Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: wfEDPfHsewfA2mq8rZ01MfLfuPzDpJL72Pl6QPOVFBA=
Subject key identifier: 4C:A5:85:A8:EC:92:71:02:52:7A:02:6D:E4:D6:D1:D4:2D:EE:6D:84
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01A0D0801D9340AFA553A6124687CCA22014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 23:00:52 +0000
Manifest this update: Wed 23 Sep 2026 23:00:52 +0000
Manifest next update: Thu 24 Sep 2026 23:00:52 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: bG6MQfq/NRoM+a3aKUM9JXENzvhlpWL2658FpBj0toA=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:80:1d:93:40:af:a5:53:a6:12:46:87:cc:a2:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Sep 23 23:00:52 2026 GMT
Not After : Sep 24 23:00:52 2026 GMT
Subject: CN=4ca585a8ec927102527a026de4d6d1d42dee6d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:dc:ed:e7:b5:35:91:64:07:06:d4:bb:3b:
bb:53:21:84:2c:2e:1d:d6:10:fd:45:94:e7:92:78:
89:26:d9:d6:3e:54:fc:95:9b:70:95:c1:d8:da:92:
8d:64:ed:dc:d9:9e:5a:e1:48:e6:f0:e5:6d:60:8f:
9f:45:3e:46:ee:c0:79:f4:81:70:eb:aa:82:2a:67:
97:57:8c:b2:0b:7e:35:4c:46:31:89:57:91:0b:0a:
1b:8d:a3:e5:eb:4b:bd:cf:82:d8:5f:36:c0:c8:8d:
3c:3e:6f:70:c6:04:3a:58:2e:01:00:42:1e:53:13:
8e:19:dc:ea:db:5e:49:42:f9:2c:e1:4c:b5:b9:ed:
fb:ae:68:47:64:5d:80:0d:f1:79:61:f5:db:c3:d1:
1d:09:df:75:b1:6e:4e:21:a2:6f:e7:8f:5c:13:58:
50:69:9a:4b:32:1a:24:61:97:90:cb:50:8a:49:eb:
b0:4f:e0:6b:fc:eb:e3:bc:7b:87:11:ec:33:46:88:
02:9b:2a:f2:aa:b0:df:60:36:80:79:3b:ea:4f:a2:
5d:18:5f:42:b2:f2:a7:9b:f9:6e:d6:c2:94:33:ed:
0b:19:d8:fc:5a:19:59:8c:91:b7:f3:0b:13:56:c0:
f3:fa:1c:eb:d2:15:f0:b1:93:0b:3f:1e:c1:c2:dc:
49:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:85:A8:EC:92:71:02:52:7A:02:6D:E4:D6:D1:D4:2D:EE:6D:84
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:44:cd:3c:b1:81:a6:ae:de:33:90:00:dd:1b:8c:ad:d0:03:
24:a2:b1:ef:9a:3e:ba:f4:89:fd:b6:9f:76:6d:cb:f6:73:43:
39:f1:04:d4:2f:86:0e:73:5b:c2:20:35:46:6d:8d:74:e2:9c:
3a:86:98:53:0c:03:16:86:79:4a:55:c7:fe:dd:34:ce:95:9c:
ef:2a:ba:ba:47:93:0d:b8:55:49:92:ef:9c:1e:ce:c4:99:e5:
bc:59:e5:3f:0e:19:0e:40:bc:d9:cc:1f:81:45:92:ab:b0:66:
3c:c9:cb:bb:49:25:e1:74:b9:93:ca:8c:7a:4b:40:ee:d9:de:
a7:47:5f:7f:06:20:76:b2:d6:45:db:5b:2e:94:15:d4:80:c5:
b8:be:92:68:5e:19:2f:44:c3:8a:5a:2f:33:ee:38:3d:f0:9e:
c3:d9:93:02:a5:eb:ba:b3:8d:bc:eb:ec:85:4d:c9:1b:26:71:
d0:59:4b:bd:d1:e0:5f:cb:e2:15:0e:72:17:be:5d:a4:c5:8c:
11:7b:b4:8c:88:5d:b9:e6:0c:8a:06:9b:3e:9d:24:f8:d8:9b:
32:81:ae:9f:8d:a5:b7:1b:a1:52:30:5c:32:6e:85:e2:96:6d:
dc:ac:43:d9:36:4b:15:6c:f1:38:ab:89:23:7a:f0:dc:9c:6e:
2a:fa:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:19:08 2026 by rpki-client