Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: 0DPkP1oQ9ff+eXRAbqnc6NIgZmmZP+RJdr4xPzxjnqs=
Subject key identifier: F1:AA:76:2B:80:43:FE:02:C7:AF:59:9D:A6:83:1E:5B:1B:AC:5B:B5
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 01A0D0ED4A3561A8F1829E0F0D0E0517FB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 01:00:06 +0000
Manifest this update: Thu 24 Sep 2026 01:00:06 +0000
Manifest next update: Fri 25 Sep 2026 01:00:06 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: JDVmRYnNSGTEPI0e/ZXvMGJl7WHxtrEx4nJdQl5YyIA=)
2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:4a:35:61:a8:f1:82:9e:0f:0d:0e:05:17:fb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Sep 24 01:00:06 2026 GMT
Not After : Sep 25 01:00:06 2026 GMT
Subject: CN=f1aa762b8043fe02c7af599da6831e5b1bac5bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:b3:22:c8:9d:76:68:84:8e:9b:b8:4e:b1:
9d:b8:c1:08:b8:8c:3b:ef:66:30:71:e8:e0:5a:34:
f9:d3:4e:a9:1c:b2:26:8e:42:db:b5:13:e2:e8:88:
5f:64:64:ce:3b:9b:0e:9f:6b:87:f6:57:a5:7d:21:
1b:75:cf:e4:85:9a:fe:05:79:95:a0:10:6b:c9:a2:
76:6b:a2:54:f6:14:24:01:5f:bb:58:90:67:0d:4c:
26:23:88:e7:c4:aa:7d:02:bc:f0:f5:96:bf:d5:bc:
5b:e3:0c:ae:94:6e:8f:e4:fa:d0:b2:3d:29:6c:35:
ca:73:e7:ca:44:ba:e4:ee:2b:5e:7f:70:90:10:73:
e5:6d:c6:11:63:bf:76:53:40:75:7d:8f:18:24:92:
ad:ca:27:cb:aa:80:87:09:de:1b:04:51:69:71:67:
77:34:2f:3b:c7:19:4e:b2:57:00:cb:fc:3c:12:48:
18:4c:c0:45:3d:f6:f6:1c:42:7b:8a:8c:7c:2c:d0:
a9:27:ab:c7:2b:11:7c:f5:81:e1:9d:04:ac:2f:75:
37:05:d2:61:b4:52:28:b0:6b:19:93:4e:5a:e2:59:
68:aa:15:64:f2:01:37:67:02:72:bc:a0:63:5c:32:
72:97:37:3b:51:1f:51:3d:60:41:45:1f:a2:97:0b:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:76:2B:80:43:FE:02:C7:AF:59:9D:A6:83:1E:5B:1B:AC:5B:B5
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:fd:2d:36:5e:74:42:81:1b:15:2b:78:d2:3f:a1:5c:01:
89:95:32:7c:21:6d:5d:89:bb:7f:85:ab:3d:b3:fa:7d:62:aa:
48:93:6a:aa:82:80:f4:76:dd:3c:41:7c:61:76:88:38:f6:c2:
06:45:7b:84:dc:99:c6:9c:78:20:f8:2b:61:81:c4:b7:36:f0:
35:73:99:9b:76:e7:3b:be:ac:a0:30:f3:48:f8:91:e0:4f:74:
72:87:db:91:73:89:33:5d:52:5b:64:26:71:96:b1:db:c1:7d:
8a:1c:08:d7:88:34:86:de:9b:b5:61:69:6b:5e:da:8b:33:a2:
d3:5c:a0:e7:4a:93:6d:65:e2:51:3d:72:14:59:bf:39:da:73:
7a:71:9e:90:d8:88:36:bd:6b:5b:3a:23:0e:72:db:be:de:18:
77:0d:9c:f5:4f:43:45:f3:b0:93:8e:08:b8:f4:99:d2:eb:02:
7d:d1:d7:74:14:26:7f:22:10:72:c9:da:14:ea:e2:92:94:ec:
5a:1b:46:69:dd:c4:31:e2:c2:2d:9f:2f:bb:64:09:6d:88:21:
50:02:61:46:6e:88:63:24:d3:c0:e7:74:d0:2c:dc:ae:59:6a:
ff:96:b1:5f:24:7e:43:3a:7d:46:32:e7:9c:71:ca:7b:64:e0:
8f:24:84:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:04:43 2026 by rpki-client