Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: o9F47UQSWQrGj3o+vmEbH8fBz0KfG4blsbFDILJd/TM=
Subject key identifier: 2D:FD:A9:FC:FB:62:6C:A2:D3:9B:E1:12:5E:C1:C3:E3:0F:2C:1E:F7
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 01A08AC395AC0E97223BB1A68D311127BC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:01:08 +0000
Manifest this update: Thu 10 Sep 2026 10:01:08 +0000
Manifest next update: Fri 11 Sep 2026 10:01:08 +0000
Files and hashes: 1: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: tGLMd03up6Na8gI3aDdX90dwckXjmEumkLJ+WyR8AKQ=)
2: yfiieDo9iLegYVxPGWv16UQ43As.roa (hash: SYrqg0nXFiIlwOea5YRswLpoCOBeZ7BwjysKy4Ug6lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:95:ac:0e:97:22:3b:b1:a6:8d:31:11:27:bc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Sep 10 10:01:08 2026 GMT
Not After : Sep 11 10:01:08 2026 GMT
Subject: CN=2dfda9fcfb626ca2d39be1125ec1c3e30f2c1ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:b3:ce:6a:98:f5:63:8d:b0:39:45:53:9c:
64:95:47:e6:81:e0:e5:92:fb:05:7c:c6:00:21:b7:
e3:3f:a2:ec:1f:c2:93:ca:e8:56:69:dc:cc:f4:71:
47:d3:e2:61:a6:02:78:ae:1d:a4:67:1b:da:69:73:
6d:4c:13:f1:21:38:3c:c7:d9:58:d5:54:10:76:19:
96:b7:64:b2:93:b0:54:28:ce:f0:f6:2c:18:3d:e9:
10:ef:d5:c4:7f:0f:65:11:0a:ed:33:cc:da:34:13:
cf:b7:40:0c:78:0d:5f:a5:ac:20:2c:81:ae:81:c0:
c9:99:74:84:ec:fb:55:a7:df:ef:26:82:bf:1c:a4:
dd:b9:bf:7f:dc:99:f2:cc:c5:9e:4d:8d:7c:e7:4e:
87:83:5f:0b:40:1d:b6:3e:17:94:b6:0a:31:92:d1:
cd:ce:04:ba:18:87:4d:35:fd:80:88:b5:30:83:d2:
c2:40:1f:86:4b:ac:e0:c5:d1:00:79:4e:c4:29:7c:
a2:7e:5c:d6:aa:82:23:a2:cf:bb:02:59:81:42:24:
4d:f8:36:38:a2:9d:a9:aa:d9:c0:1a:e6:52:50:9e:
ca:20:8c:22:b5:cb:49:d7:2e:bc:ad:80:83:28:e9:
6a:bb:b6:80:07:e7:3c:bb:cc:0a:f5:d0:ee:a5:31:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:A9:FC:FB:62:6C:A2:D3:9B:E1:12:5E:C1:C3:E3:0F:2C:1E:F7
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:67:d5:bf:bc:3c:be:4d:db:ad:2e:b5:f6:fb:c1:96:e5:d4:
c7:75:19:3f:09:ef:01:34:16:b6:f5:42:4c:42:60:29:2f:84:
0d:38:97:b7:da:ac:49:1b:2b:2e:82:f2:e8:f7:d4:eb:7a:a2:
45:57:96:42:7d:68:5d:aa:0b:69:e2:22:ef:d1:09:a7:e2:24:
95:1e:a2:2d:f4:5b:b2:f9:54:92:58:fd:55:a7:6b:ef:3e:21:
d2:eb:1b:44:12:0f:6f:aa:cf:e7:a0:4a:0e:62:d9:e1:7b:e6:
09:1d:7f:ba:86:d6:ce:86:36:62:78:40:a4:ba:6d:5a:b3:76:
55:e9:1a:6d:30:74:ed:b4:ba:b3:4a:38:8f:b6:03:cc:6f:9e:
ef:4a:b2:d9:8d:e1:20:a1:b8:3b:f6:0b:a5:74:34:8a:f4:bc:
e4:d6:e0:ec:51:04:ca:d9:a8:d3:dc:20:55:c0:7e:7d:b1:51:
52:27:35:93:0b:43:ee:91:6d:7c:b4:65:05:4a:29:34:22:e2:
a1:3c:9c:bd:34:0d:9e:1d:a6:1a:28:56:64:59:2f:f9:a2:23:
12:fe:f8:e6:1a:ee:fe:d3:30:5c:b7:b4:93:b7:0e:fd:28:a1:
3b:e9:d8:ed:a1:d4:bc:fc:b4:04:f5:9c:9d:ae:25:79:22:dc:
93:54:06:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:19:40 2026 by rpki-client