Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: 3VFXb1Ky3PQGbmkuRE/5qpO5K9EF40HHx8DJ9mf3oXE=
Subject key identifier: 69:CD:3D:41:56:56:8B:FB:36:82:76:9F:B2:7E:CF:FC:3A:2C:8C:85
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 01A08AFABAE8E15EB6F5F7416D332A30F884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0AAC
Signing time: Thu 10 Sep 2026 11:01:22 +0000
Manifest this update: Thu 10 Sep 2026 11:01:22 +0000
Manifest next update: Fri 11 Sep 2026 11:01:22 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: BA+GOGYsa5XFWKFt2csrfEPdpt+R8PLfBBuSrP+/f9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:ba:e8:e1:5e:b6:f5:f7:41:6d:33:2a:30:f8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Sep 10 11:01:22 2026 GMT
Not After : Sep 11 11:01:22 2026 GMT
Subject: CN=69cd3d4156568bfb3682769fb27ecffc3a2c8c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4d:05:8d:63:4c:78:c3:f8:e1:4a:8c:c9:33:
de:9c:4f:c3:36:33:dd:1b:9b:ca:0f:e0:ed:5e:96:
74:f5:fb:70:cb:0d:06:22:d8:c7:a8:f4:52:ac:1c:
ca:a3:8f:8b:7b:87:2c:55:07:bd:b6:d7:38:25:d2:
b7:e5:31:7c:6f:49:4a:f1:51:00:ec:26:a1:1e:07:
9d:6c:46:9c:df:df:4a:82:03:36:72:53:90:c8:62:
86:d5:b5:b9:53:3d:b7:a5:c9:30:28:c6:10:ec:a1:
a9:cd:28:78:50:5c:18:9d:a4:20:bf:0b:c4:85:a8:
a7:a5:99:b3:ca:a4:89:55:59:98:18:e0:de:01:33:
d3:85:0c:76:7f:f3:c1:b9:7d:19:bd:a2:86:44:93:
9d:b3:20:af:34:95:72:d9:5d:c3:75:d2:61:0d:17:
92:62:93:74:c8:e4:a0:91:59:3d:cf:aa:ac:9f:27:
4e:60:7f:51:dd:71:d2:ed:9d:62:e4:12:17:85:97:
f3:e8:1a:cf:eb:1c:e5:38:d3:2b:9d:fe:7d:d1:fc:
35:e8:04:f2:28:23:14:5a:03:2e:ad:8b:62:4d:f8:
c8:52:13:17:f8:7a:fd:04:1e:7e:79:08:5f:01:fb:
d9:5b:ee:45:34:97:30:0a:7e:96:bb:d0:3a:6a:ff:
7e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CD:3D:41:56:56:8B:FB:36:82:76:9F:B2:7E:CF:FC:3A:2C:8C:85
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a0:a9:99:2e:73:a0:9b:e1:f8:4e:e1:e5:46:45:1a:71:85:
b5:13:5d:25:47:9d:08:93:19:39:5a:70:86:b5:92:68:e8:c7:
63:19:8e:fa:bf:69:0f:2a:d2:7d:8c:03:d9:23:bf:b7:60:31:
d9:5b:40:55:21:99:c1:15:91:da:6d:6e:df:e0:a0:6a:2e:c3:
38:ea:61:22:c0:2d:d8:2a:aa:ce:d6:b5:a4:06:76:bb:48:12:
e2:b0:e9:65:ff:dd:bb:fa:e5:f0:d4:f1:f0:cd:af:a5:45:b7:
cf:15:27:f9:4f:be:81:65:c3:02:b4:8f:c1:01:9e:bd:6b:7d:
50:ce:44:bd:bd:82:5a:21:22:c4:91:e7:93:0b:93:a0:d4:bb:
0d:41:d7:43:c8:01:84:4f:14:01:85:40:17:c6:99:df:eb:b0:
ad:af:99:c2:8c:50:8d:42:a4:1e:06:cf:b1:7a:9e:2e:26:c7:
71:f3:e4:74:fc:02:88:7e:a0:ca:6b:32:f2:4c:b1:0e:57:ff:
88:46:64:11:d5:10:e9:8a:1d:31:2e:c9:68:0c:2a:91:f1:8a:
d4:f4:f5:bf:31:32:d5:3f:35:52:22:4c:78:24:bd:30:93:64:
8d:3c:a2:2f:84:8e:2c:7a:87:23:7e:8e:be:11:4c:63:90:83:
11:e8:25:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:27:11 2026 by rpki-client