Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
File: 9OobD89CmqOLUtkXHOfJI8qKrIE.mft (raw, json)
Hash identifier: k5SJQ7u//tYnWpEWVzfzmnTkYhJWljGLe7ToYwJbrk0=
Subject key identifier: 2D:72:2E:29:25:AA:A6:A8:0B:72:89:01:8A:79:44:4C:A9:D6:96:9E
Authority key identifier: F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
Certificate issuer: /CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Certificate serial: 01A0CE239663F658E971334C8BDDB248A38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:33 +0000
Manifest this update: Wed 23 Sep 2026 12:00:33 +0000
Manifest next update: Thu 24 Sep 2026 12:00:33 +0000
Files and hashes: 1: 1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa (hash: u4WfkbMiSbJkmrL6GA8qH3vMspeYSQot+mOiu9K3y4w=)
2: 9OobD89CmqOLUtkXHOfJI8qKrIE.crl (hash: pUuSJZVk8doLIrHL/tRRd4q6/XC0ZUwDKL3o07QHR58=)
3: joV_6cAQSK_je5KrB8bVTeK2szE.roa (hash: fk94vtPfOafs8CuY1ZMt1P+v4ADiKe8HjDC4WwhIxvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:96:63:f6:58:e9:71:33:4c:8b:dd:b2:48:a3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Validity
Not Before: Sep 23 12:00:33 2026 GMT
Not After : Sep 24 12:00:33 2026 GMT
Subject: CN=2d722e2925aaa6a80b7289018a79444ca9d6969e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:e2:77:b7:d7:87:59:33:33:82:0e:cb:c3:
62:cf:9f:73:e2:6d:80:4f:35:6e:be:c5:5a:55:97:
99:87:39:b6:17:ff:f6:59:23:3b:02:9f:62:ca:57:
a3:3a:17:58:fd:d7:7a:b3:3a:8f:2c:8e:c4:b4:00:
2a:ba:99:16:ae:1c:0e:a0:ce:69:f4:61:ba:d7:c0:
46:49:9a:d6:f5:27:72:43:3a:93:3a:ea:44:fc:88:
e0:6c:b1:f1:80:28:e3:b1:6f:88:fc:06:ca:8d:ee:
dd:36:5c:7f:4e:03:b1:11:ee:ec:34:9a:d9:7f:4c:
f4:6a:73:cf:6c:4a:4c:16:1a:6f:13:af:b3:ae:2c:
0b:2d:20:70:a5:46:c3:e2:36:b8:ae:c6:22:f2:a0:
cc:3e:c2:3f:22:ca:dc:63:7f:a7:b9:43:dc:2a:7c:
a2:eb:cd:13:bd:64:d8:30:5e:b3:0e:a5:e3:0a:90:
e5:1f:71:cf:eb:c5:b2:1a:5c:5b:8e:f6:dd:0c:1a:
80:f2:4f:e0:8a:b2:ac:0f:0a:9b:cd:9b:73:59:fd:
88:55:34:8b:c9:3c:65:62:c2:d2:b2:e3:6d:d3:d0:
35:86:3e:64:df:68:9d:fa:04:f8:ca:a3:cd:df:84:
ec:21:8a:fb:f3:5b:9a:5a:23:14:56:17:8d:fe:3f:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:72:2E:29:25:AA:A6:A8:0B:72:89:01:8A:79:44:4C:A9:D6:96:9E
X509v3 Authority Key Identifier:
keyid:F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b5:83:22:b1:a1:50:9b:c1:5c:9b:5a:4a:2d:2d:0b:92:32:
b8:c3:6b:c1:9b:d1:46:7e:89:62:70:20:6a:e2:bd:9d:ee:df:
1b:7a:da:d0:72:c9:6d:b9:d2:b6:5c:ed:b2:3f:ca:69:f6:43:
7a:0c:ae:3f:87:3d:93:d4:c9:17:46:06:01:d9:5e:61:e8:93:
7a:dd:e4:a8:f7:b8:e5:f6:d9:a2:42:03:56:99:80:be:72:4d:
fb:0b:42:d9:04:5d:6e:fc:de:61:4f:12:df:98:d5:17:8d:3c:
99:1b:6a:a1:92:e5:40:c8:09:1e:da:f1:09:0d:54:4f:00:c8:
21:56:f6:9c:76:7a:57:ce:0c:eb:f3:6a:5f:75:72:61:5e:6c:
a1:e2:a7:d3:33:53:71:8a:00:7a:38:c4:88:19:06:5c:ea:55:
cb:d3:72:f5:1c:c9:eb:60:ce:95:0f:f5:e0:df:97:aa:69:41:
d7:59:cb:8c:5f:fa:0e:c5:70:36:3b:a3:a2:a9:14:43:88:1c:
84:d4:23:b1:56:c0:a7:83:c2:cc:ee:d8:fc:b7:2f:2d:a9:01:
2f:33:c0:9c:73:d2:cd:4d:c7:c5:51:b8:d2:38:83:ba:29:3b:
03:18:7c:a2:50:37:46:48:bd:bd:52:a7:b6:92:73:d9:5d:01:
87:17:a9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:47:52 2026 by rpki-client