Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: hVYTx1+zVD4qU+g0P4SqOhZGm/mjd8U9ao9G1fvNd90=
Subject key identifier: 48:A1:83:D5:9F:85:1D:4E:B5:53:43:89:1F:BD:0A:19:29:8C:99:47
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 01A13C6E3E3C0AB585C0C1ECB2B63A6867F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0B0B
Signing time: Wed 14 Oct 2026 22:00:20 +0000
Manifest this update: Wed 14 Oct 2026 22:00:20 +0000
Manifest next update: Thu 15 Oct 2026 22:00:20 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: z+OQ/v8B9SOLvN6MrtWuP4p35AMSiKVynHFARk9jOxs=)
2: xqAixzHxlN966fRenr5XBiPgZn8.asa (hash: 5Xg49cf9RjMtXD/hwpV8EsDl4tWwJlu6vHXbTMSTy+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:3e:3c:0a:b5:85:c0:c1:ec:b2:b6:3a:68:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Oct 14 22:00:20 2026 GMT
Not After : Oct 15 22:00:20 2026 GMT
Subject: CN=48a183d59f851d4eb55343891fbd0a19298c9947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:55:df:89:65:19:ad:4f:f0:ee:94:94:42:
ad:77:4a:01:22:5e:3f:b7:21:2d:4e:07:85:f8:17:
29:e1:15:42:b6:c7:cf:23:53:88:0e:65:63:09:7a:
2b:d5:84:14:8b:46:d4:3e:fc:89:12:38:50:17:4b:
19:b5:d0:99:08:b6:2c:f3:20:f2:50:ce:93:05:24:
df:69:87:99:8b:9f:34:7b:d3:a0:ac:84:a6:82:b6:
6d:72:02:6e:89:a1:f1:57:03:ee:e2:a0:ca:9e:0f:
94:e9:a1:80:a3:b7:80:90:41:fc:f7:3d:aa:3c:37:
41:da:bb:96:47:03:e5:12:20:2f:d1:13:fe:f8:83:
6a:a9:be:b6:a0:be:41:c2:49:6d:54:f1:eb:a6:ce:
59:19:2a:ac:bc:21:97:77:6f:99:2f:c5:7d:7c:e8:
96:a9:68:12:af:20:6a:45:a3:72:12:07:06:62:cf:
95:ba:02:be:f6:70:7d:38:ab:a6:04:3b:18:bf:b1:
7f:9c:fd:a9:42:8a:b3:e7:d9:f1:49:25:c6:c0:42:
09:af:a2:91:65:52:dc:10:af:23:ef:f4:0a:07:89:
e9:29:a0:b2:e6:7d:8f:cd:ef:ab:dd:17:b9:b6:12:
46:7a:9e:1c:da:9c:f3:70:60:e1:23:80:5e:5e:8e:
c7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A1:83:D5:9F:85:1D:4E:B5:53:43:89:1F:BD:0A:19:29:8C:99:47
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:0c:a4:5a:b2:3f:a0:7f:01:c6:23:04:e6:cc:36:77:2c:
ac:c1:d1:ee:cc:fb:d0:3d:a7:5a:94:79:9e:3d:65:ba:15:b2:
2a:a0:2e:33:91:ad:79:5b:11:8e:17:c0:0e:74:8c:21:e6:37:
b8:cb:86:41:5f:82:d4:b5:c2:d1:63:0c:69:1f:ac:97:91:db:
a9:04:24:4e:af:a4:7c:b5:f0:51:4f:0b:75:45:b1:2e:4e:ce:
17:f5:cf:2a:4b:37:ea:cc:7d:c6:9f:3f:a4:7c:be:d2:b9:39:
e8:15:b4:1d:56:29:b3:ca:33:36:2b:8b:d6:8d:39:0c:24:a5:
72:64:67:ca:65:fa:88:1e:4f:ec:41:5c:31:be:ba:5f:77:0e:
dd:24:32:23:3a:30:7a:ff:ec:b1:85:d7:6d:82:5a:c5:12:ab:
1c:37:cb:de:64:11:22:01:b9:be:fa:51:cc:97:e2:f1:9f:0d:
b2:02:fb:b1:56:4b:71:58:76:71:5b:bd:42:fb:2a:29:f2:31:
f7:cc:22:72:79:63:3f:f4:ca:d4:1e:ce:82:ab:d4:7b:7b:03:
64:4f:66:bf:17:7d:c9:1f:1a:c2:fb:a0:9a:f3:f6:a7:03:35:
fb:3c:4b:ee:bc:d3:ae:89:8a:95:03:d4:aa:bb:48:3b:06:01:
26:f8:6c:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8bj48CrWFwMHssrY6aGfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4
NWU3MGMwHhcNMjYxMDE0MjIwMDIwWhcNMjYxMDE1MjIwMDIwWjAzMTEwLwYDVQQD
Eyg0OGExODNkNTlmODUxZDRlYjU1MzQzODkxZmJkMGExOTI5OGM5OTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SdV34llGa1P8O6UlEKtd0oBIl4/
tyEtTgeF+Bcp4RVCtsfPI1OIDmVjCXor1YQUi0bUPvyJEjhQF0sZtdCZCLYs8yDy
UM6TBSTfaYeZi580e9OgrISmgrZtcgJuiaHxVwPu4qDKng+U6aGAo7eAkEH89z2q
PDdB2ruWRwPlEiAv0RP++INqqb62oL5BwkltVPHrps5ZGSqsvCGXd2+ZL8V9fOiW
qWgSryBqRaNyEgcGYs+VugK+9nB9OKumBDsYv7F/nP2pQoqz59nxSSXGwEIJr6KR
ZVLcEK8j7/QKB4npKaCy5n2Pze+r3Re5thJGep4c2pzzcGDhI4BeXo7HDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEihg9WfhR1OtVNDiR+9ChkpjJlHMB8GA1UdIwQY
MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt
ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw
LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRsMpFqy
P6B/AcYjBObMNncsrMHR7sz70D2nWpR5nj1luhWyKqAuM5GteVsRjhfADnSMIeY3
uMuGQV+C1LXC0WMMaR+sl5HbqQQkTq+kfLXwUU8LdUWxLk7OF/XPKks36sx9xp8/
pHy+0rk56BW0HVYps8ozNiuL1o05DCSlcmRnymX6iB5P7EFcMb66X3cO3SQyIzow
ev/ssYXXbYJaxRKrHDfL3mQRIgG5vvpRzJfi8Z8NsgL7sVZLcVh2cVu9QvsqKfIx
98wicnljP/TK1B7OgqvUe3sDZE9mvxd9yR8awvugmvP2pwM1+zxL7rzTromKlQPU
qrtIOwYBJvhslg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:08:18 2026 by rpki-client