Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: lXYhnDQevds2cdbnr3rXLXg585P3fmXT24t3K2CFbco=
Subject key identifier: 87:5A:0A:88:79:EA:7C:E1:D1:59:56:14:30:6C:B8:4C:FE:77:28:46
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 01A0CCDA5FB846E1ED0E0B436B4C273A2BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 06:00:58 +0000
Manifest this update: Wed 23 Sep 2026 06:00:58 +0000
Manifest next update: Thu 24 Sep 2026 06:00:58 +0000
Files and hashes: 1: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: NLgZHatngk87Rg9O2EV6CdjTCqNGOamWHGEkjuZvnO4=)
2: DM0EXQBkZr0e7E2rftq5-TtNVUc.roa (hash: 4qPVGZtejJWXy8T9lJtHmIGF6CkNf88ym74PPqmxTh0=)
3: yp2AU1llCHkyOj3CufgRPl-N_Tk.asa (hash: WtTfRm5N0C4SFgr+MVGe8srzzJzvJBZGACuMZcOKeM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:5f:b8:46:e1:ed:0e:0b:43:6b:4c:27:3a:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Sep 23 06:00:58 2026 GMT
Not After : Sep 24 06:00:58 2026 GMT
Subject: CN=875a0a8879ea7ce1d1595614306cb84cfe772846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:19:33:89:f9:c1:aa:5f:63:09:f2:8d:34:5f:
3d:a1:a5:6f:44:6f:f0:32:25:c1:b0:fc:33:27:e9:
25:0e:a9:6f:53:07:3e:e3:b7:d3:db:9f:24:b9:8b:
dd:e3:f3:f1:25:ad:68:d1:b7:4f:ca:9f:30:61:bd:
dd:b5:a2:ad:67:5b:7b:b6:cd:e6:e1:53:a9:08:52:
72:eb:ee:86:a6:a8:d8:90:7f:73:53:81:19:23:c2:
48:88:f1:d2:b8:b3:a3:4c:c8:23:39:1b:2c:b1:10:
87:f7:4f:41:d7:15:e6:88:4d:ac:a0:64:f9:04:fb:
5b:69:1a:2f:b4:c6:5c:ec:59:a9:53:38:e0:f7:b7:
4c:bc:73:82:9d:8d:5d:f7:40:c0:c6:6b:b0:38:b2:
fa:02:ac:73:1c:ec:67:0f:83:2e:2c:c7:e9:87:08:
ec:e4:9e:82:88:a0:d3:31:63:ef:5e:fe:b6:df:bf:
a2:6c:f7:12:21:a8:7f:0b:ac:9a:da:fb:14:19:1c:
79:85:9b:ee:fa:f7:67:f2:8d:dc:4a:cf:6f:0c:5d:
5b:08:3a:90:44:2e:36:53:90:ce:38:e2:c2:29:3a:
0f:aa:49:71:47:ae:4c:f8:2f:7c:b3:f3:d2:28:3a:
19:05:88:95:85:c7:e5:17:6d:e6:cc:8e:f2:d0:cd:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:0A:88:79:EA:7C:E1:D1:59:56:14:30:6C:B8:4C:FE:77:28:46
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a4:da:b4:c2:ff:21:df:dc:20:0f:c7:3a:6e:66:ab:9b:49:
e8:a4:33:32:18:50:bc:e1:85:07:9e:52:6a:4d:5d:4c:f0:da:
95:70:76:fa:90:92:7b:9f:1c:3d:66:4d:5b:7f:f9:29:08:2a:
52:da:13:02:17:56:b3:ad:e3:6b:f5:36:c0:60:3f:92:02:77:
c8:f1:e9:de:62:cb:e7:fc:0b:da:27:27:fc:43:85:49:d2:b5:
43:39:65:3e:6e:88:d0:d1:41:7c:40:03:0e:da:0c:5d:79:9e:
38:84:a0:aa:9e:f8:94:35:6a:0d:09:c0:7d:71:a8:bf:7d:49:
55:85:81:96:b9:38:91:2b:74:ed:33:21:f2:a0:6d:e1:a3:e9:
27:a5:e0:2b:c4:a0:c1:5f:69:cf:2f:29:8b:07:d3:b2:c7:df:
91:fb:e0:fa:54:4d:7f:3b:cd:db:b5:1d:c5:e8:ad:e7:60:95:
41:89:71:32:c3:54:0a:c5:9c:79:48:b0:44:3b:8d:4f:1d:ff:
ef:3c:80:4d:41:a3:eb:87:63:9d:96:db:f0:77:a5:ce:f7:3e:
9a:8c:34:82:76:46:85:23:3a:62:52:e9:cb:5a:ec:e6:6c:9c:
5b:39:a5:46:38:bc:bb:50:7b:e9:68:16:60:43:cf:db:49:6c:
0c:ba:00:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2l+4RuHtDgtDa0wnOivFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzFjMzM5YjE4NjE3MjJiZmZlODY3MjE4MzE0Y2UxMjk1
YzNjODUwHhcNMjYwOTIzMDYwMDU4WhcNMjYwOTI0MDYwMDU4WjAzMTEwLwYDVQQD
Eyg4NzVhMGE4ODc5ZWE3Y2UxZDE1OTU2MTQzMDZjYjg0Y2ZlNzcyODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RkzifnBql9jCfKNNF89oaVvRG/w
MiXBsPwzJ+klDqlvUwc+47fT258kuYvd4/PxJa1o0bdPyp8wYb3dtaKtZ1t7ts3m
4VOpCFJy6+6GpqjYkH9zU4EZI8JIiPHSuLOjTMgjORsssRCH909B1xXmiE2soGT5
BPtbaRovtMZc7FmpUzjg97dMvHOCnY1d90DAxmuwOLL6AqxzHOxnD4MuLMfphwjs
5J6CiKDTMWPvXv6237+ibPcSIah/C6ya2vsUGRx5hZvu+vdn8o3cSs9vDF1bCDqQ
RC42U5DOOOLCKToPqklxR65M+C98s/PSKDoZBYiVhcflF23mzI7y0M2/fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdaCoh56nzh0VlWFDBsuEz+dyhGMB8GA1UdIwQY
MBaAFPcxwzmxhhciv/6GchgxTOEpXDyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAt
MGRjMjBhN2Q4MmI5LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAtMGRjMjBhN2Q4MmI5
LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6TatML/
Id/cIA/HOm5mq5tJ6KQzMhhQvOGFB55Sak1dTPDalXB2+pCSe58cPWZNW3/5KQgq
UtoTAhdWs63ja/U2wGA/kgJ3yPHp3mLL5/wL2icn/EOFSdK1QzllPm6I0NFBfEAD
DtoMXXmeOISgqp74lDVqDQnAfXGov31JVYWBlrk4kSt07TMh8qBt4aPpJ6XgK8Sg
wV9pzy8piwfTssffkfvg+lRNfzvN27Udxeit52CVQYlxMsNUCsWceUiwRDuNTx3/
7zyATUGj64djnZbb8Helzvc+mow0gnZGhSM6YlLpy1rs5mycWzmlRji8u1B76WgW
YEPP20lsDLoABQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 09:46:36 2026 by rpki-client