
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json)
Hash identifier: oL4Hc+2GgFuAfubWjfq/VDsnt4oQoaaHdbO7ELwumpM=
Subject key identifier: BA:41:65:D3:98:4B:A4:D6:83:11:19:E8:0A:FF:0C:10:D4:42:86:37
Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Certificate serial: 01A0CA476F43D87337E46C3A6B4F7D5F1ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
Manifest number: 0F5D
Signing time: Tue 22 Sep 2026 18:01:14 +0000
Manifest this update: Tue 22 Sep 2026 18:01:14 +0000
Manifest next update: Wed 23 Sep 2026 18:01:14 +0000
Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: 7sBIi/d+G9eKeAPsQ1jBWiL2KDmEMhZbIig/rBB7Kho=)
2: h1BmnlXgB6ac2TWYQTKQ2ChwBMo.roa (hash: yzd9rByRC5Jsp/Gy055ZEn4rSEyip4EOwsA55gh4BjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:6f:43:d8:73:37:e4:6c:3a:6b:4f:7d:5f:1a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de
Validity
Not Before: Sep 22 18:01:14 2026 GMT
Not After : Sep 23 18:01:14 2026 GMT
Subject: CN=ba4165d3984ba4d6831119e80aff0c10d4428637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:ae:f7:17:88:18:7c:83:db:3e:f6:44:3a:
d6:9e:e5:be:b4:e8:a0:45:43:89:44:33:8c:a6:5d:
98:9b:00:27:3f:a6:37:da:f8:37:c1:1b:31:8b:50:
a7:25:0a:8c:66:f9:01:fa:7c:f2:25:f7:1c:7a:9c:
6b:db:ba:bf:8d:1d:63:74:b3:c6:c7:d1:2d:28:d8:
da:87:5b:36:22:70:11:2a:d0:44:d6:7d:6c:ba:ee:
fd:bc:05:e8:48:34:ed:e6:d1:cd:68:86:7b:ba:0d:
e2:ef:82:13:5f:17:4b:fc:8b:db:f0:e5:77:68:93:
c3:51:4c:8d:26:7c:f6:6d:c6:08:0c:e2:e0:b7:08:
70:1c:18:13:37:29:fb:31:d8:27:4a:09:41:5d:4a:
4d:38:a5:50:63:43:e7:11:fb:14:25:0c:01:3a:1d:
bc:86:c3:ae:45:5f:30:24:ac:1e:99:41:58:ef:99:
19:eb:2f:e1:9b:2d:27:13:cb:0f:d1:86:8d:25:b9:
6d:18:96:b5:a0:db:2d:57:15:b0:4a:33:43:45:3d:
23:11:c0:fe:5b:b5:e7:99:d5:c2:8e:4d:d9:ca:7a:
fb:09:2c:53:b3:19:9d:3c:e7:28:7e:3f:ab:40:3d:
30:44:d9:50:8e:45:d2:2b:61:bb:16:e8:9f:d3:54:
cf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:41:65:D3:98:4B:A4:D6:83:11:19:E8:0A:FF:0C:10:D4:42:86:37
X509v3 Authority Key Identifier:
keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:92:58:68:26:9c:b9:bb:dc:1f:80:60:7d:b3:f6:20:5d:e3:
b7:f8:8d:78:3d:ec:24:fb:52:c8:d3:d7:06:49:ce:d2:7a:95:
dc:c4:cc:bf:72:a2:61:cd:56:d9:54:4f:6a:b4:a9:37:ee:6a:
bb:d2:ba:a4:72:24:f4:75:0e:8a:40:0f:1b:01:1c:30:88:f8:
19:58:67:75:34:78:3b:4c:20:2e:48:4f:9b:6e:49:4e:fe:be:
ad:4a:13:55:47:3f:87:f8:86:45:19:d4:49:95:cf:bb:ca:16:
c2:63:35:ab:ec:04:82:b3:3a:7a:98:72:4d:59:ee:9e:dd:93:
fc:56:e1:9d:46:a2:98:b9:ca:48:35:b8:46:87:14:87:f1:3c:
f4:f0:71:e0:39:00:09:a4:ca:ce:b0:8d:f9:02:aa:98:b9:7b:
db:25:7d:ef:15:3e:71:48:38:36:38:a4:76:f9:0a:d0:8f:bd:
de:c4:b3:8e:56:27:c9:72:f6:58:13:05:15:1b:0e:7d:07:2a:
43:08:69:6e:2a:54:91:af:9c:f2:91:db:b8:13:48:74:94:7f:
0d:ca:89:71:a9:a8:5e:47:59:41:9f:07:37:ed:65:75:a6:22:
db:bd:ec:79:8e:b1:a3:ad:46:dc:76:9e:8d:de:7a:e5:30:b9:
25:31:91:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR29D2HM35Gw6a099XxrNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2
NmU3ZGUwHhcNMjYwOTIyMTgwMTE0WhcNMjYwOTIzMTgwMTE0WjAzMTEwLwYDVQQD
EyhiYTQxNjVkMzk4NGJhNGQ2ODMxMTE5ZTgwYWZmMGMxMGQ0NDI4NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum6u9xeIGHyD2z72RDrWnuW+tOig
RUOJRDOMpl2YmwAnP6Y32vg3wRsxi1CnJQqMZvkB+nzyJfccepxr27q/jR1jdLPG
x9EtKNjah1s2InARKtBE1n1suu79vAXoSDTt5tHNaIZ7ug3i74ITXxdL/Ivb8OV3
aJPDUUyNJnz2bcYIDOLgtwhwHBgTNyn7MdgnSglBXUpNOKVQY0PnEfsUJQwBOh28
hsOuRV8wJKwemUFY75kZ6y/hmy0nE8sP0YaNJbltGJa1oNstVxWwSjNDRT0jEcD+
W7XnmdXCjk3Zynr7CSxTsxmdPOcofj+rQD0wRNlQjkXSK2G7Fuif01TPuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpBZdOYS6TWgxEZ6Ar/DBDUQoY3MB8GA1UdIwQY
MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt
ZDk1N2I4YzU0Yzk0LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0
LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZJYaCac
ubvcH4BgfbP2IF3jt/iNeD3sJPtSyNPXBknO0nqV3MTMv3KiYc1W2VRParSpN+5q
u9K6pHIk9HUOikAPGwEcMIj4GVhndTR4O0wgLkhPm25JTv6+rUoTVUc/h/iGRRnU
SZXPu8oWwmM1q+wEgrM6ephyTVnunt2T/FbhnUaimLnKSDW4RocUh/E89PBx4DkA
CaTKzrCN+QKqmLl72yV97xU+cUg4NjikdvkK0I+93sSzjlYnyXL2WBMFFRsOfQcq
QwhpbipUka+c8pHbuBNIdJR/DcqJcamoXkdZQZ8HN+1ldaYi273seY6xo61G3Hae
jd565TC5JTGRvA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:51 2026 by rpki-client