Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: nomiECUk7v1s9GJLNp2mPfOZjnVh3CulHPLYaErlHBg=
Subject key identifier: 49:6F:FC:64:64:8C:DE:14:61:25:32:01:16:3F:0C:D7:04:59:D8:57
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019FF7FED477F2209B58A382DA6F62EB0DBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 0A63
Signing time: Wed 12 Aug 2026 22:01:40 +0000
Manifest this update: Wed 12 Aug 2026 22:01:40 +0000
Manifest next update: Thu 13 Aug 2026 22:01:40 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: eaxpEsorDYgocVs7+9ifAZpgUqJIfah687od32id4aE=)
2: xqAixzHxlN966fRenr5XBiPgZn8.asa (hash: 5Xg49cf9RjMtXD/hwpV8EsDl4tWwJlu6vHXbTMSTy+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:fe:d4:77:f2:20:9b:58:a3:82:da:6f:62:eb:0d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Aug 12 22:01:40 2026 GMT
Not After : Aug 13 22:01:40 2026 GMT
Subject: CN=496ffc64648cde1461253201163f0cd70459d857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:00:5c:a6:b9:f8:cb:8b:20:31:d7:f1:9d:
fc:e8:4f:4c:91:38:8f:5b:2f:7b:8d:83:38:49:29:
1d:2c:d4:39:9b:74:43:a7:af:c6:2d:06:db:70:91:
6a:35:dd:45:39:ca:3b:4d:8d:b9:f5:9e:19:e8:8e:
fc:bb:93:70:e5:74:89:33:e0:65:95:6b:d6:e8:75:
9a:93:ab:76:f4:c1:5f:a2:35:37:23:40:be:cb:be:
5f:5c:01:1e:4d:d0:9c:01:99:2e:47:8c:4f:70:78:
c7:b3:c0:c2:45:13:1e:1c:b9:8a:cb:d5:ad:12:fd:
bb:12:da:1b:ef:7c:e9:bf:87:48:c9:5d:16:4b:73:
6b:88:49:73:2d:60:45:e5:e8:2b:f9:be:e9:9c:19:
6e:af:28:1e:74:14:11:d7:0c:7e:65:2e:79:d8:a5:
fa:82:23:a8:b3:1a:99:8b:4a:38:7c:4f:5b:6a:e8:
3a:95:fb:53:b0:a0:c1:97:78:d1:40:3d:4b:b0:71:
07:51:88:ea:b2:a8:f8:ac:fe:4d:7b:d5:c7:64:ad:
68:be:4c:0d:fe:b9:b3:9f:75:c1:42:36:9c:b2:0f:
92:bd:63:8d:86:70:e6:93:49:ac:0d:73:07:6a:1c:
95:f8:d6:4c:fd:be:01:ee:42:df:17:3b:14:97:11:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:FC:64:64:8C:DE:14:61:25:32:01:16:3F:0C:D7:04:59:D8:57
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:69:83:48:c2:74:1c:a8:dd:aa:df:4b:54:0b:db:fe:82:3f:
e3:56:20:ce:e4:bd:2d:bc:35:40:fc:91:cd:06:93:cd:5a:ce:
fa:fc:70:0e:5e:ce:4d:9e:d3:c6:62:cd:9a:93:13:ed:51:06:
4d:ec:58:8f:39:77:2d:d8:60:31:6e:1b:91:37:0e:19:be:84:
c6:f4:cb:ce:e5:b8:16:42:44:96:13:4f:a3:c9:99:a0:24:79:
4b:08:48:8e:fb:7e:5d:55:7b:0b:f7:54:83:06:c9:40:70:b0:
ee:1b:07:ab:67:a1:e2:91:e6:62:38:0d:e6:d6:b5:c8:00:ce:
e9:2d:12:c2:39:7d:f8:a9:17:08:5b:0e:17:b8:31:db:8b:60:
9c:5e:5f:ff:5c:3e:e3:98:28:8d:99:f7:fa:f5:ad:5d:21:37:
7a:f0:d7:63:5e:dc:fc:e1:b8:61:03:f7:f3:a6:da:92:07:29:
5e:e1:84:50:17:80:20:d9:69:e3:cd:77:d6:00:0f:bf:2b:f7:
24:a6:33:03:2a:7f:f8:88:be:63:2b:cb:0a:08:1c:1b:00:5d:
26:95:47:2e:97:5a:a5:76:86:cc:54:38:ff:d7:85:ed:a4:aa:
67:a1:dd:f6:3a:85:19:b4:02:84:42:29:fe:d3:7b:85:f0:4c:
30:e9:87:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:30 2026 by rpki-client