Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: 3PEa+J/RqHCad+BlFOVOObFueDoPDK3wacfQ7yyMe3I=
Subject key identifier: 5B:E2:21:98:ED:64:6C:D8:42:A3:47:F0:24:46:1F:02:33:B7:84:A9
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 01A0CBFE29AA1E66BC5880AC188CBC6303D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 02:00:26 +0000
Manifest this update: Wed 23 Sep 2026 02:00:26 +0000
Manifest next update: Thu 24 Sep 2026 02:00:26 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: BNwGLIrTms4EhcLsp5KA3OpsvjS4+w8FUHf5BrsM/hE=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:29:aa:1e:66:bc:58:80:ac:18:8c:bc:63:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Sep 23 02:00:26 2026 GMT
Not After : Sep 24 02:00:26 2026 GMT
Subject: CN=5be22198ed646cd842a347f024461f0233b784a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:60:18:4a:ee:32:ef:5e:d9:2a:89:87:23:
30:ae:bb:48:67:0a:42:53:24:0c:10:af:c4:cf:e7:
39:9e:d0:de:55:f0:61:76:5a:9e:f1:db:a8:77:04:
2d:89:b6:63:15:41:ee:bb:15:4d:62:dc:42:99:a9:
bd:fc:42:4f:a5:2a:12:29:b4:2e:f9:0c:7f:27:27:
e0:6d:07:87:c4:fa:1e:62:ff:ce:95:62:4b:d2:42:
f7:de:93:56:56:a5:b5:07:44:0c:a3:6f:ee:4b:41:
5b:35:e4:54:d0:df:ac:bf:fb:21:b3:42:08:74:e3:
61:e1:a5:0c:86:16:6e:cd:f1:ca:8f:68:80:2f:92:
45:60:8a:d7:f9:dc:ce:2b:72:5a:ed:04:b6:2e:8b:
00:48:33:70:d2:29:97:b4:df:cf:6b:55:23:96:5c:
8b:bb:e0:c1:e6:54:48:a8:74:50:13:1c:9f:9a:ea:
96:7c:27:1d:a3:31:cf:87:55:12:74:c0:ef:0b:38:
e8:60:8e:c1:30:19:00:f8:88:c8:b2:f1:22:f3:4a:
31:0d:53:c7:cb:62:f9:dd:a8:1b:f0:03:ee:93:ef:
0c:1e:06:e2:09:e6:43:61:f9:f2:c8:43:38:16:79:
6a:c3:65:5b:e4:1f:62:ad:f0:87:a5:90:39:ce:23:
bb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:21:98:ED:64:6C:D8:42:A3:47:F0:24:46:1F:02:33:B7:84:A9
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f3:de:93:a4:88:1f:fb:df:a7:c7:49:be:b8:17:aa:4d:e0:
21:d7:1f:a0:76:63:a0:4b:c2:78:d7:1d:9c:45:f7:a9:b3:fe:
ba:d8:63:6b:66:b1:90:bf:25:49:27:70:88:70:36:8b:dd:24:
cc:d5:7b:22:72:e5:e8:64:16:36:cc:2a:81:b3:cb:b0:1e:2a:
fc:db:5a:46:76:ae:4e:b6:a3:eb:35:4c:4c:2e:51:b3:4d:7b:
32:ea:82:78:ec:e0:7c:1d:78:47:78:f7:9d:82:b9:dd:7e:22:
3b:8d:18:62:ac:59:72:1d:2f:10:44:cd:6e:a2:0c:e9:ab:f3:
fa:f3:4a:d5:d3:f0:89:63:f1:7b:03:db:f3:35:6f:dc:f9:b2:
b8:88:d8:2b:18:63:86:d3:6f:40:ff:30:c5:e5:b0:3b:1e:bf:
e7:0b:80:49:20:2d:b3:17:e3:c4:de:42:66:cf:48:90:56:e9:
13:1e:ae:be:7b:11:96:4b:42:8e:9f:fa:6b:b5:5a:ff:a0:fb:
eb:d8:83:79:c3:6b:fd:1e:6c:2d:d8:1a:df:52:30:89:ff:e0:
b8:4c:09:3e:7c:0d:70:d9:b2:5c:48:81:15:c8:85:61:9f:63:
b8:bb:15:bb:82:df:b2:0d:5a:f9:eb:3b:69:64:a6:11:35:1a:
34:75:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:49:57 2026 by rpki-client