
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 03l5LMJJSHlVg2QbogNu0ScokeEwZlx3bKknCoiHDH8=
Subject key identifier: C4:3C:8F:85:A2:00:16:6A:29:62:E6:DF:5F:80:5C:70:F9:0D:D0:0D
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 01A13D131AA8A47C70ADD77C4540E5EF1B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 0A0F
Signing time: Thu 15 Oct 2026 01:00:24 +0000
Manifest this update: Thu 15 Oct 2026 01:00:24 +0000
Manifest next update: Fri 16 Oct 2026 01:00:24 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: CWXz2UDZCkSULZhioa/BEAKhnkrV24J6Af7OKdBl8xI=)
2: ioIzCnr25mA5bo-k0xBlmyzxRIk.asa (hash: YEdwYAy3Np+qFWE26D41IhcUjeMbPsw6pCrnqo81+3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:1a:a8:a4:7c:70:ad:d7:7c:45:40:e5:ef:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Oct 15 01:00:24 2026 GMT
Not After : Oct 16 01:00:24 2026 GMT
Subject: CN=c43c8f85a200166a2962e6df5f805c70f90dd00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:8d:3d:d2:18:f0:1e:6c:3b:61:ba:8c:6e:
6e:a9:6d:59:ac:90:52:b3:f9:e1:f8:d3:d4:9f:24:
90:ec:61:d3:90:21:a4:4d:73:cf:99:b1:38:27:fe:
44:4b:2f:f2:9b:22:7c:20:fa:9b:8e:f2:f8:6a:e3:
3a:f0:2f:2e:03:3a:36:7d:ab:27:c8:56:38:51:9a:
96:c4:eb:2c:c2:9c:20:e5:1a:6e:d2:7f:ce:e3:03:
0c:67:bb:ab:ce:34:1f:e3:0a:ad:d4:26:65:04:00:
bc:8c:49:58:2f:45:58:f6:fe:fd:f9:6e:6b:a5:31:
d2:12:0c:39:cc:b6:8a:f5:26:dc:3f:72:63:8d:01:
e6:1c:b4:aa:e4:ea:3d:6d:f5:50:94:9d:88:72:55:
5f:bb:24:46:8d:08:f1:6e:99:f1:c7:92:08:7b:03:
9a:f9:a0:af:aa:15:00:45:81:16:ec:37:3d:11:a7:
53:c7:55:ab:c3:81:85:0b:61:47:5c:12:2d:73:8b:
04:5e:4c:7e:5e:d7:bc:60:94:cb:9e:71:6b:55:d0:
d6:89:42:b7:08:a5:a0:af:0a:3b:67:bd:80:5c:7b:
73:ac:b9:6e:13:e4:17:9d:99:d8:17:23:ba:d1:5a:
66:db:31:ce:55:6f:14:3c:44:a2:49:6f:cf:5a:9a:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3C:8F:85:A2:00:16:6A:29:62:E6:DF:5F:80:5C:70:F9:0D:D0:0D
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:19:12:2e:cb:01:fd:f5:e6:ea:72:3c:ab:aa:3c:da:96:84:
5c:bc:2f:d0:73:e5:6c:89:5d:48:dd:e2:db:32:6c:1d:43:7b:
46:0f:60:e8:f5:40:a5:83:c7:48:24:dc:81:49:8b:7c:e9:34:
00:d7:4b:69:fa:f5:e4:37:09:70:bf:98:8b:64:0f:ed:98:aa:
77:b4:0e:8e:d7:39:75:e1:c3:9e:d3:5b:c0:e9:95:03:a1:ab:
5f:2f:d4:e2:21:d4:1e:cc:37:e7:bf:88:63:c8:dd:aa:d1:c9:
48:03:d9:54:1e:bc:f2:63:c3:be:8b:af:b3:6f:51:26:fd:a0:
08:03:50:c9:23:ea:75:13:fb:4a:f6:ca:72:b0:42:06:c8:95:
9e:88:c3:ff:39:9e:46:42:3a:4c:24:03:a9:ae:d1:da:ff:6b:
85:71:a4:80:40:05:e8:b7:f9:94:2b:87:db:91:82:97:e6:c0:
87:4f:d7:68:c2:b7:44:42:70:cd:39:8b:7e:25:dd:b8:b1:11:
c8:02:61:13:44:5f:4c:c5:65:94:11:4a:d4:7a:c1:0f:89:1e:
68:b4:b1:d4:75:f9:98:4c:75:a2:71:05:a5:01:3e:a4:4b:95:
13:b4:3c:72:fb:02:2c:74:49:6f:bd:28:59:41:b8:e4:7a:49:
92:30:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:19 2026 by rpki-client