Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: Orulb0UZevD867IRHaBV2EKamDBw3uy1j3m87R24/So=
Subject key identifier: BA:AA:33:A8:48:93:7E:28:2F:F9:D4:EF:A9:AB:BC:EB:72:77:57:04
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 01A0D15BD70A0AFA0504717C39DAC7CF2046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0BE8
Signing time: Thu 24 Sep 2026 03:00:51 +0000
Manifest this update: Thu 24 Sep 2026 03:00:51 +0000
Manifest next update: Fri 25 Sep 2026 03:00:51 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: 2QPEwCNTjHTV89aSlU7aDNpNR+qJcCS7jXG1lO9mfxM=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:d7:0a:0a:fa:05:04:71:7c:39:da:c7:cf:20:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Sep 24 03:00:51 2026 GMT
Not After : Sep 25 03:00:51 2026 GMT
Subject: CN=baaa33a848937e282ff9d4efa9abbceb72775704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:8a:61:f4:12:c0:59:93:a7:52:f5:2a:ce:
36:7d:7c:11:b6:96:d0:14:59:e2:85:06:cd:37:2d:
46:58:e6:ce:b8:be:9e:e3:a0:a2:b8:34:a7:03:9e:
6e:6b:4a:eb:3b:91:04:26:27:93:16:63:e1:49:fd:
d3:cb:44:ca:1c:70:52:73:63:8e:ad:fe:88:bc:3e:
9b:7c:2d:e7:63:92:a5:f9:72:0f:eb:23:66:9f:36:
dd:91:6d:e0:d8:91:ac:ca:ec:73:fe:a9:cf:31:77:
a5:05:24:3a:d7:6c:7a:38:a2:6f:e8:71:7e:9a:4a:
77:52:76:f8:5f:f5:60:f1:ce:6a:0d:01:83:97:bb:
78:92:90:f1:f8:23:28:21:13:41:c3:c0:ee:85:fe:
02:24:45:bc:be:a9:e0:4a:2c:11:e5:7d:42:6c:a8:
30:4c:97:0c:a3:e7:3a:9e:63:b1:e9:ad:80:74:d8:
b6:23:c4:fa:0d:39:a2:76:9c:b8:af:7e:07:2e:83:
6d:86:35:e3:b2:62:3e:1e:29:cc:02:68:ec:2b:d8:
63:55:7b:ac:9b:95:cb:cd:27:c1:2a:ab:c3:54:e8:
9f:38:65:c4:5f:7c:a2:de:9a:82:75:cd:c1:67:a8:
7b:40:f0:21:9a:16:a3:91:fd:95:d7:f7:13:bb:48:
8d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:33:A8:48:93:7E:28:2F:F9:D4:EF:A9:AB:BC:EB:72:77:57:04
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5f:49:33:e0:5d:70:fa:d8:97:38:89:74:b0:ff:cb:93:e5:
f5:c5:5b:78:d3:91:6e:b4:0e:8d:25:04:73:2f:9c:47:b4:55:
4f:72:d6:89:48:1e:34:54:33:03:c0:e2:d3:2e:7a:6f:94:8f:
0b:5d:b2:8d:11:af:98:a5:4e:e5:d7:ff:06:7f:3e:bd:bf:ae:
61:9e:a7:7c:1b:e6:ec:7e:51:66:a1:c0:e8:45:d5:c9:86:4b:
6c:28:b7:fe:ce:3b:ef:af:ff:82:8d:22:9f:55:27:6e:bb:83:
cb:30:70:57:42:b1:16:7d:0f:44:b6:89:c2:9d:bd:aa:78:41:
51:5a:99:7e:05:04:b5:22:a1:aa:35:c7:31:a4:ae:e0:ca:a9:
82:d2:a7:50:26:d6:c2:2d:34:12:87:15:d0:b8:c6:90:f0:d7:
e7:30:19:e7:33:77:89:39:58:3d:2b:5e:8e:a0:d9:99:99:ec:
4d:7b:44:5a:33:af:45:e4:1f:06:ed:4c:ea:d8:33:90:2a:f3:
80:5d:40:fa:9d:4f:75:95:87:33:11:15:a9:cd:31:54:73:d2:
b8:09:26:79:86:b6:3c:0e:58:92:97:0c:54:65:02:9b:c4:f8:
24:41:0a:7f:46:8c:9e:05:5f:80:ed:dc:2d:b3:84:66:99:7e:
88:68:6f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRW9cKCvoFBHF8OdrHzyBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx
MDUwZWUwHhcNMjYwOTI0MDMwMDUxWhcNMjYwOTI1MDMwMDUxWjAzMTEwLwYDVQQD
EyhiYWFhMzNhODQ4OTM3ZTI4MmZmOWQ0ZWZhOWFiYmNlYjcyNzc1NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxruKYfQSwFmTp1L1Ks42fXwRtpbQ
FFnihQbNNy1GWObOuL6e46CiuDSnA55ua0rrO5EEJieTFmPhSf3Ty0TKHHBSc2OO
rf6IvD6bfC3nY5Kl+XIP6yNmnzbdkW3g2JGsyuxz/qnPMXelBSQ612x6OKJv6HF+
mkp3Unb4X/Vg8c5qDQGDl7t4kpDx+CMoIRNBw8Duhf4CJEW8vqngSiwR5X1CbKgw
TJcMo+c6nmOx6a2AdNi2I8T6DTmidpy4r34HLoNthjXjsmI+HinMAmjsK9hjVXus
m5XLzSfBKqvDVOifOGXEX3yi3pqCdc3BZ6h7QPAhmhajkf2V1/cTu0iN5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqqM6hIk34oL/nU76mrvOtyd1cEMB8GA1UdIwQY
MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt
M2E1YzcxZjg2ODIxLzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx
LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF9JM+Bd
cPrYlziJdLD/y5Pl9cVbeNORbrQOjSUEcy+cR7RVT3LWiUgeNFQzA8Di0y56b5SP
C12yjRGvmKVO5df/Bn8+vb+uYZ6nfBvm7H5RZqHA6EXVyYZLbCi3/s4776//go0i
n1UnbruDyzBwV0KxFn0PRLaJwp29qnhBUVqZfgUEtSKhqjXHMaSu4MqpgtKnUCbW
wi00EocV0LjGkPDX5zAZ5zN3iTlYPStejqDZmZnsTXtEWjOvReQfBu1M6tgzkCrz
gF1A+p1PdZWHMxEVqc0xVHPSuAkmeYa2PA5YkpcMVGUCm8T4JEEKf0aMngVfgO3c
LbOEZpl+iGhvNQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:09:16 2026 by rpki-client