Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
File: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft (raw, json)
Hash identifier: SgZH31Plxl1ZjbX2RwktSJt9cjq6VQczFbXIooNw0po=
Subject key identifier: 87:33:0C:9C:A9:94:B8:9D:D4:93:25:2B:6E:75:DB:E8:3C:8C:1A:67
Authority key identifier: F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
Certificate issuer: /CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Certificate serial: 01A181BEC0585DACCEEE3609FA045A9B99D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
Manifest number: 02DF
Signing time: Wed 28 Oct 2026 09:02:04 +0000
Manifest this update: Wed 28 Oct 2026 09:02:04 +0000
Manifest next update: Thu 29 Oct 2026 09:02:04 +0000
Files and hashes: 1: 9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl (hash: AIwEddgnMmu5qOspu6a6bNz0GRpxJMcd9rLBP1lYAGw=)
2: wosvCdYOBGKEXb-UprSvx0MCphs.roa (hash: tnEA6MDP3i67STNORkdr3Hyo+omI4rqXgbveiy6Se1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:c0:58:5d:ac:ce:ee:36:09:fa:04:5a:9b:99:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dd8fbb92f9b4746187d9d63fe9b90fcb5eca17
Validity
Not Before: Oct 28 09:02:04 2026 GMT
Not After : Oct 29 09:02:04 2026 GMT
Subject: CN=87330c9ca994b89dd493252b6e75dbe83c8c1a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:07:fa:c3:51:0f:37:13:92:9e:76:5b:2e:41:
9f:93:3d:b2:d8:73:b3:51:d7:ec:95:c0:51:2f:b9:
4e:d5:35:bb:da:5a:0b:fd:29:af:e4:f1:29:ab:83:
02:67:a5:f0:0d:81:f6:42:3f:7a:83:fc:6c:07:42:
d8:0a:b9:56:7b:3a:e1:61:38:cc:8d:24:2f:78:ba:
60:8a:db:a3:e3:36:08:cd:e4:ab:24:9f:89:21:5d:
6f:5d:48:ba:fb:97:91:40:7b:08:3c:a0:9c:85:7d:
44:81:dd:12:15:ae:8e:a3:ef:fb:4d:db:cb:c5:0f:
0e:c1:0f:22:36:fb:05:26:55:0b:48:16:23:2c:bd:
ab:cb:ce:3f:9a:ea:24:df:1f:04:ab:5d:3d:c3:8f:
9f:c2:22:a1:f5:7d:2a:7c:3f:47:66:0d:16:f2:6c:
ef:55:9a:16:50:cd:6c:f2:24:08:14:8c:ce:4e:a0:
c2:ad:8b:a5:07:85:19:43:f2:15:cc:70:34:48:83:
6f:0c:96:12:cd:a9:f9:b9:84:f0:68:c4:86:89:e3:
f6:5b:03:78:8b:e5:e3:33:ba:07:54:9b:0f:94:44:
0e:86:5e:c7:c9:4b:a0:8b:e0:ce:1c:83:1c:03:f9:
64:34:0e:10:c1:6b:8e:e5:18:e2:83:ce:9f:12:e9:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:0C:9C:A9:94:B8:9D:D4:93:25:2B:6E:75:DB:E8:3C:8C:1A:67
X509v3 Authority Key Identifier:
keyid:F4:DD:8F:BB:92:F9:B4:74:61:87:D9:D6:3F:E9:B9:0F:CB:5E:CA:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N2Pu5L5tHRhh9nWP-m5D8teyhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f6917-d2c9-406a-9a6d-b8676ac22653/1/9N2Pu5L5tHRhh9nWP-m5D8teyhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:9c:70:16:19:d8:36:fb:96:1b:44:34:41:63:c8:a3:6f:f8:
c2:e3:86:ca:18:bf:e2:c6:35:58:7f:0f:fa:07:24:39:ab:75:
1e:a4:ad:b3:94:38:ae:3f:fc:d1:20:03:69:f1:80:00:95:68:
39:11:b3:e7:a1:65:00:e8:c2:12:2b:2e:62:0e:1a:6b:32:f9:
d2:47:48:2a:20:83:d3:df:3c:03:3a:b9:86:53:50:36:2d:8b:
50:65:b3:b5:13:02:a0:cb:db:de:e4:57:8b:4f:5a:8e:69:eb:
55:14:eb:90:33:95:97:5f:ca:a4:33:8b:a7:d2:c2:1a:73:4c:
94:99:c7:76:da:03:31:a6:cf:35:4a:c1:c8:1b:36:14:a2:5e:
c6:79:78:0b:1b:75:0b:b5:bd:c8:02:9c:48:ed:15:6d:e4:b9:
b0:31:0e:b5:3a:3b:6e:d1:df:d1:f2:33:59:9c:af:64:d1:9c:
93:fd:2b:10:73:15:ea:11:2c:04:8c:fd:2b:96:39:6d:46:7e:
56:b7:ce:05:ba:2a:fe:e6:c4:67:e7:19:8e:ce:16:df:4c:67:
da:37:9a:b2:86:13:71:b7:c8:59:08:e1:94:ef:60:9f:88:c9:
83:f5:d4:67:d0:4b:3f:5a:2c:fa:07:d9:9c:25:3e:67:5b:d4:
73:60:51:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:04 2026 by rpki-client