Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
File: 0o9VSu1_jnFG6ctj9eMaXbHhupM.mft (raw, json)
Hash identifier: WRP5HUT0bE9FDlADr++KlV4ei7hhzFPoiBB9vMz7lFk=
Subject key identifier: 98:57:7F:4E:D5:E8:AA:DB:93:AA:0C:31:79:72:0D:58:8F:C7:4E:63
Authority key identifier: D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
Certificate issuer: /CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Certificate serial: 01A0CC6C26DA4276FC6261F4631C6D03679A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
Manifest number: 1A63
Signing time: Wed 23 Sep 2026 04:00:34 +0000
Manifest this update: Wed 23 Sep 2026 04:00:34 +0000
Manifest next update: Thu 24 Sep 2026 04:00:34 +0000
Files and hashes: 1: 0o9VSu1_jnFG6ctj9eMaXbHhupM.crl (hash: AZIZyvvPVMj9sgqqVXoQQRSySQmuQt125df+gllOsl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:26:da:42:76:fc:62:61:f4:63:1c:6d:03:67:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28f554aed7f8e7146e9cb63f5e31a5db1e1ba93
Validity
Not Before: Sep 23 04:00:34 2026 GMT
Not After : Sep 24 04:00:34 2026 GMT
Subject: CN=98577f4ed5e8aadb93aa0c3179720d588fc74e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:42:20:e4:df:ed:63:8a:70:77:88:36:f0:
c1:63:b9:01:29:6f:bb:92:2f:b0:23:9a:fa:9a:2c:
8e:cd:e5:72:be:f1:40:1a:03:c1:69:31:11:ac:23:
fd:d7:91:ba:69:d8:5f:d6:36:9b:68:10:94:c8:fc:
f2:88:cd:69:68:73:e5:45:bf:a3:ea:35:f1:25:f6:
38:98:31:4b:70:ff:8f:7e:27:d3:05:82:67:38:b0:
fc:70:0e:f7:b2:69:c1:7a:1d:14:ee:6b:b2:a1:b5:
5a:f1:30:63:75:16:87:8d:93:c8:5f:1b:6b:44:de:
44:03:ea:a1:97:ec:95:8c:4d:59:e4:99:76:bd:85:
c0:83:30:32:1b:5e:c8:90:df:cf:ec:21:63:b0:b4:
62:d0:74:ee:39:8a:40:6f:ae:d1:ca:45:ea:77:4e:
52:b9:ce:30:54:c1:2d:ac:7a:3b:b1:0b:74:78:64:
c2:14:d2:04:30:0e:4d:b4:b4:fc:3c:3e:eb:33:f4:
0c:55:15:32:4a:41:fb:99:b9:f0:36:2d:f7:e0:95:
ac:10:b1:31:91:61:70:6c:e6:00:70:35:b2:e2:f4:
cb:db:ac:d3:c1:1a:55:69:e0:6d:f6:eb:85:37:01:
39:05:97:5f:30:1d:67:3e:13:cd:ab:7e:63:0b:bc:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:57:7F:4E:D5:E8:AA:DB:93:AA:0C:31:79:72:0D:58:8F:C7:4E:63
X509v3 Authority Key Identifier:
keyid:D2:8F:55:4A:ED:7F:8E:71:46:E9:CB:63:F5:E3:1A:5D:B1:E1:BA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o9VSu1_jnFG6ctj9eMaXbHhupM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3f6b4f-7590-4d05-853c-106ed1590129/1/0o9VSu1_jnFG6ctj9eMaXbHhupM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4b:b4:2f:77:2f:98:79:37:a0:2d:e4:3d:ab:c7:c5:74:a3:
