Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: e+kczhcJum431Vk46FDh6QeAp69P8vffSAVG/fmN3vI=
Subject key identifier: 00:47:ED:87:29:4D:E6:3B:BF:5C:E1:90:98:56:A5:C8:0B:E1:66:B6
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 01A1306AC5647351D0D4DEEEB66C79E56246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 14:01:06 +0000
Manifest this update: Mon 12 Oct 2026 14:01:06 +0000
Manifest next update: Tue 13 Oct 2026 14:01:06 +0000
Files and hashes: 1: 6WW-5nEcLXyYysohxbswx53KUC4.roa (hash: YGye3VGtaY9dIe257yt+Ywof1sTn+vKBOCXTqKl9UZo=)
2: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: oDKk2Ppe4/nIfxp0gsgFfiFSFoNBQjJWdYcPoVT1wgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:c5:64:73:51:d0:d4:de:ee:b6:6c:79:e5:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Oct 12 14:01:06 2026 GMT
Not After : Oct 13 14:01:06 2026 GMT
Subject: CN=0047ed87294de63bbf5ce1909856a5c80be166b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:90:a9:40:6d:75:e9:2f:6e:a4:36:fa:51:32:
6f:0e:ed:97:f9:9d:b1:1d:45:f6:0f:2d:8c:42:5f:
bd:33:11:61:6c:26:1d:a2:53:3e:0f:e5:1d:c4:87:
af:78:cc:86:e7:0d:f9:a2:ac:1f:e6:56:64:b5:fb:
ec:9a:22:92:19:ae:39:97:c9:2a:a5:b8:23:6f:ae:
1e:b4:98:21:59:2d:b0:72:6d:6d:b9:75:dd:c5:85:
6e:6c:a5:98:2f:93:7e:15:6e:99:0c:c2:a3:42:be:
63:e8:5b:fc:dc:1e:64:37:26:15:0e:64:92:b8:5e:
88:90:75:5e:4a:0f:a7:7d:6f:06:ab:7a:23:d5:61:
f6:fe:b7:cc:fc:4d:5b:40:94:93:35:0b:dd:06:63:
d6:ef:48:2c:f8:c2:55:4b:d4:17:02:2d:6c:58:b3:
4d:27:cf:23:31:06:46:d6:73:2e:7c:30:e0:12:d1:
c4:83:ac:dd:12:b1:51:d9:f7:20:11:c9:fc:a5:08:
0c:6a:4e:43:f1:02:52:7e:73:04:95:11:2e:a3:5b:
c6:8a:4b:68:bb:e2:9d:de:d1:19:b7:db:6a:83:46:
88:11:55:53:f8:45:6c:76:24:ee:c1:cc:54:83:85:
d8:81:00:4a:bc:7a:25:00:2b:7b:eb:c0:6d:7b:07:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:47:ED:87:29:4D:E6:3B:BF:5C:E1:90:98:56:A5:C8:0B:E1:66:B6
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:91:3e:07:a8:0e:c4:51:bc:23:8d:74:7d:a2:3e:0e:16:1a:
0b:38:79:a5:47:d6:42:4f:ac:83:fb:62:42:95:af:70:26:52:
37:7b:84:46:9d:80:a8:f2:88:85:a1:ef:98:1b:e7:3d:63:00:
71:8f:c9:5b:eb:95:32:d2:26:c5:84:5f:b5:a4:9a:0f:26:59:
b5:71:c8:65:82:2f:74:6c:f9:0c:a8:6a:70:07:cb:8d:97:d0:
c3:08:5c:2d:75:7b:42:dc:88:d4:f5:5a:cf:75:ea:d0:0d:d9:
bc:3e:2d:3e:0e:8c:bf:64:26:8b:48:3a:2c:25:58:3e:0e:67:
e4:c4:ca:9e:aa:b5:69:af:e5:1d:b1:2f:bd:65:24:2f:28:af:
78:7a:95:71:ac:f0:2a:41:e9:ad:10:de:f6:d1:42:40:2b:a5:
c7:8b:c7:da:01:b6:01:a8:50:9a:94:aa:93:2a:a3:de:53:73:
2c:7a:6f:f2:0f:1c:6f:a3:61:72:98:07:37:e7:d8:d8:24:e5:
ad:fe:55:8d:5c:d6:b2:3b:c2:44:fb:60:01:6b:16:ba:93:5d:
aa:d4:29:06:c4:8a:cc:f8:5c:ce:69:db:c9:9f:28:e0:ca:f4:
f5:ae:38:4b:81:87:c4:b3:09:c1:45:7f:19:63:10:f9:a6:a4:
a7:1b:28:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwasVkc1HQ1N7utmx55WJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIyZWIyMWY2YjA2NzIxNGRjZmFkYjI5MDI1M2RhNzE3
ZDYyZTMwHhcNMjYxMDEyMTQwMTA2WhcNMjYxMDEzMTQwMTA2WjAzMTEwLwYDVQQD
EygwMDQ3ZWQ4NzI5NGRlNjNiYmY1Y2UxOTA5ODU2YTVjODBiZTE2NmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpCpQG116S9upDb6UTJvDu2X+Z2x
HUX2Dy2MQl+9MxFhbCYdolM+D+UdxIeveMyG5w35oqwf5lZktfvsmiKSGa45l8kq
pbgjb64etJghWS2wcm1tuXXdxYVubKWYL5N+FW6ZDMKjQr5j6Fv83B5kNyYVDmSS
uF6IkHVeSg+nfW8Gq3oj1WH2/rfM/E1bQJSTNQvdBmPW70gs+MJVS9QXAi1sWLNN
J88jMQZG1nMufDDgEtHEg6zdErFR2fcgEcn8pQgMak5D8QJSfnMElREuo1vGikto
u+Kd3tEZt9tqg0aIEVVT+EVsdiTuwcxUg4XYgQBKvHolACt768BtewfIeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABH7YcpTeY7v1zhkJhWpcgL4Wa2MB8GA1UdIwQY
MBaAFPQrLrIfawZyFNz62ykCU9pxfWLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQt
MTgzMzU2NTMwMTc3LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQtMTgzMzU2NTMwMTc3
LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAspE+B6gO
xFG8I410faI+DhYaCzh5pUfWQk+sg/tiQpWvcCZSN3uERp2AqPKIhaHvmBvnPWMA
cY/JW+uVMtImxYRftaSaDyZZtXHIZYIvdGz5DKhqcAfLjZfQwwhcLXV7QtyI1PVa
z3Xq0A3ZvD4tPg6Mv2Qmi0g6LCVYPg5n5MTKnqq1aa/lHbEvvWUkLyiveHqVcazw
KkHprRDe9tFCQCulx4vH2gG2AahQmpSqkyqj3lNzLHpv8g8cb6NhcpgHN+fY2CTl
rf5VjVzWsjvCRPtgAWsWupNdqtQpBsSKzPhczmnbyZ8o4Mr09a44S4GHxLMJwUV/
GWMQ+aakpxsoPg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 20:03:18 2026 by rpki-client