Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
File: 9aSNNBWgK5T1T-4rZZSPJetPfdo.mft (raw, json)
Hash identifier: 6lBoHqSndFGYjTicjM/mmEMmb1yZGsR7Bm9c2CiyBQg=
Subject key identifier: 14:79:3B:3C:2C:E4:1D:8B:18:E5:A6:60:F3:BB:9B:FA:08:88:00:DA
Authority key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Certificate issuer: /CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Certificate serial: 01A0E32B50DBD726B50B3268AF115711C77B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
Manifest number: 011F
Signing time: Sun 27 Sep 2026 14:01:01 +0000
Manifest this update: Sun 27 Sep 2026 14:01:01 +0000
Manifest next update: Mon 28 Sep 2026 14:01:01 +0000
Files and hashes: 1: 9aSNNBWgK5T1T-4rZZSPJetPfdo.crl (hash: k3XrIpDaRiB77/WAgMPcZlySn1OylvWpktp22XBpIP8=)
2: KB-nu_fDuo0XIMgqWugjNtPelKM.asa (hash: xVtyR3/ZytBeSN3L364bzhtV6xgki7m57Wrm3JRE2Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:50:db:d7:26:b5:0b:32:68:af:11:57:11:c7:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Validity
Not Before: Sep 27 14:01:01 2026 GMT
Not After : Sep 28 14:01:01 2026 GMT
Subject: CN=14793b3c2ce41d8b18e5a660f3bb9bfa088800da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:78:fc:c8:aa:14:94:da:ae:2d:80:65:ba:
e2:ff:c9:c4:a8:80:74:47:bb:63:ea:df:88:92:68:
cc:e7:68:8d:c0:f7:3b:d6:fa:14:3a:2e:66:4e:d1:
5f:03:09:a7:6e:ec:5e:2f:78:e7:91:ae:5a:50:c1:
2a:80:bc:5e:c3:59:8d:95:c8:c8:6d:d2:5c:af:5c:
ec:3f:91:fa:e0:87:bd:0e:52:10:fc:89:a4:d3:f2:
6a:1a:83:ce:07:04:00:d4:30:d8:54:c1:6c:0f:6b:
47:04:f1:ac:e9:38:c6:fc:0c:0a:33:29:e5:b6:56:
f1:f2:e0:b8:14:30:a9:fc:85:b7:4d:36:be:c9:d5:
c9:54:41:f1:fd:f9:c2:79:71:b3:75:ce:8c:55:89:
a6:58:ed:52:16:86:99:d9:ee:00:8b:55:7f:8c:56:
6a:27:2d:79:49:56:89:10:db:d4:82:9e:4a:dd:73:
04:e1:8e:17:45:09:cd:b4:0f:ed:e8:16:f9:e4:af:
a7:dd:fc:3f:ac:64:74:82:52:7d:a5:46:ec:51:0b:
7d:62:dd:0e:26:c8:bf:b4:8a:16:22:1a:b1:3f:63:
c3:13:84:21:37:f4:ed:19:e6:6e:41:63:8d:5d:71:
70:f2:d7:36:25:e5:4c:df:f2:a3:a2:b9:c0:13:3e:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:79:3B:3C:2C:E4:1D:8B:18:E5:A6:60:F3:BB:9B:FA:08:88:00:DA
X509v3 Authority Key Identifier:
keyid:F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6c:74:ac:b1:f8:c5:09:fd:f0:f5:23:14:c4:5c:7d:ab:73:
5d:bf:55:f0:27:7c:32:42:53:3a:fc:d4:86:82:ad:9c:1f:c2:
