
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File: 9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier: +bKHyJHSFKZwtcU0/lXOn8Wnv7FnC8IsPOvdKB4RmdE=
Subject key identifier: 48:D7:C2:D9:98:6C:BA:F4:B8:80:59:D6:C6:B3:D6:AD:90:D6:B6:87
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer: /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial: 01A14C86B387B8F17394EA9BEE3A15D1E660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number: 1189
Signing time: Sun 18 Oct 2026 01:00:58 +0000
Manifest this update: Sun 18 Oct 2026 01:00:58 +0000
Manifest next update: Mon 19 Oct 2026 01:00:58 +0000
Files and hashes: 1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: etSogxjq1JLnZ2kdaoxkD16oF7bqwasVtiBRUzBhE/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:b3:87:b8:f1:73:94:ea:9b:ee:3a:15:d1:e6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Validity
Not Before: Oct 18 01:00:58 2026 GMT
Not After : Oct 19 01:00:58 2026 GMT
Subject: CN=48d7c2d9986cbaf4b88059d6c6b3d6ad90d6b687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:2d:49:3c:94:d7:c1:26:fc:de:57:67:85:
27:6d:2e:40:76:f7:49:d6:11:af:99:d9:92:29:1c:
5c:03:d2:d5:0e:1d:d9:48:07:a6:3e:6b:25:ad:69:
11:57:88:be:cd:6f:ee:bf:a6:82:f7:a9:d2:86:0d:
8e:c7:7a:30:58:e2:1d:ef:7f:cf:ad:fc:46:57:f4:
f5:59:85:f0:fe:d1:2b:e3:ce:6c:f0:73:ed:6c:96:
e1:8b:59:9f:72:5f:52:0f:0d:6c:47:22:dd:1a:fb:
60:70:5f:b3:f4:02:e8:39:f5:0d:26:01:71:20:8c:
c7:e2:45:91:dd:7a:a5:f7:48:2e:cb:bd:36:91:c8:
38:17:b0:02:cf:25:d4:64:07:72:42:25:d9:e1:51:
5e:a6:08:08:6a:40:b2:10:61:0e:15:4c:b4:2f:ba:
c3:da:1f:0d:ad:5e:e6:d0:0e:3e:1f:4f:5f:3b:38:
9e:25:94:85:bc:90:8a:aa:1f:08:f2:d8:88:d8:6d:
72:07:94:36:ea:ce:d3:e5:d1:8c:18:38:88:79:a3:
e4:7b:37:6f:56:d7:2f:61:4b:76:c5:37:50:e0:f0:
78:58:d7:57:85:fd:8e:78:7c:f6:41:15:c1:cd:7c:
ab:ca:62:cd:80:2d:b2:ef:4d:6b:ec:07:f3:e9:e0:
68:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:C2:D9:98:6C:BA:F4:B8:80:59:D6:C6:B3:D6:AD:90:D6:B6:87
X509v3 Authority Key Identifier:
keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:7d:f4:93:50:36:e0:05:d8:55:04:a1:f1:05:01:6d:51:71:
98:d0:da:92:10:9f:f7:40:2c:6f:2b:93:98:87:ec:9b:d0:5b:
d5:60:11:48:57:24:35:ab:4d:34:73:0b:83:d0:f2:c7:46:d2:
1c:f3:80:8e:71:01:91:ae:67:5c:6d:6d:2c:80:fe:94:63:64:
14:3b:e8:be:ec:b8:89:d4:d1:38:bd:1f:1a:cc:cf:49:02:e5:
02:2f:28:16:13:c9:fb:88:43:20:a0:de:67:11:c7:ac:67:57:
d4:9d:27:9a:27:d6:4d:31:e5:96:f7:fb:32:08:4e:f6:0d:44:
ec:fa:6b:44:ca:f9:41:77:18:11:ab:e3:0d:92:31:6d:b2:2e:
7f:5a:77:da:d6:12:72:95:52:f9:7a:09:b2:72:56:aa:aa:38:
84:ae:28:dc:98:e2:3c:aa:7e:82:c3:c3:57:e1:e1:23:5d:5f:
01:6d:bc:7f:de:d7:32:43:dd:8b:02:73:78:13:a6:ff:3c:59:
30:cc:05:cd:ba:2e:30:88:71:79:bf:c3:6c:63:dc:57:fc:80:
cc:88:f9:ac:95:11:bb:b6:c7:fa:3e:a3:80:ca:db:2a:ba:bb:
3d:67:a0:73:5b:69:38:73:d3:0c:63:a9:1d:d0:05:c4:22:c0:
0e:84:86:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:35:39 2026 by rpki-client