Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: 4KkAPPp/dkeH7hZb9COzIPpeSr4qyDw/f55FkRxQTOQ=
Subject key identifier: BA:0B:8F:55:64:6D:64:D5:32:84:21:3B:77:3A:31:4B:F7:C7:DC:E5
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 01A0CCDA094F4D807C7FD700F67A03882EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0CBD
Signing time: Wed 23 Sep 2026 06:00:36 +0000
Manifest this update: Wed 23 Sep 2026 06:00:36 +0000
Manifest next update: Thu 24 Sep 2026 06:00:36 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: F+RmPmR032YceB1RD2wQ4D3yNjyq4y1dPSKcudj5VgY=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:09:4f:4d:80:7c:7f:d7:00:f6:7a:03:88:2e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Sep 23 06:00:36 2026 GMT
Not After : Sep 24 06:00:36 2026 GMT
Subject: CN=ba0b8f55646d64d53284213b773a314bf7c7dce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:23:8a:c7:c5:90:5e:18:b5:50:1f:6d:21:
20:aa:6e:6a:d1:b4:bc:cb:12:32:0f:42:3b:34:5c:
92:d3:fd:5f:1f:17:b2:70:31:31:f3:06:ba:3d:8c:
36:52:b0:1b:a8:fc:96:9d:8f:1a:ed:2f:06:e3:fc:
d9:17:df:47:c5:4a:39:12:cd:64:54:2e:82:89:b0:
61:ab:7e:cd:d5:de:fe:3e:56:61:27:52:b0:dd:25:
26:3b:af:f1:c6:85:bc:9a:f1:ec:4e:3f:0f:1b:3a:
41:d3:be:27:c3:23:d7:5a:83:89:55:ed:08:47:5b:
b9:1d:07:17:d2:44:c5:45:56:71:4e:cc:d3:da:46:
fa:fd:92:53:34:bc:6a:cf:96:a2:d2:42:62:dd:97:
96:ed:e1:7e:88:3e:a0:83:14:c9:03:2d:8b:d8:58:
fc:bc:3b:b7:9f:76:e7:82:7f:92:68:cf:63:61:dd:
75:eb:e4:2f:70:34:80:40:6e:d1:80:88:be:6f:f8:
3a:dc:05:05:f5:78:c0:9f:dd:e7:a6:37:21:57:22:
f4:1d:90:b7:d5:f3:4c:4d:00:66:f6:d9:4b:2d:61:
a7:72:ce:67:02:bb:e4:9c:5b:bb:aa:54:9a:d5:c1:
8d:4c:3a:b4:4c:f8:fe:2f:92:8c:ed:3e:fd:63:01:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0B:8F:55:64:6D:64:D5:32:84:21:3B:77:3A:31:4B:F7:C7:DC:E5
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:eb:52:60:5d:f6:b5:85:94:c2:3e:dd:ad:49:19:6d:70:16:
4c:08:7b:49:45:fe:28:09:10:ba:c2:06:10:52:0d:56:a1:87:
42:ed:35:ed:aa:22:a6:24:a7:17:15:55:af:71:14:1c:69:ae:
50:4b:28:50:43:a4:9d:66:6d:f0:54:50:5a:f6:64:6a:5a:90:
67:74:48:c6:cd:67:20:94:ac:ed:41:56:8d:06:15:5b:6a:7b:
b9:51:c9:cc:da:30:cb:59:49:0c:8e:e0:51:95:9f:c9:7d:9a:
6e:38:d2:7f:4d:14:6d:2d:cb:b3:f0:a6:8b:62:91:ad:65:53:
9e:2e:59:53:b3:b0:e6:a6:c1:2e:1f:d8:ad:b6:2f:83:1d:ac:
34:97:e1:69:72:a9:60:6f:10:76:29:74:9e:8c:e9:ba:16:51:
48:65:a5:cc:67:00:92:7b:ee:d0:6b:53:64:cd:3f:fb:3c:f0:
c1:13:bb:f8:c3:e0:b8:4b:f4:d8:af:89:22:d6:9a:0c:19:a2:
d8:c9:66:92:f3:9e:d7:35:8e:6d:27:c5:02:16:45:12:44:90:
aa:52:3d:91:9a:18:d1:35:a7:bf:04:59:9b:98:dd:fd:d7:88:
39:43:2b:04:47:98:41:00:e3:cc:19:97:7b:e3:f2:6f:ee:e8:
c9:6e:e3:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2glPTYB8f9cA9noDiC6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh
ZTM4MjUwHhcNMjYwOTIzMDYwMDM2WhcNMjYwOTI0MDYwMDM2WjAzMTEwLwYDVQQD
EyhiYTBiOGY1NTY0NmQ2NGQ1MzI4NDIxM2I3NzNhMzE0YmY3YzdkY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wAjisfFkF4YtVAfbSEgqm5q0bS8
yxIyD0I7NFyS0/1fHxeycDEx8wa6PYw2UrAbqPyWnY8a7S8G4/zZF99HxUo5Es1k
VC6CibBhq37N1d7+PlZhJ1Kw3SUmO6/xxoW8mvHsTj8PGzpB074nwyPXWoOJVe0I
R1u5HQcX0kTFRVZxTszT2kb6/ZJTNLxqz5ai0kJi3ZeW7eF+iD6ggxTJAy2L2Fj8
vDu3n3bngn+SaM9jYd116+QvcDSAQG7RgIi+b/g63AUF9XjAn93npjchVyL0HZC3
1fNMTQBm9tlLLWGncs5nArvknFu7qlSa1cGNTDq0TPj+L5KM7T79YwFkAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoLj1VkbWTVMoQhO3c6MUv3x9zlMB8GA1UdIwQY
MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt
YzlmMTZlODBiM2M0LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0
LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+tSYF32
tYWUwj7drUkZbXAWTAh7SUX+KAkQusIGEFINVqGHQu017aoipiSnFxVVr3EUHGmu
UEsoUEOknWZt8FRQWvZkalqQZ3RIxs1nIJSs7UFWjQYVW2p7uVHJzNowy1lJDI7g
UZWfyX2abjjSf00UbS3Ls/Cmi2KRrWVTni5ZU7Ow5qbBLh/YrbYvgx2sNJfhaXKp
YG8Qdil0nozpuhZRSGWlzGcAknvu0GtTZM0/+zzwwRO7+MPguEv02K+JItaaDBmi
2MlmkvOe1zWObSfFAhZFEkSQqlI9kZoY0TWnvwRZm5jd/deIOUMrBEeYQQDjzBmX
e+Pyb+7oyW7juQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:49:35 2026 by rpki-client