
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
File: 9I2q8EbhmDbp4poD5DzVNeIXYXY.mft (raw, json)
Hash identifier: o6A9U+mbb+W4UcCrkGGtPNW3g5mCoCWqmphthTYwPWA=
Subject key identifier: FF:FE:3E:8C:89:AB:FE:90:CA:0D:12:8B:01:DF:E8:ED:B3:05:92:DE
Authority key identifier: F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
Certificate issuer: /CN=f48daaf046e19836e9e29a03e43cd535e2176176
Certificate serial: 01A04084FF7887E4702C3E921CA4456C8FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
Manifest number: 0382
Signing time: Thu 27 Aug 2026 00:00:52 +0000
Manifest this update: Thu 27 Aug 2026 00:00:52 +0000
Manifest next update: Fri 28 Aug 2026 00:00:52 +0000
Files and hashes: 1: 9I2q8EbhmDbp4poD5DzVNeIXYXY.crl (hash: bnZnZMwDvGP+ywcK6sGlWHzSYw9M2Kck6NCX72/xqo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:ff:78:87:e4:70:2c:3e:92:1c:a4:45:6c:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48daaf046e19836e9e29a03e43cd535e2176176
Validity
Not Before: Aug 27 00:00:52 2026 GMT
Not After : Aug 28 00:00:52 2026 GMT
Subject: CN=fffe3e8c89abfe90ca0d128b01dfe8edb30592de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:7f:13:73:89:ce:2d:c0:af:d4:75:00:62:
6d:7e:bd:5d:81:0d:95:23:fe:d3:54:dd:13:cd:66:
ae:71:f8:17:de:36:b2:b3:5d:7b:5e:25:5d:43:16:
48:41:12:32:fc:ca:96:21:d0:d3:0f:cc:29:25:f4:
8c:71:b2:75:4e:e4:9b:7c:7f:e2:35:fa:00:18:5e:
6f:00:a0:32:c1:18:84:81:af:75:70:94:1f:a7:ff:
eb:8d:7f:67:c5:c2:20:25:ba:1b:a0:19:d8:05:5d:
46:0b:86:8b:96:1a:69:5b:c7:72:58:71:78:65:86:
a4:d2:f3:7d:35:af:cf:a1:45:bc:e6:96:db:1e:68:
29:97:c9:47:bf:2e:8b:93:3a:37:f0:c5:b6:4d:36:
5d:f6:2a:95:25:71:75:1a:e7:e0:80:83:c6:f8:e1:
b6:6f:44:e6:50:e5:8b:af:12:84:5b:68:fe:97:76:
85:f4:02:07:05:0c:c5:8d:93:03:65:f1:0c:6a:17:
2d:5d:98:23:29:c5:18:0e:1f:3a:c7:6b:7f:41:51:
4b:fb:dd:6c:0f:76:40:b9:38:bf:05:90:d8:ea:1c:
44:0d:75:ba:59:d8:8b:cc:e4:c2:59:f1:a6:52:42:
59:f2:cb:4d:58:32:d8:ef:09:85:87:e1:f7:27:d2:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:3E:8C:89:AB:FE:90:CA:0D:12:8B:01:DF:E8:ED:B3:05:92:DE
X509v3 Authority Key Identifier:
keyid:F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f1:20:ae:60:64:79:09:c5:5d:23:9b:f7:6d:de:70:99:f0:
35:87:85:14:42:53:e2:12:29:32:91:5a:be:44:c9:c5:99:b5:
50:43:0a:14:a1:78:dc:54:34:3d:d6:05:33:20:8f:c3:18:23:
af:9d:56:4d:bf:08:78:8f:df:87:8c:27:75:9b:40:d7:de:16:
95:cb:d7:f5:1c:52:de:97:2c:27:97:59:dc:cd:2b:1d:a5:fd:
d6:e3:90:a5:e7:68:48:0f:ad:a2:a2:b1:d4:fc:17:41:b5:bc:
a7:19:3d:7d:f4:cb:dd:e6:67:ed:e8:df:b9:8e:f4:2a:d1:09:
2a:40:45:5f:61:1a:ca:6c:c6:5b:a0:d3:2e:70:9e:14:87:8d:
44:6c:7f:7e:e3:24:57:55:df:a7:82:d8:f9:29:ef:21:95:e8:
eb:67:6f:2b:10:41:83:27:77:2f:f0:df:56:18:f0:8c:06:87:
e6:c4:c6:19:5a:d9:51:2b:86:2b:42:5d:68:c4:c8:a1:53:e8:
b8:8f:2c:da:43:f0:a3:39:4c:ff:b8:04:8a:28:ef:8c:1f:81:
13:11:de:5e:aa:64:72:88:d5:7d:4f:53:9a:49:47:1d:d7:34:
7d:85:ac:27:f6:a7:55:3b:af:8a:f4:28:c2:ed:b3:ca:07:6d:
b3:f1:b6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:21 2026 by rpki-client