Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json)
Hash identifier: gajf6FaU6u37QMH9mUaA2SgrhjKsL67mmj1Dw/vls/w=
Subject key identifier: 50:61:AE:AB:F0:7A:02:3E:86:87:2D:64:8F:75:B3:03:02:F3:02:A1
Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Certificate serial: 01A020C3204C36143AF23788EE55601A56B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
Manifest number: 09C8
Signing time: Thu 20 Aug 2026 20:00:53 +0000
Manifest this update: Thu 20 Aug 2026 20:00:53 +0000
Manifest next update: Fri 21 Aug 2026 20:00:53 +0000
Files and hashes: 1: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: KttXOpXdMJItVYCVVT9+PDcwKYHsnA0i788yObVEukA=)
2: Fps0S7Sn9x24RbjpA_m-Wjxe4X4.roa (hash: llVgeSirYRMnxHxg+jow3ZLNY2RJpGEBaB4uInwuLpg=)
3: q7LASc7RAdvhKI2lD0l4EEgjIM4.roa (hash: Nr2UUQFi//KxEpaf+hC6t8vMKhEd7i+ElopwPR5ej6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:20:4c:36:14:3a:f2:37:88:ee:55:60:1a:56:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6
Validity
Not Before: Aug 20 20:00:53 2026 GMT
Not After : Aug 21 20:00:53 2026 GMT
Subject: CN=5061aeabf07a023e86872d648f75b30302f302a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:97:51:cb:e0:7e:1b:a7:e1:cc:6e:d3:ab:
d4:a4:25:51:96:50:c8:77:c2:f2:2d:89:a7:04:ca:
c2:cf:42:a3:7c:92:94:32:cf:b6:29:4f:57:a9:b9:
9d:87:3d:d7:f9:dd:bb:8c:09:a7:b9:39:44:27:96:
d0:00:8d:b1:ab:73:8a:4e:98:bd:9d:64:72:53:bc:
b2:de:88:45:c3:0f:af:f5:40:04:2f:c9:ea:35:33:
58:28:83:f0:8f:ed:99:21:48:7a:22:62:e5:ee:c8:
39:c1:33:a5:f9:b7:aa:59:f9:a7:64:b9:05:02:4c:
2b:54:25:d0:f8:58:4a:56:de:d9:4e:0a:b8:ba:8c:
2c:74:c3:da:a6:fe:b2:70:37:07:26:41:05:80:5a:
c9:87:50:b8:27:d5:66:dd:e7:95:bc:3d:ae:1c:3c:
7f:51:67:d3:b7:89:5f:a9:02:d5:db:93:88:c5:53:
3d:1c:a8:ce:7c:b2:b8:a9:b2:5d:65:59:32:e8:97:
5a:e7:67:11:0d:3b:b8:7d:3b:1d:2c:ea:d8:af:4a:
03:2c:6a:31:03:77:7b:22:92:b5:ca:c8:66:2f:e8:
92:74:54:b2:fd:09:e2:6a:51:dd:05:ef:5d:9d:34:
a8:4a:bc:cc:b8:27:ac:dd:60:d5:fe:e5:7d:ee:21:
20:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:61:AE:AB:F0:7A:02:3E:86:87:2D:64:8F:75:B3:03:02:F3:02:A1
X509v3 Authority Key Identifier:
keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:19:d8:85:f3:df:20:53:59:b1:53:bd:20:9f:70:36:d0:97:
70:31:c6:7a:d5:a4:35:ce:6f:85:d1:cf:4e:a4:b1:d3:07:9e:
52:a3:4a:40:41:73:e0:3f:e3:30:6e:70:96:e8:aa:c9:b4:e8:
04:80:c6:b3:ba:8d:8b:86:38:96:c0:15:27:66:f2:7d:ae:00:
66:76:00:a3:81:7e:a3:a9:8f:9d:b9:5a:16:1a:84:29:03:e9:
43:ec:39:57:bd:81:f3:5a:e6:50:60:8f:f3:0a:f7:f0:83:de:
5b:69:a0:a1:8c:60:ba:98:31:57:8e:b9:99:65:c6:eb:04:e7:
30:9f:53:6a:25:96:69:d0:07:59:20:71:2e:2b:8b:3f:51:7e:
a5:eb:65:46:e4:d2:43:7c:8e:4b:b2:2f:e9:7f:26:21:63:bf:
f3:ad:27:d7:e8:10:a9:3a:57:22:a6:7f:28:dd:bc:90:b4:42:
67:de:ea:0a:21:ef:e5:62:4e:44:2a:90:c4:71:05:38:bc:01:
77:d0:65:c4:57:43:ec:5d:74:ec:49:13:b2:cd:06:52:42:6c:
70:61:5d:ef:0d:71:5c:0c:8d:14:bb:4d:9c:4d:f1:1f:83:0e:
76:1f:e4:48:86:52:b8:00:8e:e5:92:12:f4:79:51:e0:9d:2e:
66:40:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:40 2026 by rpki-client