Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json)
Hash identifier: Cb6cLE13fem2EpKwaRWXGoytDOTrS7i3IlSwiBSGFKE=
Subject key identifier: 64:65:24:50:F9:51:1E:52:24:2D:6E:E2:F9:BB:25:B8:29:5B:0D:03
Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Certificate serial: 01A001A609BF94C613DE2141F131C742F09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
Manifest number: 0FD5
Signing time: Fri 14 Aug 2026 19:00:53 +0000
Manifest this update: Fri 14 Aug 2026 19:00:53 +0000
Manifest next update: Sat 15 Aug 2026 19:00:53 +0000
Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: a81d9Lm6qUZgp1na9LMd62E1Iq0fcKUb8PalkTBGXOE=)
2: dJqD19E6mk5uleQws4cS1vrhxjc.roa (hash: B93wH1HCjYPCakWp9euufDKeozgy2SCaB0olYXjrVtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:09:bf:94:c6:13:de:21:41:f1:31:c7:42:f0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7
Validity
Not Before: Aug 14 19:00:53 2026 GMT
Not After : Aug 15 19:00:53 2026 GMT
Subject: CN=64652450f9511e52242d6ee2f9bb25b8295b0d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:89:d1:2a:9f:f3:58:c6:b0:d7:ba:e2:d9:
ba:48:e5:60:b8:a7:be:f5:dc:e1:b3:6b:e1:5d:3e:
fb:67:33:f7:02:d2:a7:d1:5a:90:de:80:7b:33:16:
b4:73:1d:01:70:84:ce:ae:43:82:06:17:de:c3:44:
28:5d:4d:80:97:ec:b8:e4:48:a2:fa:13:2e:41:8c:
36:e4:d1:7c:79:be:c3:41:d6:26:f0:02:74:6b:8e:
b4:92:3f:f5:25:51:12:92:9c:9c:b6:0d:1f:33:5c:
02:a5:bc:10:b6:96:30:26:1c:84:2b:ff:5f:dd:67:
42:2e:60:2b:07:db:c9:17:61:06:03:2e:6f:6c:2d:
bc:aa:60:66:4c:0c:db:e2:4c:ee:12:a3:96:1f:ee:
06:9e:0a:6f:b5:0e:29:42:88:ea:cf:97:a0:61:5a:
f1:9e:e1:2a:fa:9a:f0:b1:47:29:e9:69:32:bb:1b:
4d:14:14:21:be:fd:71:3d:99:d7:26:5d:4b:f9:5b:
22:6a:6d:1c:aa:8a:d3:7b:04:ce:15:e5:90:4a:14:
b9:67:3c:83:ac:00:57:69:25:3f:3d:c0:02:90:b4:
56:3a:3d:77:e7:32:f6:bc:d1:f3:b4:38:23:77:72:
55:f6:91:6d:db:66:39:68:aa:e9:f5:0a:37:9a:a0:
1c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:24:50:F9:51:1E:52:24:2D:6E:E2:F9:BB:25:B8:29:5B:0D:03
X509v3 Authority Key Identifier:
keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:13:f1:33:03:c8:f4:14:69:3c:cc:e7:10:80:84:b4:58:c1:
af:1c:23:71:d7:a3:0a:0c:c9:9e:84:d8:3e:1f:4b:c5:e9:81:
19:f1:d5:c5:62:fd:09:1a:5e:9c:b9:10:9f:6b:0e:87:64:db:
70:77:b5:fd:c6:b8:bb:f6:76:7f:68:8b:95:f4:59:04:cf:7e:
9d:1d:98:e1:57:30:39:f1:1c:34:e7:4f:69:03:87:6a:dd:6b:
f5:36:b0:f9:8b:e4:fc:b1:71:2f:c6:33:74:f8:d4:52:76:7e:
0d:9d:2e:f9:40:16:ba:b0:41:a9:91:91:ad:79:3e:31:ca:4d:
11:66:0e:06:2c:6a:7f:fd:ca:ed:d7:a3:a5:5a:da:d3:5e:03:
c6:16:ab:e8:a6:68:c0:d2:2c:90:4c:d7:0a:aa:dd:43:fc:0b:
ad:71:d3:75:10:90:c9:02:99:b6:da:ae:64:fd:cb:fc:15:ea:
32:73:57:28:7c:e0:43:f9:76:ec:b2:60:64:5f:91:4c:37:a4:
c0:aa:af:c6:3b:46:73:c0:e3:42:a9:54:55:70:66:b3:8b:ca:
ce:b3:df:03:67:88:5b:73:ed:85:76:66:91:30:14:38:1f:1f:
b9:6a:7d:b0:8e:cb:37:95:b2:1f:47:6d:d7:09:a5:f3:95:8d:
96:a8:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:30 2026 by rpki-client