Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 9iQO8nWWOjXpEVMFVWdcQcM21cs92VRiH4ntFFysnoM=
Subject key identifier: D9:0B:E8:FB:74:AE:A4:0A:DD:25:B4:22:CD:F5:C8:EA:B7:5A:A2:6D
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 01A0002532812505036AD97D6076DE5E29D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 096A
Signing time: Fri 14 Aug 2026 12:00:32 +0000
Manifest this update: Fri 14 Aug 2026 12:00:32 +0000
Manifest next update: Sat 15 Aug 2026 12:00:32 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: i3KlDxTe/UU7J3D4s13krMJrKtcnHxKQDd/roMiwR1k=)
2: FOOPB2i79v30ZU4e59nJjmdovPU.asa (hash: k1uJDIk+79tpD5LznP7cblhPtOamlM7MezLEhCaFR7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:32:81:25:05:03:6a:d9:7d:60:76:de:5e:29:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Aug 14 12:00:32 2026 GMT
Not After : Aug 15 12:00:32 2026 GMT
Subject: CN=d90be8fb74aea40add25b422cdf5c8eab75aa26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:2a:65:21:8c:b6:b5:97:1a:18:da:bb:30:
2b:06:bc:d4:ba:4e:4e:e6:de:37:bd:ad:93:ba:9e:
87:12:b2:40:17:c5:52:9a:4a:df:c0:24:fc:af:22:
bd:ed:04:99:08:3d:17:1b:60:6f:ea:4f:6d:f0:39:
34:43:4e:87:f3:ad:dc:42:16:4a:e1:21:03:cc:38:
ad:4e:a5:81:e9:c5:2a:88:fc:28:7b:d1:fb:cb:b3:
59:4e:6e:d4:34:00:d8:d5:89:6c:e0:8d:7d:c1:ed:
fd:aa:5e:ab:81:79:78:6d:2c:cc:3a:42:5d:f0:32:
14:46:ae:0d:7c:c1:e8:59:47:6a:a9:4b:ef:dc:b9:
f9:06:5c:6b:69:f4:9c:6a:62:35:d9:f8:88:42:27:
dc:4a:36:d1:2d:0c:21:51:bf:c1:1d:12:c6:26:59:
39:59:f2:f5:ee:33:b3:ed:92:a7:ea:03:67:5e:31:
6d:10:81:91:f4:75:ea:7e:7c:a8:d3:ac:e0:5b:be:
50:82:62:ec:52:b5:43:78:e4:59:20:4f:1d:c1:26:
58:6e:36:c7:56:79:a3:2d:79:cb:7b:0e:bf:b7:e3:
7a:95:8d:dd:02:64:e6:bc:15:2f:b3:75:73:d3:f5:
e8:95:63:02:4f:27:f9:ea:80:8d:19:0b:6c:9e:d8:
02:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0B:E8:FB:74:AE:A4:0A:DD:25:B4:22:CD:F5:C8:EA:B7:5A:A2:6D
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:0b:7a:8d:7f:40:a8:bc:ce:b3:b6:06:f5:28:45:da:ea:36:
9b:33:a2:93:a7:0b:80:7d:88:fc:a6:c5:86:a7:3b:32:52:9e:
62:52:13:fb:c9:8a:a3:e3:29:3f:d9:99:c0:95:00:86:6b:df:
b2:62:be:f0:81:10:f7:cf:ea:6e:ce:f2:7f:01:c6:dd:ac:98:
70:22:fa:69:59:67:11:85:26:20:e2:56:1e:78:e4:52:42:96:
3e:25:5a:eb:f2:2a:f1:ad:15:72:9f:24:81:9b:f0:39:82:3c:
95:5d:22:8c:fa:f8:6f:65:06:f6:48:30:f1:0b:d0:6d:25:c2:
fd:66:5f:0e:de:a6:0a:a3:8a:f3:a6:07:1f:5a:70:7e:76:3e:
00:49:19:9a:62:d4:09:01:aa:59:1c:0b:72:5c:7a:06:44:07:
fb:69:f3:db:29:2d:9d:4f:29:74:91:54:bb:fd:a9:a3:03:f7:
d4:14:99:fe:88:eb:db:5b:20:51:ac:3f:70:f6:f6:7e:e2:fc:
b8:69:d7:07:91:19:ce:2c:b6:c1:bb:64:0f:d2:46:24:88:13:
fa:c0:26:cc:15:43:67:72:f9:27:e3:c7:dc:43:d6:10:00:1e:
d0:86:77:92:e7:3d:92:78:48:7f:4a:60:35:70:0c:49:90:4a:
e7:65:43:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:54 2026 by rpki-client