f2:93:c6:ad:6b:b3:3a:f9:02:f4:d1:96:51:74:24:ac:46:fd:
4a:30:d1:78:9d:3c:24:fb:82:98:8c:8c:ec:52:e1:04:f8:31:
50:e1:8e:ab:24:b8:9e:82:2f:45:b2:19:8e:31:ff:31:16:ef:
c1:cc:98:a4:ef:e1:b9:a8:04:8f:a0:bf:3f:c3:f9:7d:fd:4a:
d5:8a:e3:bc:06:99:c0:e9:17:d9:ad:f2:17:b1:7c:95:e6:a1:
34:13:a8:7e:01:b7:aa:fb:87:48:5f:34:d3:05:12:db:6c:8d:
c9:c5:8f:79:54:b3:82:6c:e9:49:14:0c:d8:60:cf:fa:25:5c:
26:15:a9:95:da:e8:d2:a4:87:3b:01:15:6f:21:b3:db:d0:df:
61:ba:8b:4e:68:3a:e1:65:99:c6:9d:8a:da:19:1b:f1:51:54:
81:2f:6e:2e:ca:78:b8:f1:d1:35:06:bd:25:19:9e:a8:e7:16:
fa:05:40:18:3d:9a:ea:74:75:5f:e5:98:b2:64:72:c5:2c:aa:
50:ab:09:4b:40:29:ba:33:c1:bc:21:cc:04:f2:c3:2f:5f:5c:
12:b3:52:ac:a0:a7:cc:b7:cc:db:65:c9:95:8f:2a:6b:57:7e:
4a:46:0d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMbCbaQnb8YmH0YxxtA2eaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGY1NTRhZWQ3ZjhlNzE0NmU5Y2I2M2Y1ZTMxYTVkYjFl
MWJhOTMwHhcNMjYwOTIzMDQwMDM0WhcNMjYwOTI0MDQwMDM0WjAzMTEwLwYDVQQD
Eyg5ODU3N2Y0ZWQ1ZThhYWRiOTNhYTBjMzE3OTcyMGQ1ODhmYzc0ZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU1CIOTf7WOKcHeINvDBY7kBKW+7
ki+wI5r6miyOzeVyvvFAGgPBaTERrCP915G6adhf1jabaBCUyPzyiM1paHPlRb+j
6jXxJfY4mDFLcP+PfifTBYJnOLD8cA73smnBeh0U7muyobVa8TBjdRaHjZPIXxtr
RN5EA+qhl+yVjE1Z5Jl2vYXAgzAyG17IkN/P7CFjsLRi0HTuOYpAb67RykXqd05S
uc4wVMEtrHo7sQt0eGTCFNIEMA5NtLT8PD7rM/QMVRUySkH7mbnwNi334JWsELEx
kWFwbOYAcDWy4vTL26zTwRpVaeBt9uuFNwE5BZdfMB1nPhPNq35jC7xLMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhXf07V6Krbk6oMMXlyDViPx05jMB8GA1UdIwQY
MBaAFNKPVUrtf45xRunLY/XjGl2x4bqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2Mt
MTA2ZWQxNTkwMTI5LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8zZjZiNGYtNzU5MC00ZDA1LTg1M2MtMTA2ZWQxNTkwMTI5
LzEvMG85VlN1MV9qbkZHNmN0ajllTWFYYkhodXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUu0L3cv
mHk3oC3kPavHxXSj8pPGrWuzOvkC9NGWUXQkrEb9SjDReJ08JPuCmIyM7FLhBPgx
UOGOqyS4noIvRbIZjjH/MRbvwcyYpO/huagEj6C/P8P5ff1K1YrjvAaZwOkX2a3y
F7F8leahNBOofgG3qvuHSF800wUS22yNycWPeVSzgmzpSRQM2GDP+iVcJhWpldro
0qSHOwEVbyGz29DfYbqLTmg64WWZxp2K2hkb8VFUgS9uLsp4uPHRNQa9JRmeqOcW
+gVAGD2a6nR1X+WYsmRyxSyqUKsJS0ApujPBvCHMBPLDL19cErNSrKCnzLfM22XJ
lY8qa1d+SkYNzg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:49:34 2026 by rpki-client