Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.mft (raw, json)
Hash identifier: 2A8wYN8qNtPcZIAHpIXLEAqsN9F5ir3ehNw52SF8+7k=
Subject key identifier: AB:89:FE:75:C8:01:E7:59:D1:30:25:04:12:AA:35:C4:81:47:BF:47
Authority key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Certificate issuer: /CN=7ce9782325d3054cb6956ad22704530de92a0f05
Certificate serial: 01A0D2DDFE8627939DB1BD7B269668028411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
Manifest number: 09D1
Signing time: Thu 24 Sep 2026 10:02:38 +0000
Manifest this update: Thu 24 Sep 2026 10:02:38 +0000
Manifest next update: Fri 25 Sep 2026 10:02:38 +0000
Files and hashes: 1: HlFzm-zahAFjRHtl1bHeIsDoPDc.roa (hash: osKIkxfPFsY8+sDd/0d/lLUvdIHTe/QQACWaNNkv5qM=)
2: fOl4IyXTBUy2lWrSJwRTDekqDwU.crl (hash: Nw8DApbUiznx/Oc+fve6zLssqGdtR870PO+gbpFNeWQ=)
3: wFhxeOIRYZRjHE_NR_YMO7VFyJ4.roa (hash: Fmj1myi/dimk9BjIvdN9tLy/wytpW18VOOMvrJoUFtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:fe:86:27:93:9d:b1:bd:7b:26:96:68:02:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Validity
Not Before: Sep 24 10:02:38 2026 GMT
Not After : Sep 25 10:02:38 2026 GMT
Subject: CN=ab89fe75c801e759d130250412aa35c48147bf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:42:b2:b7:70:5b:1a:b3:b7:8b:3b:0d:31:2c:
f2:2b:10:a9:ca:2c:6b:e6:3f:dd:74:22:bc:c1:fe:
57:e8:9d:10:f2:fd:05:54:7e:67:cf:3a:ee:33:48:
8c:9d:8c:1a:42:04:53:ea:4a:5f:24:4b:15:93:e1:
20:63:b3:03:49:81:f1:9e:85:5b:6b:fd:cf:78:03:
59:30:09:87:3b:d5:16:1a:c0:03:9a:ab:92:45:6b:
3a:ab:05:0d:a0:bf:20:51:07:df:43:e8:6e:b1:11:
1e:a1:7a:a2:75:79:1e:4d:de:75:1d:49:83:54:cf:
74:bd:2b:55:64:25:e9:89:e6:1f:35:ba:3d:68:8c:
8c:4c:78:fe:23:94:c3:8d:ea:e0:35:77:a4:ce:44:
17:64:0a:9a:2b:73:ef:4a:39:eb:3d:8e:e5:70:ba:
98:48:6b:3b:aa:69:c1:23:28:47:2b:c7:09:16:57:
54:c2:3a:05:27:8a:d6:af:c3:44:31:9d:61:b2:0a:
2c:57:90:14:4c:88:85:43:6d:a0:2e:87:de:6a:66:
cd:fc:01:cd:8c:2d:98:f2:0c:1f:c9:af:49:c4:f7:
d7:a7:e6:41:70:2e:78:3e:38:af:3d:16:c4:3b:2a:
54:69:24:9c:11:37:e6:d1:02:11:be:ee:8a:6f:5b:
12:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:FE:75:C8:01:E7:59:D1:30:25:04:12:AA:35:C4:81:47:BF:47
X509v3 Authority Key Identifier:
keyid:7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:37:6f:9b:79:23:7a:10:9e:24:2d:82:80:5d:a3:f7:d5:5b:
