Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: vpDzftl7xzTq2Essh1HtSFHR5poFiNPr1KuJTOo0LOU=
Subject key identifier: A3:35:DE:F0:CE:0A:23:31:45:DC:C2:C6:3E:2F:5F:82:12:7A:AA:95
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 01A12FC5F3BC6118FEC2D2DFA85D24520134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1A9C
Signing time: Mon 12 Oct 2026 11:01:04 +0000
Manifest this update: Mon 12 Oct 2026 11:01:04 +0000
Manifest next update: Tue 13 Oct 2026 11:01:04 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: Ia84lj7VpnqY2yj6KMLZokXG6uLl4tTHGXNR7iQEEBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:f3:bc:61:18:fe:c2:d2:df:a8:5d:24:52:01:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Oct 12 11:01:04 2026 GMT
Not After : Oct 13 11:01:04 2026 GMT
Subject: CN=a335def0ce0a233145dcc2c63e2f5f82127aaa95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:3e:c5:3a:18:33:ce:71:84:77:70:6c:c0:
84:b1:36:74:cf:66:83:50:59:f1:a9:37:f6:d2:b1:
9c:d3:e7:ca:38:48:5d:b7:c9:2d:2c:4e:b0:6d:39:
5d:dc:ad:5a:2a:5f:f4:e3:50:ba:9d:b7:69:90:3c:
43:42:6a:c9:ca:a3:c2:ff:03:b4:5d:65:6c:5c:c5:
de:ac:2a:86:6b:bf:70:13:d4:1c:49:2e:39:2c:e3:
af:e8:51:34:5c:ea:57:cb:ee:92:97:e1:68:1b:f1:
e0:7b:3d:7e:c3:86:63:22:32:fd:05:35:f7:14:c7:
da:d6:45:ba:67:a8:d9:91:b6:ac:79:53:4c:bb:f6:
0f:f8:f3:f8:d1:bf:99:48:20:f9:4f:8c:d8:56:72:
d5:63:fe:89:bf:ce:54:6b:91:32:6b:5a:e6:26:17:
4b:06:c0:82:13:12:50:ed:f9:8a:94:4b:e5:40:89:
86:cd:8e:41:9d:59:36:8b:28:c5:c0:50:4f:88:54:
28:e7:aa:bf:8e:76:14:b9:e2:56:72:7c:78:dc:72:
b0:62:93:b3:9d:e9:11:73:98:e7:42:6c:9c:d8:38:
4c:3a:9b:b9:87:0d:a8:cc:4b:8c:da:ab:02:8b:21:
a9:8a:39:4c:e0:0c:0b:b8:c0:0c:7a:2a:4b:3a:4c:
71:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:35:DE:F0:CE:0A:23:31:45:DC:C2:C6:3E:2F:5F:82:12:7A:AA:95
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:36:1a:3e:2e:00:e9:82:15:29:af:61:7b:c9:35:41:cc:50:
a5:ea:0e:7f:56:4e:6c:7b:42:0c:8a:af:62:db:6c:98:0e:c3:
ea:e6:74:da:45:6a:13:ce:10:4b:7e:3f:d3:58:10:f5:80:8a:
ac:0e:12:d0:76:91:d2:da:49:d2:0b:c0:b2:63:20:92:b0:28:
54:c6:a1:0e:3d:43:0f:2a:15:fb:ae:d4:2c:1c:f9:6f:52:44:
b5:d6:a8:8f:63:c3:b6:66:a2:e7:64:53:38:21:e7:d2:66:97:
04:7b:a2:02:28:ea:ca:f6:a8:cc:e5:6e:a0:07:48:d9:83:f9:
27:0f:41:b5:26:ba:70:73:3e:fb:17:b2:0d:70:3e:a8:3d:c1:
ae:01:37:51:de:eb:05:50:08:c4:a5:f1:e7:90:8d:64:07:1c:
36:a9:ac:d2:d9:29:36:b6:a5:39:be:20:78:ea:4e:be:65:0a:
d2:8b:52:f8:d9:47:95:c9:c2:3d:9b:86:ad:5c:84:6c:14:07:
dd:07:12:c6:b8:ef:de:6d:b6:5d:1e:cc:f7:47:ab:70:7d:c4:
64:3a:84:76:dc:b3:33:4c:6c:2b:72:96:19:ff:71:9e:dc:09:
cc:d8:cc:7b:bd:7e:20:37:0a:01:cc:da:ab:8d:1b:ee:6c:f3:
47:f3:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:00:00 2026 by rpki-client