Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json)
Hash identifier: ATaz2IL6AGtTUEcRzgO0aVoZ+ORoVSDT/LtjjcBoNOA=
Subject key identifier: 17:23:29:A1:D9:5D:B0:20:28:BD:92:49:91:7B:84:3D:23:49:BD:25
Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0
Certificate serial: 01A000C9F2DF80939110BF5911B4C8A926B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
Manifest number: 0BEE
Signing time: Fri 14 Aug 2026 15:00:29 +0000
Manifest this update: Fri 14 Aug 2026 15:00:29 +0000
Manifest next update: Sat 15 Aug 2026 15:00:29 +0000
Files and hashes: 1: 5VaEr_9CgIk0hDvBuz897kphjAA.roa (hash: O8HVzXpA3yJisGesiXqBb6I5Gg2zmpPDn2gcT3B2Ub8=)
2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: JriPVtGlNiAPnVVcZNGWQTnBEB/nNj630gOOtY7l/VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:c9:f2:df:80:93:91:10:bf:59:11:b4:c8:a9:26:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0
Validity
Not Before: Aug 14 15:00:29 2026 GMT
Not After : Aug 15 15:00:29 2026 GMT
Subject: CN=172329a1d95db02028bd9249917b843d2349bd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:95:b6:a7:c5:2e:80:97:01:11:ec:92:d3:
ed:7e:b4:25:37:31:e4:3b:13:60:d5:d9:4e:59:23:
d5:f5:d5:aa:41:73:62:7c:e5:99:cd:4c:5c:9f:31:
ed:ff:70:ea:b9:ae:e5:58:a9:3f:f2:56:83:6f:31:
8c:d3:fc:8c:17:1b:4e:78:51:28:43:6a:34:6b:70:
3e:e7:8e:19:32:c4:5d:47:cd:25:a8:06:3c:cb:9e:
59:a2:22:0f:99:22:88:2c:55:8d:a6:d8:f7:b1:44:
a4:ef:d1:a2:d9:9c:c5:02:d8:8e:01:02:fb:c9:96:
ae:3a:e9:bf:2b:27:68:48:8b:23:64:f6:04:30:9d:
71:e6:c3:0b:18:67:a7:30:0b:4b:a2:70:f2:8a:52:
56:98:7a:e1:a5:05:06:db:ac:83:a3:10:08:b4:9e:
0f:3f:a7:ec:84:63:40:10:4e:04:f7:3a:4b:1c:79:
b3:04:87:0f:7e:e4:53:85:31:bb:78:66:59:fe:75:
3e:6d:19:8d:d8:99:76:98:dc:9a:7a:39:5f:b8:93:
dc:c0:b0:16:df:8b:03:a4:54:f8:ab:70:7c:c9:b7:
66:4f:8a:c8:19:e3:5b:20:f6:12:25:09:f3:8c:55:
9a:2b:fd:bc:31:f3:ac:ae:81:0d:f6:61:33:f8:22:
e2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:23:29:A1:D9:5D:B0:20:28:BD:92:49:91:7B:84:3D:23:49:BD:25
X509v3 Authority Key Identifier:
keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5c:ec:e7:22:93:ce:d1:f3:c6:14:46:9a:38:07:3c:73:6c:
66:26:4e:8a:42:f0:39:1a:6d:b1:a4:02:be:5a:c8:65:39:fd:
9e:b5:10:85:5f:6e:0a:a0:a5:91:d8:bf:c2:4f:25:8d:e1:f2:
80:37:73:54:e4:68:4e:98:e1:45:41:92:79:b7:16:d4:30:d6:
9b:a8:a6:d4:16:db:aa:0a:65:5d:31:17:58:06:ed:6e:8a:40:
a4:c3:62:56:40:d7:90:05:63:9a:25:30:6e:35:b5:7e:4e:5c:
73:d7:38:e8:e9:59:6d:f0:cc:ac:4d:8a:6d:e4:92:f5:5e:49:
ec:f9:70:bd:56:09:f3:4e:92:09:69:27:cd:1e:ec:d3:14:86:
cb:9c:b2:8f:37:c6:af:d1:fe:11:b8:78:c6:1d:d0:29:aa:67:
3a:f2:9a:7a:53:50:fa:4c:01:2f:56:d2:cd:57:da:7b:b3:08:
02:2b:20:3e:08:ee:02:29:d3:7f:7d:99:c4:9c:69:fb:d3:4e:
a8:ba:2f:fd:6c:54:15:3a:fe:a5:6a:31:e3:a1:0a:92:f8:1a:
ed:77:ae:25:f0:31:ec:f4:14:73:6d:e2:09:cc:f8:0b:6b:4f:
b9:6f:1a:24:4d:ea:ce:4b:32:41:22:8e:b1:45:5e:01:34:d7:
c2:b0:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:12 2026 by rpki-client