Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: 4p9/ZaS+P9GTMgMRFlJVBZA6g8t84MI2EdXczzCaOY8=
Subject key identifier: 9A:AE:16:6E:5A:5E:5D:63:B0:8C:26:27:B1:1B:9D:60:3A:EC:22:5B
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 01A13DB8910195A66E6E0B1824E2B7FC7176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 1732
Signing time: Thu 15 Oct 2026 04:01:08 +0000
Manifest this update: Thu 15 Oct 2026 04:01:08 +0000
Manifest next update: Fri 16 Oct 2026 04:01:08 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: z//xlT6/ckTbUuqEbPWTLbhevR777+gw+SEx3TRRcRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:91:01:95:a6:6e:6e:0b:18:24:e2:b7:fc:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Oct 15 04:01:08 2026 GMT
Not After : Oct 16 04:01:08 2026 GMT
Subject: CN=9aae166e5a5e5d63b08c2627b11b9d603aec225b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:77:fb:0b:63:0a:e9:93:10:2a:03:dc:9a:eb:
2f:75:de:fa:7a:a0:c8:a2:da:38:09:b2:f1:cf:50:
76:cd:20:63:b2:92:e5:c3:dc:43:a6:f7:5e:06:2a:
b6:d8:02:96:6d:26:a7:73:8a:fe:e5:b1:96:1d:01:
c4:f1:c6:b4:f5:98:f6:43:9a:f8:a1:13:3d:5a:e1:
93:49:c9:2b:5d:e1:c8:aa:9c:ff:b4:f8:27:c1:8a:
bb:f1:c3:a7:b9:34:5f:1f:84:de:17:fb:e0:6a:2c:
b3:3e:d6:05:92:29:68:7b:e0:2e:2f:1b:95:57:5a:
7a:8f:d0:f6:3b:06:ef:a1:72:c0:ec:c5:86:91:f8:
97:b0:9b:7d:3c:fd:d3:97:d1:94:93:7c:c9:c1:78:
66:aa:29:eb:79:11:a4:98:06:e2:bc:8f:6c:6b:67:
26:37:cb:f9:ad:36:d8:e8:5d:eb:53:e5:8d:31:4c:
f3:83:b0:8f:f3:22:cf:94:f0:03:8b:01:9b:29:be:
ec:8f:01:4f:6b:33:2b:df:d2:a1:db:9b:19:28:62:
28:84:13:72:87:94:39:20:4d:fb:61:ff:a2:94:88:
96:86:f9:db:76:5c:db:9d:ea:a0:2e:a1:61:66:2c:
49:3e:d8:3f:af:16:29:30:37:07:11:40:8c:2e:af:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AE:16:6E:5A:5E:5D:63:B0:8C:26:27:B1:1B:9D:60:3A:EC:22:5B
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:86:37:6f:f1:70:12:df:92:83:f3:30:dc:ae:68:ff:a7:1c:
a5:bc:1d:3e:52:01:4a:8b:63:05:9d:c5:28:e9:97:c1:eb:b4:
35:58:75:5a:81:cd:37:aa:f6:5c:b3:41:09:3c:e6:a4:96:cc:
7c:48:f7:ac:5d:71:90:5c:ac:0a:41:0a:13:f1:55:a4:c6:b8:
a7:a4:60:58:37:12:f1:32:d2:6a:df:26:4e:9f:3b:92:94:9a:
0d:8c:89:2a:d8:15:68:63:9c:54:e9:d9:f0:71:2f:98:a4:78:
e2:9b:98:d7:6f:12:e3:9f:c1:d1:12:4b:7c:ef:23:78:46:26:
47:13:00:b5:1a:35:02:1f:8d:83:ee:2f:29:58:bc:e3:40:31:
c4:cf:14:95:b1:52:c5:14:db:38:7f:11:4e:8f:35:d6:52:ad:
c8:67:50:05:4b:c1:db:ab:b1:15:82:f4:e6:de:37:e3:9a:78:
a5:56:00:86:69:22:f4:91:09:45:31:68:81:dd:39:f6:72:44:
b6:ad:11:d6:40:91:bb:38:0e:dd:6b:8e:6f:e7:ce:93:ed:c7:
98:f7:ed:11:4d:3a:e7:27:7b:13:4f:3d:4c:c6:28:a2:f4:d3:
75:1c:1d:25:e8:1b:7c:47:a1:ac:ef:e4:d1:2a:bc:83:d9:36:
90:e8:78:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uJEBlaZubgsYJOK3/HF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx
ZTQ5OTMwHhcNMjYxMDE1MDQwMTA4WhcNMjYxMDE2MDQwMTA4WjAzMTEwLwYDVQQD
Eyg5YWFlMTY2ZTVhNWU1ZDYzYjA4YzI2MjdiMTFiOWQ2MDNhZWMyMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nf7C2MK6ZMQKgPcmusvdd76eqDI
oto4CbLxz1B2zSBjspLlw9xDpvdeBiq22AKWbSanc4r+5bGWHQHE8ca09Zj2Q5r4
oRM9WuGTSckrXeHIqpz/tPgnwYq78cOnuTRfH4TeF/vgaiyzPtYFkiloe+AuLxuV
V1p6j9D2OwbvoXLA7MWGkfiXsJt9PP3Tl9GUk3zJwXhmqinreRGkmAbivI9sa2cm
N8v5rTbY6F3rU+WNMUzzg7CP8yLPlPADiwGbKb7sjwFPazMr39Kh25sZKGIohBNy
h5Q5IE37Yf+ilIiWhvnbdlzbneqgLqFhZixJPtg/rxYpMDcHEUCMLq+9TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJquFm5aXl1jsIwmJ7EbnWA67CJbMB8GA1UdIwQY
MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt
ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm
LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIY3b/Fw
Et+Sg/Mw3K5o/6ccpbwdPlIBSotjBZ3FKOmXweu0NVh1WoHNN6r2XLNBCTzmpJbM
fEj3rF1xkFysCkEKE/FVpMa4p6RgWDcS8TLSat8mTp87kpSaDYyJKtgVaGOcVOnZ
8HEvmKR44puY128S45/B0RJLfO8jeEYmRxMAtRo1Ah+Ng+4vKVi840AxxM8UlbFS
xRTbOH8RTo811lKtyGdQBUvB26uxFYL05t4345p4pVYAhmki9JEJRTFogd059nJE
tq0R1kCRuzgO3WuOb+fOk+3HmPftEU065yd7E089TMYoovTTdRwdJegbfEehrO/k
0Sq8g9k2kOh4gA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:23:12 2026 by rpki-client