Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: 4rtwcv7DGZHaZyGMMIhp4mOCK1LwLWuxW7+UsNfBWDM=
Subject key identifier: DA:A5:07:19:13:73:3A:03:4A:22:AF:5A:5C:66:EB:E0:73:DC:B4:91
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 01A1DA949603F76EBBAF8B4F0F1274F7411D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 0551
Signing time: Sat 14 Nov 2026 15:02:13 +0000
Manifest this update: Sat 14 Nov 2026 15:02:13 +0000
Manifest next update: Sun 15 Nov 2026 15:02:13 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: zLhvU3DRV7o0WBUbc5W2zNoHbuyrs5KscTRo7YYfmcc=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:96:03:f7:6e:bb:af:8b:4f:0f:12:74:f7:41:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Nov 14 15:02:13 2026 GMT
Not After : Nov 15 15:02:13 2026 GMT
Subject: CN=daa5071913733a034a22af5a5c66ebe073dcb491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:a6:fe:7b:78:ba:8b:45:73:d4:05:dd:7a:
72:26:d6:1c:f0:1f:cd:24:83:76:dc:5e:6c:3d:dd:
49:0c:f4:a8:c4:fe:63:2f:19:9a:01:ca:1d:f4:54:
bc:bd:6a:e3:69:c7:ce:f7:11:46:17:e6:9b:25:6c:
e6:a2:ca:60:7d:d1:69:29:93:d6:f5:0f:94:4d:11:
26:69:fb:c2:dc:40:d6:3c:33:61:82:5c:ff:09:68:
25:63:ad:8a:67:6c:71:5e:d9:12:98:26:7a:c7:eb:
95:61:28:8c:68:c5:1a:86:84:53:fe:53:a1:cd:67:
0e:43:ce:ce:8c:2f:d2:2c:10:58:01:61:cd:d6:cf:
76:0f:1e:b6:a4:3c:85:39:40:bd:28:06:8d:f7:37:
65:23:e0:78:09:70:be:a2:5c:b8:6c:29:b2:13:db:
4d:01:15:72:2a:6b:53:3e:0d:d6:3f:d3:36:40:b6:
cf:a0:41:cf:71:4d:c3:df:e1:8a:02:27:45:c2:63:
a8:7d:36:fa:53:b2:f9:70:cc:a1:68:c6:b7:9a:b2:
91:cb:04:59:ba:04:a3:02:2b:28:a7:ca:26:b3:91:
87:85:94:50:8e:7c:7d:6c:2d:5e:81:9d:fb:91:e0:
96:f7:fb:ab:60:b8:bd:06:26:eb:c6:41:4a:7f:16:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A5:07:19:13:73:3A:03:4A:22:AF:5A:5C:66:EB:E0:73:DC:B4:91
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e9:aa:21:22:d0:1a:c0:b5:9e:26:f1:19:50:e3:4d:b1:3a:
05:04:e9:7f:d6:3f:b2:b7:7c:54:14:a1:1e:87:c9:90:6b:21:
fc:23:25:de:ff:c5:6f:22:39:4a:0f:3e:ba:e4:59:41:01:58:
9f:9b:15:5b:af:7f:d9:86:51:7f:7a:16:d2:96:ad:6e:10:6f:
14:ea:de:59:3b:3b:6c:40:ab:a0:ba:78:8e:d5:84:93:c9:9d:
f8:8a:f2:be:cd:33:c8:3c:cd:68:97:70:69:e1:b8:32:0b:9c:
47:57:9f:d8:71:fe:90:3a:b4:60:ad:0f:ce:83:3b:37:0d:cb:
ed:3a:4e:94:b1:82:5d:e7:37:7c:b1:e7:35:58:d6:5a:66:90:
80:0a:6f:ea:8c:8d:5b:4f:6b:ff:55:65:a3:ae:e9:56:51:85:
9f:a0:d8:95:f1:09:5d:80:31:6d:92:19:2e:63:83:6c:4b:6c:
1c:83:89:7e:1a:94:eb:31:be:61:95:2a:a3:46:7c:f3:b6:91:
a4:20:c1:49:c3:c7:01:f0:62:3c:d7:28:8a:85:d5:07:eb:81:
ee:e5:1d:32:5d:22:f2:5a:20:19:65:36:1a:42:82:e3:0e:19:
43:38:f5:3c:36:fb:17:35:e4:e1:17:2a:b5:dc:f6:4f:f6:35:
a3:b8:a1:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHalJYD9267r4tPDxJ090EdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODVkYzNjMTQ0NjRiOGM0MDgxNzUyNWQ5YTI1NGI0ZWQz
YThhM2EwHhcNMjYxMTE0MTUwMjEzWhcNMjYxMTE1MTUwMjEzWjAzMTEwLwYDVQQD
EyhkYWE1MDcxOTEzNzMzYTAzNGEyMmFmNWE1YzY2ZWJlMDczZGNiNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxem/nt4uotFc9QF3XpyJtYc8B/N
JIN23F5sPd1JDPSoxP5jLxmaAcod9FS8vWrjacfO9xFGF+abJWzmospgfdFpKZPW
9Q+UTREmafvC3EDWPDNhglz/CWglY62KZ2xxXtkSmCZ6x+uVYSiMaMUahoRT/lOh
zWcOQ87OjC/SLBBYAWHN1s92Dx62pDyFOUC9KAaN9zdlI+B4CXC+oly4bCmyE9tN
ARVyKmtTPg3WP9M2QLbPoEHPcU3D3+GKAidFwmOofTb6U7L5cMyhaMa3mrKRywRZ
ugSjAisop8oms5GHhZRQjnx9bC1egZ37keCW9/urYLi9BibrxkFKfxaOtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqlBxkTczoDSiKvWlxm6+Bz3LSRMB8GA1UdIwQY
MBaAFPaF3DwURkuMQIF1JdmiVLTtOoo6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYt
ZWI2N2Y4ZTYzMmI4LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yMDQyNzUtYTM2OC00MzFiLThmZjYtZWI2N2Y4ZTYzMmI4
LzEvOW9YY1BCUkdTNHhBZ1hVbDJhSlV0TzA2aWpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATumqISLQ
GsC1nibxGVDjTbE6BQTpf9Y/srd8VBShHofJkGsh/CMl3v/FbyI5Sg8+uuRZQQFY
n5sVW69/2YZRf3oW0patbhBvFOreWTs7bECroLp4jtWEk8md+Iryvs0zyDzNaJdw
aeG4MgucR1ef2HH+kDq0YK0PzoM7Nw3L7TpOlLGCXec3fLHnNVjWWmaQgApv6oyN
W09r/1Vlo67pVlGFn6DYlfEJXYAxbZIZLmODbEtsHIOJfhqU6zG+YZUqo0Z887aR
pCDBScPHAfBiPNcoioXVB+uB7uUdMl0i8logGWU2GkKC4w4ZQzj1PDb7FzXk4Rcq
tdz2T/Y1o7ihkg==
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:05 2026 by rpki-client