b3:b2:2c:d2:39:47:24:29:67:07:7f:37:ac:c3:2f:f3:23:6b:
68:cb:40:13:6f:ea:70:34:68:38:25:de:40:e5:e5:87:86:41:
ec:22:2a:b3:3f:77:e6:47:00:fc:18:0c:ef:e4:df:8d:9a:24:
97:a1:c3:b2:a5:4c:dc:05:cf:2e:12:2a:bf:b0:0e:56:d3:68:
22:8c:f9:24:2f:6a:29:73:f4:65:00:cb:88:53:90:12:4b:72:
0e:43:5d:b0:4a:c1:57:d3:49:3c:48:66:61:ca:7f:9a:2e:89:
4d:98:0b:15:fc:5f:1e:00:d5:22:5c:64:d5:c4:1c:7b:05:e9:
9f:17:96:ac:20:eb:71:97:77:24:c7:8d:6a:c3:b2:9e:a3:46:
a3:c4:9c:d4:7e:2a:c5:e9:11:57:03:d3:81:86:d8:99:a3:7f:
a4:45:2f:17:90:5e:37:e8:8c:5a:79:10:98:ca:c1:9a:68:92:
b6:5d:c4:19:00:c7:01:cd:12:64:9f:a8:2a:97:dd:e2:0a:b2:
72:3d:8d:5c:14:5d:94:da:94:99:ce:73:84:d3:52:6d:63:fb:
6a:c8:d5:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK1Db1ya1CzJorxFXEcd7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTQ4ZDM0MTVhMDJiOTRmNTRmZWUyYjY1OTQ4ZjI1ZWI0
ZjdkZGEwHhcNMjYwOTI3MTQwMTAxWhcNMjYwOTI4MTQwMTAxWjAzMTEwLwYDVQQD
EygxNDc5M2IzYzJjZTQxZDhiMThlNWE2NjBmM2JiOWJmYTA4ODgwMGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiZ4/MiqFJTari2AZbri/8nEqIB0
R7tj6t+IkmjM52iNwPc71voUOi5mTtFfAwmnbuxeL3jnka5aUMEqgLxew1mNlcjI
bdJcr1zsP5H64Ie9DlIQ/Imk0/JqGoPOBwQA1DDYVMFsD2tHBPGs6TjG/AwKMynl
tlbx8uC4FDCp/IW3TTa+ydXJVEHx/fnCeXGzdc6MVYmmWO1SFoaZ2e4Ai1V/jFZq
Jy15SVaJENvUgp5K3XME4Y4XRQnNtA/t6Bb55K+n3fw/rGR0glJ9pUbsUQt9Yt0O
Jsi/tIoWIhqxP2PDE4QhN/TtGeZuQWONXXFw8tc2JeVM3/KjornAEz51vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR5Ozws5B2LGOWmYPO7m/oIiADaMB8GA1UdIwQY
MBaAFPWkjTQVoCuU9U/uK2WUjyXrT33aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFTTk5CV2dLNVQxVC00clpaU1BKZXRQZmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85MTI3MDctOWVhZi00ZGQ3LWE1NTkt
YzliMTVlZTlmYTg0LzEvOWFTTk5CV2dLNVQxVC00clpaU1BKZXRQZmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85MTI3MDctOWVhZi00ZGQ3LWE1NTktYzliMTVlZTlmYTg0
LzEvOWFTTk5CV2dLNVQxVC00clpaU1BKZXRQZmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWx0rLH4
xQn98PUjFMRcfatzXb9V8Cd8MkJTOvzUhoKtnB/Cs7Is0jlHJClnB383rMMv8yNr
aMtAE2/qcDRoOCXeQOXlh4ZB7CIqsz935kcA/BgM7+TfjZokl6HDsqVM3AXPLhIq
v7AOVtNoIoz5JC9qKXP0ZQDLiFOQEktyDkNdsErBV9NJPEhmYcp/mi6JTZgLFfxf
HgDVIlxk1cQcewXpnxeWrCDrcZd3JMeNasOynqNGo8Sc1H4qxekRVwPTgYbYmaN/
pEUvF5BeN+iMWnkQmMrBmmiStl3EGQDHAc0SZJ+oKpfd4gqycj2NXBRdlNqUmc5z
hNNSbWP7asjVQQ==
-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:12 2026 by rpki-client