Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
File: 9px-uGIkrbOECIR97kz8TEADrV0.mft (raw, json)
Hash identifier: LpDHzKX+5JaCbwGeicSCmfCrjYTJJyqGBBle6b4d9is=
Subject key identifier: 2A:83:4A:BE:8F:C0:2C:28:98:8F:2E:8A:53:2A:07:94:0D:BB:AC:AE
Authority key identifier: F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
Certificate issuer: /CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Certificate serial: 01A1913192715BCE97BED17E1E1F80787F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
Manifest number: 132E
Signing time: Sat 31 Oct 2026 09:01:47 +0000
Manifest this update: Sat 31 Oct 2026 09:01:47 +0000
Manifest next update: Sun 01 Nov 2026 09:01:47 +0000
Files and hashes: 1: 9px-uGIkrbOECIR97kz8TEADrV0.crl (hash: 9Y1Ay4Xsd0dy/iPbUDOSHAyK65VEYjX3WWX+LmQh544=)
2: Ue9DIINKYrGn1tdejFEb6gztPV4.roa (hash: c1z5wiNQ531GjFPY2V7nJM/EQVknOfa3Q0UMyTLhXdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:92:71:5b:ce:97:be:d1:7e:1e:1f:80:78:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69c7eb86224adb38408847dee4cfc4c4003ad5d
Validity
Not Before: Oct 31 09:01:47 2026 GMT
Not After : Nov 1 09:01:47 2026 GMT
Subject: CN=2a834abe8fc02c28988f2e8a532a07940dbbacae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8b:ed:23:b5:b9:9d:63:ca:30:53:c0:79:d0:
4a:18:d0:ef:ec:a4:d4:64:c3:44:ca:69:a9:8f:f4:
01:ca:3d:d5:51:d8:ab:2d:35:52:c2:7a:b5:4d:d9:
c0:ef:4f:4e:f1:8c:13:3c:46:25:bc:6f:fe:b0:df:
f7:99:e8:7b:c9:95:b7:0f:4d:50:d9:dc:a2:15:98:
4a:01:bc:cd:c2:ce:13:ff:d3:cc:1e:10:c3:7a:1c:
04:68:34:ba:0e:c8:fc:9f:3e:e2:4b:70:55:cc:aa:
d1:1e:14:7c:d4:9f:9b:8e:23:b5:e6:ed:59:f2:aa:
29:af:8e:24:19:58:e6:1c:7c:33:7f:08:a4:2b:b4:
b2:f2:e1:1a:43:aa:7f:05:f6:c3:2c:e3:63:7c:7f:
28:08:e8:97:ad:f4:3a:b1:c1:0e:9b:59:95:6a:ab:
79:34:6e:bc:44:53:1b:65:65:cb:3d:ea:1a:6f:31:
41:81:40:64:fe:9f:bf:14:9a:40:21:fb:89:a1:7f:
de:03:68:9d:02:08:6a:24:28:97:c9:85:2e:55:a0:
db:4e:37:bb:38:98:5c:b2:0a:7c:a9:df:02:83:9b:
8a:d5:46:ac:2c:7b:f5:12:de:f4:46:08:0e:f0:2d:
6c:8f:fe:20:a5:57:46:11:d0:ac:5c:01:c6:12:1f:
90:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:83:4A:BE:8F:C0:2C:28:98:8F:2E:8A:53:2A:07:94:0D:BB:AC:AE
X509v3 Authority Key Identifier:
keyid:F6:9C:7E:B8:62:24:AD:B3:84:08:84:7D:EE:4C:FC:4C:40:03:AD:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9px-uGIkrbOECIR97kz8TEADrV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/834e82-f863-4ca8-8061-f616d9318087/1/9px-uGIkrbOECIR97kz8TEADrV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:48:17:c8:0e:e6:6a:2e:7a:a2:87:2a:05:27:50:23:63:a6:
6f:5b:3e:9d:c4:e3:c2:f4:5a:37:46:c9:14:29:60:25:b0:c4:
1f:81:17:0f:bd:3b:df:97:db:1b:db:7f:36:57:5a:49:37:eb:
e7:07:ea:78:c7:ec:1a:8f:e9:f6:4f:a7:bc:5b:d0:5e:8f:7c:
13:2b:de:27:6d:19:3a:81:a2:dc:f2:7f:60:c2:37:e2:b4:8b:
30:f4:c5:44:da:7c:7a:d5:7b:94:03:ee:19:fb:2b:99:6b:ca:
bf:7b:5c:02:1a:42:27:76:80:da:ff:e4:1e:87:c4:90:93:ee:
46:ee:36:f5:92:00:1a:28:7b:aa:74:b7:96:31:68:45:2e:1c:
aa:44:da:9b:e1:39:b7:47:58:b6:4e:f7:f5:57:31:3b:4d:f0:
6f:94:1d:3e:e0:49:58:25:e5:75:8f:76:9d:b2:10:27:a0:2e:
2e:89:01:6e:93:80:5c:79:c0:e6:fa:b3:d9:30:c7:bf:ec:2f:
1c:25:a1:d5:6f:96:4e:78:4c:c5:2d:d1:ff:d6:0a:8f:fe:4c:
4b:6a:84:bf:51:33:a8:e5:0c:e9:b8:24:fe:55:29:ad:6d:b8:
6d:14:cc:9d:fb:13:61:4a:ef:b4:e8:07:3d:3a:29:ec:9d:40:
bc:ee:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:31:55 2026 by rpki-client