43:a2:18:c7:4b:f3:e7:72:8b:20:3d:ea:f5:53:12:d1:f6:d4:
a5:9a:bf:c4:87:3a:94:ab:f1:9a:02:8e:39:a9:54:62:7a:b4:
30:d4:c7:1b:c0:f8:7c:0a:77:35:75:e4:bf:9f:5e:26:dc:64:
6f:2b:26:ed:b5:07:83:13:13:4c:ee:e3:27:ff:d7:8c:df:e0:
be:1f:57:59:c5:58:23:15:9b:98:49:f6:62:a0:fe:8c:91:12:
9b:c4:64:10:56:82:ca:33:f7:4f:5f:c2:8d:dc:09:75:45:fb:
08:f4:e2:79:4d:ca:f7:a9:d3:f3:6f:8f:fb:9d:b7:80:03:cf:
94:17:30:e1:9d:fb:60:f1:10:30:8b:c2:73:57:93:cb:87:03:
e9:08:cd:8e:c1:e6:8a:fa:06:ce:b8:05:3f:43:d7:7d:cf:91:
eb:47:f2:9c:15:f5:1d:ec:b2:91:2b:6e:90:9e:1e:6c:9b:d3:
6b:22:48:0b:37:f2:a3:66:a4:72:35:b2:9b:36:6c:4c:97:20:
2f:5a:6c:fe:5d:58:8b:b8:dc:bb:04:f3:49:81:5e:0b:f2:aa:
50:76:86:1f:ae:0b:c9:ff:6d:55:7a:e6:55:e7:96:cb:11:c8:
f0:87:de:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3f6GJ5Odsb17JpZoAoQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZTk3ODIzMjVkMzA1NGNiNjk1NmFkMjI3MDQ1MzBkZTky
YTBmMDUwHhcNMjYwOTI0MTAwMjM4WhcNMjYwOTI1MTAwMjM4WjAzMTEwLwYDVQQD
EyhhYjg5ZmU3NWM4MDFlNzU5ZDEzMDI1MDQxMmFhMzVjNDgxNDdiZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20Kyt3BbGrO3izsNMSzyKxCpyixr
5j/ddCK8wf5X6J0Q8v0FVH5nzzruM0iMnYwaQgRT6kpfJEsVk+EgY7MDSYHxnoVb
a/3PeANZMAmHO9UWGsADmquSRWs6qwUNoL8gUQffQ+husREeoXqidXkeTd51HUmD
VM90vStVZCXpieYfNbo9aIyMTHj+I5TDjergNXekzkQXZAqaK3PvSjnrPY7lcLqY
SGs7qmnBIyhHK8cJFldUwjoFJ4rWr8NEMZ1hsgosV5AUTIiFQ22gLofeambN/AHN
jC2Y8gwfya9JxPfXp+ZBcC54PjivPRbEOypUaSScETfm0QIRvu6Kb1sSVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuJ/nXIAedZ0TAlBBKqNcSBR79HMB8GA1UdIwQY
MBaAFHzpeCMl0wVMtpVq0icEUw3pKg8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEt
OTg4ZTc3MGIwMTViLzEvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8xMTk0MDItYjliYi00Mzc0LWJmZWEtOTg4ZTc3MGIwMTVi
LzEvZk9sNEl5WFRCVXkybFdyU0p3UlREZWtxRHdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzdvm3kj
ehCeJC2CgF2j99VbQ6IYx0vz53KLID3q9VMS0fbUpZq/xIc6lKvxmgKOOalUYnq0
MNTHG8D4fAp3NXXkv59eJtxkbysm7bUHgxMTTO7jJ//XjN/gvh9XWcVYIxWbmEn2
YqD+jJESm8RkEFaCyjP3T1/CjdwJdUX7CPTieU3K96nT82+P+523gAPPlBcw4Z37
YPEQMIvCc1eTy4cD6QjNjsHmivoGzrgFP0PXfc+R60fynBX1HeyykStukJ4ebJvT
ayJICzfyo2akcjWymzZsTJcgL1ps/l1Yi7jcuwTzSYFeC/KqUHaGH64Lyf9tVXrm
VeeWyxHI8IfeSg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:44 2026 by rpki-client