Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: H7QLwI6luq4Mv1g4VdtRgwUlzZk702pAb0hE95Ym1GQ=
Subject key identifier: 9E:84:FC:AE:08:EF:27:55:C0:F8:CC:71:7D:E0:2C:45:EF:BC:8A:AB
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 01A08AFA8054C9A6F49BCAA4173DCF204ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 1A15
Signing time: Thu 10 Sep 2026 11:01:07 +0000
Manifest this update: Thu 10 Sep 2026 11:01:07 +0000
Manifest next update: Fri 11 Sep 2026 11:01:07 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: 8EVoXGjk8AEytQZJtcXvIMW10HIASRFWNtVfQaLPnp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:80:54:c9:a6:f4:9b:ca:a4:17:3d:cf:20:4a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Sep 10 11:01:07 2026 GMT
Not After : Sep 11 11:01:07 2026 GMT
Subject: CN=9e84fcae08ef2755c0f8cc717de02c45efbc8aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:c4:41:78:91:d0:1c:bd:a8:29:b9:fd:f1:
4d:3f:8d:41:94:5b:99:09:2a:ed:0c:34:0b:af:1e:
74:b1:41:48:33:36:6a:20:d3:9b:f5:5b:5a:a8:d8:
c9:1f:6e:e9:93:5a:a9:db:95:5e:ed:c5:4d:5b:00:
92:ed:9e:fd:14:67:27:72:69:4c:04:ac:0f:46:7e:
2b:dc:b5:6b:94:ad:99:19:44:f0:a8:b8:ae:b6:f7:
bb:00:7e:c7:92:ae:d7:83:d6:65:e9:73:d8:b0:69:
6a:ff:d4:4f:9c:d5:be:b8:50:71:93:d8:fc:72:3f:
c1:ec:fa:0c:13:32:6f:36:e4:93:41:87:0b:0e:7a:
94:86:ca:1e:c8:04:7c:30:39:d6:68:0f:90:d9:5f:
57:a3:bd:8d:23:6d:47:7f:94:1a:13:e5:af:ba:00:
2b:61:02:d4:09:8c:ca:45:ff:48:07:ca:02:85:c6:
aa:47:1b:f1:1e:1a:84:e2:93:95:47:31:bc:11:78:
69:78:d2:4b:f1:85:12:ee:79:2e:2a:16:26:8a:40:
86:72:16:e1:32:ff:74:e1:6c:de:8a:56:a6:ca:fc:
b7:f1:96:98:b5:03:ff:e0:0f:b3:f7:9c:71:2e:05:
52:69:bf:36:e2:df:a9:02:2a:3a:6d:5c:63:d2:61:
00:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:FC:AE:08:EF:27:55:C0:F8:CC:71:7D:E0:2C:45:EF:BC:8A:AB
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:eb:fb:20:4b:64:ad:cd:03:b5:8b:c2:63:e6:b5:63:c0:d6:
21:c6:2e:36:4c:65:3d:24:60:99:fb:69:f2:2f:25:a3:8b:5c:
a0:e2:85:06:8e:c1:00:4f:5c:47:f4:c8:9b:39:bb:cb:83:74:
f8:ef:58:11:ab:bc:6e:1a:3b:62:62:bf:f5:aa:10:ff:0c:25:
05:56:e3:f2:2e:35:42:80:63:05:1d:ba:59:49:8f:1f:af:38:
f8:44:5c:8c:89:6a:a5:40:b4:01:77:20:1f:51:78:99:68:88:
97:03:5d:33:ae:89:8f:98:e1:62:f7:8a:ca:77:4e:28:7f:3a:
1a:c9:f1:fc:8f:f1:17:9c:11:46:08:02:f0:f4:8d:99:02:cd:
2b:75:ac:2c:3c:19:d6:b4:82:a2:cb:bd:69:bd:fc:a0:fb:39:
21:59:26:89:18:f8:55:bb:87:2c:aa:e2:f5:1d:83:a1:40:be:
9d:d1:4c:56:bf:b8:a3:4c:59:b1:b3:fa:b4:12:59:7e:4e:eb:
3f:d2:4e:b4:80:27:95:7e:ef:42:b8:87:34:8e:ff:b0:03:ec:
26:59:69:c4:9a:78:34:0b:50:c0:c0:91:aa:f5:c0:96:9c:03:
06:97:af:4e:43:e5:f2:54:7c:fa:ae:45:19:42:ff:ef:09:14:
95:e0:06:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:05:57 2026 by rpki-client