
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json)
Hash identifier: tqheo5RoG5Pe7Ay4y3ZcS2itfkkI+hvlaAE5xrwLl7k=
Subject key identifier: 11:5F:C9:A7:03:2E:2A:1C:9A:73:98:FE:FA:A9:11:8F:75:BA:26:55
Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Certificate serial: 01A0EB89F5D050710CB37E859EBF785E6880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
Manifest number: 0F99
Signing time: Tue 29 Sep 2026 05:01:22 +0000
Manifest this update: Tue 29 Sep 2026 05:01:22 +0000
Manifest next update: Wed 30 Sep 2026 05:01:22 +0000
Files and hashes: 1: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: pceGg5QShDRd1NhvPn9m2XL+rtity4fiFehXY6G4eRs=)
2: SwOCpl1kg6g2zUiZWN5A0MmSX5s.roa (hash: QKVD0HzLsQvlnPuI8LqZ6Irb+MhBQbX7xWp6qMbEmic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:f5:d0:50:71:0c:b3:7e:85:9e:bf:78:5e:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870
Validity
Not Before: Sep 29 05:01:22 2026 GMT
Not After : Sep 30 05:01:22 2026 GMT
Subject: CN=115fc9a7032e2a1c9a7398fefaa9118f75ba2655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:a2:34:c3:fe:48:62:2b:e5:d6:ed:86:bc:
be:c3:5f:df:b7:43:85:ba:44:5d:4e:54:2e:fe:1c:
ab:3a:1e:ec:ca:79:1d:94:1c:ce:8a:6a:ce:e6:89:
a8:ca:59:5f:bc:0d:cb:67:56:42:e1:31:de:f0:90:
93:2b:af:4c:6f:a2:8b:84:63:c2:ba:4c:82:c0:cf:
7d:56:0f:9f:65:f5:64:04:99:b3:0c:9b:61:68:f0:
30:27:e4:90:fd:35:69:a0:68:83:d9:64:05:40:3d:
b9:bf:0c:01:0b:13:46:9b:ca:45:bc:e9:0e:40:55:
b7:5f:9c:9e:cf:da:62:93:40:c7:86:d8:5a:e6:bd:
d1:9a:6e:ae:69:30:95:ba:c2:77:74:38:e5:4e:2e:
99:ac:74:01:02:75:1f:86:a3:ea:3b:a2:87:b3:50:
3b:e7:ee:b6:17:f0:2b:89:eb:8a:64:30:7e:fe:ae:
44:a0:c4:84:f6:86:e2:84:16:8e:6b:45:fb:b2:4c:
c5:2e:ea:24:92:e7:f9:83:1d:ac:14:10:89:a5:fe:
87:8f:f5:0d:c8:d8:12:7f:2e:b7:73:5d:17:03:72:
03:9d:36:dc:44:ad:c3:ab:eb:83:f2:42:f9:1a:93:
d6:6a:62:28:d7:c7:cd:92:47:c1:e1:ec:63:6f:01:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5F:C9:A7:03:2E:2A:1C:9A:73:98:FE:FA:A9:11:8F:75:BA:26:55
X509v3 Authority Key Identifier:
keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:aa:1c:da:2f:d2:5a:67:d4:0f:11:3b:76:24:e8:77:04:ea:
d7:50:9b:fb:e3:df:7d:93:31:e4:91:aa:ef:42:31:e3:a2:fc:
1a:7c:d7:30:2e:6a:85:f0:81:c1:35:8b:55:32:02:95:34:12:
18:3c:9b:8c:0a:2b:7c:b5:3e:2f:e1:76:20:ae:a3:14:6e:3c:
3d:67:4f:53:98:96:ec:73:48:6d:67:18:89:76:31:05:f9:ed:
af:79:fa:a1:d6:63:a7:0c:8c:9f:9d:0e:d1:92:b5:75:82:43:
c5:b4:77:91:4c:03:2e:e8:29:77:5d:e2:a8:c7:e5:c9:58:43:
f1:44:66:1f:95:ea:53:d7:c3:00:6e:a0:86:24:70:82:31:13:
56:7a:b4:2f:49:12:f7:86:71:2b:3f:1b:10:f5:86:53:d2:f7:
bf:ce:fa:d0:b7:8d:19:d4:81:92:6a:16:dc:3e:ee:01:75:78:
14:4c:2a:df:d7:f6:98:cf:c1:85:4f:82:98:42:56:f1:7e:88:
47:4d:96:4f:4c:a7:c8:79:7a:e6:32:9d:6e:2e:2c:a4:1e:12:
7e:5c:fa:fd:a9:50:bb:8b:82:a9:15:05:6a:85:71:b9:50:bf:
a5:4e:e4:08:52:36:a4:49:22:e8:c1:3e:fe:87:a5:76:fc:1e:
e1:f7:8a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:46:17 2026 by rpki-client