:B3:F1:DA:DD:BF:75:0E:67:17:09:91:86:D6:CF:19:34
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ca:43:cc:9a:26:f7:cf:2f:f6:6b:ca:7b:b7:90:35:01:8c:
b6:44:e1:3c:d5:a2:5c:4d:21:28:dc:9a:a2:5a:d1:3d:2a:7b:
3d:55:86:34:32:02:1e:d5:78:40:08:12:4e:5e:e4:0a:2f:c8:
d1:11:2b:1f:d9:a2:a3:83:a5:2e:b3:e6:07:25:48:5c:ab:bc:
e9:c7:7f:cf:1b:a9:b3:7d:09:97:14:6c:ea:d4:53:30:35:c1:
90:48:d1:19:01:4e:0a:c6:2c:70:3d:de:95:2b:be:76:ab:0f:
d4:21:3e:a8:a6:b0:6a:b4:da:9c:43:aa:de:bf:b9:cb:94:3a:
ca:6c:9d:54:7a:e4:91:74:3a:33:38:11:a9:d3:f9:18:6f:f9:
95:59:70:df:d3:50:10:6a:2a:91:5e:52:92:6e:82:fb:55:53:
8b:46:9e:d3:d0:a9:e0:b1:a5:43:39:9f:de:64:be:ce:6c:d9:
d6:e2:56:4e:ba:a5:f6:f1:31:89:f7:eb:b6:58:87:25:82:d7:
b4:a7:d9:53:d9:8e:ec:26:c3:57:b4:49:a0:a7:71:a0:aa:2f:
70:d3:61:33:4d:77:4d:e4:ea:91:a0:b4:1e:e4:c3:7f:9a:21:
41:3d:a1:64:c1:86:ec:53:7c:06:7d:fb:34:fb:c6:78:9c:44:
f7:43:31:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:38:28 2026 by rpki-client