Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: s9vomzMm6Ggk+HBvFNofobNwn1DxYGvZQElu/GSD7m0=
Subject key identifier: BB:6A:65:6E:E3:5F:61:87:B9:5A:B5:C2:44:9C:D2:1C:83:93:64:C4
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 01A08E32875943834073ABECD3B281822C40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0EC4
Signing time: Fri 11 Sep 2026 02:01:11 +0000
Manifest this update: Fri 11 Sep 2026 02:01:11 +0000
Manifest next update: Sat 12 Sep 2026 02:01:11 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: ldOhdiUlzWf33omeTKESvDbRtYBsVXadqyaIQsavCrY=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:87:59:43:83:40:73:ab:ec:d3:b2:81:82:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Sep 11 02:01:11 2026 GMT
Not After : Sep 12 02:01:11 2026 GMT
Subject: CN=bb6a656ee35f6187b95ab5c2449cd21c839364c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:b3:7b:a7:15:8a:e5:1e:76:62:e4:55:ff:
ba:a9:a6:ee:13:e9:bd:6d:27:67:4b:84:c5:74:30:
3b:64:6f:39:2e:9a:46:f9:73:c4:2e:fe:28:57:60:
e3:49:78:9e:b8:6a:b9:b5:30:cf:1e:e9:e6:0b:51:
9c:7d:7a:6a:3d:48:0a:0a:38:88:50:cb:de:b3:18:
22:38:5b:42:fd:51:08:da:fa:41:20:dd:d2:76:e0:
71:9f:b8:01:0f:1b:bc:7c:63:33:77:a1:8a:35:d5:
4b:17:4c:c9:f0:68:b7:84:ef:93:29:6c:64:0e:9b:
a6:f9:62:7f:41:89:0e:a5:52:5a:58:2a:a7:9b:ac:
d8:4e:01:11:f5:ea:32:80:2e:16:95:91:29:5a:f8:
fe:80:fa:14:3a:56:66:9d:6b:91:74:93:92:59:b3:
b3:bd:80:2d:56:77:cf:71:63:1b:14:fa:7a:1c:e3:
7a:f5:d6:ef:a9:02:fa:e1:b3:4d:2e:1d:77:04:11:
be:1b:20:c0:5e:f1:38:27:d1:45:c3:ce:a1:13:5e:
8b:18:a0:5f:ed:f5:e0:c7:49:c3:40:cb:71:f5:8f:
04:28:e3:89:63:39:10:79:a5:ee:0a:1b:7e:7c:79:
8b:61:1a:36:07:87:f6:f8:10:2a:ab:66:79:7d:f6:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6A:65:6E:E3:5F:61:87:B9:5A:B5:C2:44:9C:D2:1C:83:93:64:C4
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b3:b9:6a:95:38:1e:7c:da:ac:cb:e5:fd:6f:93:16:2d:e9:
e2:ca:05:2f:9c:79:1f:ca:88:97:9b:94:4e:df:c7:3f:76:3c:
63:16:45:91:ff:b7:38:9e:48:02:12:72:f9:43:29:3f:da:27:
89:d0:6d:8f:a8:43:87:dc:92:eb:96:cb:bb:a7:a2:a8:3b:cc:
8b:82:b8:75:14:42:8c:d6:99:da:19:67:00:89:cd:20:8c:66:
5d:26:37:10:ac:c7:ab:5c:74:eb:ff:18:25:87:e2:fa:6a:21:
13:8d:ab:17:ce:12:c1:0f:03:f1:0f:2d:e8:95:21:07:ae:00:
73:0d:97:14:c3:af:1d:07:ff:20:f7:49:ae:f6:f8:ef:aa:b7:
c2:ac:60:90:ba:f4:39:35:d4:8b:95:a9:5b:b4:f2:86:a2:c0:
27:81:4e:b2:9a:03:91:fa:a1:97:51:ae:5e:e7:06:ae:9d:2d:
a3:1d:01:66:da:bf:be:d3:d3:66:13:9b:c6:6e:1a:9c:6f:e4:
de:49:a1:4b:42:56:05:c5:bb:37:02:8f:5f:66:4c:e8:c4:4b:
4b:87:6d:5b:51:4f:30:f3:11:f6:a6:0a:09:45:de:43:20:da:
04:64:b7:37:fe:da:17:68:ef:fa:78:0d:cd:3a:fd:ec:a9:a6:
22:18:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:59:29 2026 by rpki-client