Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: EPw1CaiOvsbdK82DNZon25gtX7u76qTgBwcQwUEH7o8=
Subject key identifier: F8:D3:36:8A:67:C1:3E:07:AE:6D:38:41:E2:90:8A:AD:F2:1A:7B:1A
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 01A08AC30163BEEB185523BE8D85FB267647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:00:30 +0000
Manifest this update: Thu 10 Sep 2026 10:00:30 +0000
Manifest next update: Fri 11 Sep 2026 10:00:30 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: lqwkYbcF1ZPwV81KTTv789zpWWi58xhCc2JbNTynfDk=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:01:63:be:eb:18:55:23:be:8d:85:fb:26:76:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Sep 10 10:00:30 2026 GMT
Not After : Sep 11 10:00:30 2026 GMT
Subject: CN=f8d3368a67c13e07ae6d3841e2908aadf21a7b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9e:c3:48:c4:7a:47:8e:f7:bc:52:48:6c:77:
af:45:e3:13:dc:9d:fa:e3:14:8b:e1:3e:5c:4c:92:
54:fd:e5:d0:e5:70:8f:93:fb:51:57:e5:33:12:c1:
d5:fe:2c:ae:b0:66:57:30:e1:40:c9:8b:f9:7b:85:
8f:28:b0:74:56:46:cf:35:4b:f3:b6:ac:20:62:55:
89:c7:2e:89:f9:22:3d:74:17:c7:ec:75:fe:2e:4a:
39:d5:34:81:80:08:07:64:d2:3f:03:33:bc:cc:6f:
e0:8b:82:e9:6f:ce:fe:ea:93:a1:e4:99:38:b9:5e:
2f:4e:d3:9a:1e:2c:ed:9f:c9:fc:48:ab:41:a7:d0:
49:0f:f9:ab:71:cc:ff:ff:4d:b7:1b:1b:cc:22:f0:
ec:fa:a4:a0:9a:fa:25:2f:0d:71:4f:72:5f:b7:32:
3a:81:f9:15:10:25:43:26:9f:2d:ac:7d:cf:bc:eb:
9f:72:3d:22:d6:b0:9e:67:73:c6:74:8c:aa:46:d1:
64:8b:44:79:48:db:71:d9:55:71:eb:34:53:0c:7b:
42:44:05:f0:96:29:e8:b9:ce:1d:65:47:46:c8:9d:
88:aa:ba:34:6e:58:2c:2b:47:17:57:1c:17:41:4b:
00:c2:fd:6f:b9:a6:76:88:01:4e:ff:32:af:64:fd:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D3:36:8A:67:C1:3E:07:AE:6D:38:41:E2:90:8A:AD:F2:1A:7B:1A
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b3:d7:1d:34:52:2e:06:b1:23:65:72:0a:f6:a8:f0:dd:8b:
29:37:0d:39:eb:9a:fb:c2:11:4a:f0:a1:bb:2f:5a:30:89:db:
81:29:bd:f4:85:d8:87:f3:0e:69:45:f8:98:52:41:00:d8:2e:
b1:dc:a3:3c:dd:67:08:81:70:3d:ec:7f:be:36:5f:d7:6f:15:
25:c0:92:d0:9c:0a:05:37:e7:f6:f1:3d:83:4e:95:80:3c:14:
95:52:a5:89:f6:3c:9f:e2:a8:8d:ad:17:68:e0:a0:bc:a5:a9:
fe:72:49:9c:28:c5:5b:98:57:48:a9:0a:f7:0a:17:50:a3:c8:
0d:53:55:9d:a2:6c:86:cc:cd:89:65:23:bf:56:07:c7:8b:5e:
bf:46:ee:59:6c:4a:9c:69:68:9b:3f:6a:d8:55:2d:7b:43:de:
f3:06:2c:7a:44:f2:50:64:35:b0:a8:a7:bd:d3:bd:6f:54:cf:
b4:e8:64:58:a5:32:f4:fb:f4:9a:6c:72:2d:65:b5:91:d1:a1:
7a:ea:4e:8a:51:5b:50:41:1c:04:4d:fd:a9:a1:47:d2:c7:f4:
48:8f:27:e5:ae:77:73:28:ee:8a:ee:6a:5c:e2:f9:98:d5:18:
06:ce:a3:37:d3:de:da:6e:05:ba:3c:cf:39:a0:b5:28:a7:11:
b4:8e:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:39 2026 by rpki-client