Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
File: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft (raw, json)
Hash identifier: bhEEYLlhSsruGvjDCJyDS5S+aS+i41FouUjL+DyxvFM=
Subject key identifier: 88:0E:84:2D:CB:6B:00:26:39:A6:0F:A8:FC:74:F6:00:A9:84:51:55
Authority key identifier: FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
Certificate issuer: /CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Certificate serial: 01A0D7CBF5DD7C99566954E02BF5E2012A9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
Manifest number: 0297
Signing time: Fri 25 Sep 2026 09:01:03 +0000
Manifest this update: Fri 25 Sep 2026 09:01:03 +0000
Manifest next update: Sat 26 Sep 2026 09:01:03 +0000
Files and hashes: 1: 3xCEVKKWm2QsOSzoPNBnX86Bdi4.asa (hash: KMwzA6MAu43bwnbadnaB1wzAFHYoj8vkYoYJ8J2jS5g=)
2: _O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl (hash: b7S+sYWAGyK9cFkclG7JjxOfEG6mBQXOKzcP5KRMT/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:f5:dd:7c:99:56:69:54:e0:2b:f5:e2:01:2a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcef60d9fa6aa0ac03ba167db01fc182b58563da
Validity
Not Before: Sep 25 09:01:03 2026 GMT
Not After : Sep 26 09:01:03 2026 GMT
Subject: CN=880e842dcb6b002639a60fa8fc74f600a9845155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:33:40:68:48:36:b6:13:3b:30:99:6f:b9:
16:09:d5:31:b3:d3:56:8c:71:a0:d4:f6:74:8b:9f:
3f:93:cf:09:3e:b4:53:eb:48:02:77:00:b0:9f:00:
b4:e1:47:0b:de:ce:3e:80:fd:cc:f4:d4:f5:31:6b:
3f:9d:c4:54:76:13:15:91:95:d3:08:eb:5f:88:97:
cc:75:37:f2:cb:42:09:09:36:7b:e5:a7:02:ca:94:
b7:b7:b3:b1:52:d0:44:96:68:49:67:70:00:1a:eb:
bd:cd:bc:6f:f6:2d:7a:ab:99:71:64:68:3d:a2:e3:
de:00:37:55:00:3b:b9:e5:91:e8:85:6d:7b:8d:5f:
70:96:8c:60:51:ae:dd:41:aa:b1:bc:9c:cf:9e:35:
b8:58:f6:67:0f:01:05:a3:69:b6:4b:2f:33:d1:c0:
c4:78:8f:4c:51:a7:f4:98:c7:e7:32:e3:87:a4:ac:
6e:eb:35:40:76:5c:bd:66:35:34:b7:f5:59:77:af:
a3:bf:b9:f6:9a:5a:b3:6c:32:70:8e:a1:83:54:76:
33:c3:d3:b3:7f:f6:c1:5a:cf:88:c7:79:d7:dc:99:
0a:1d:3b:70:73:08:2d:6e:d1:ef:bc:6b:aa:2a:c5:
c8:4f:cb:e2:0e:07:35:f3:b3:0a:85:b9:71:6d:57:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0E:84:2D:CB:6B:00:26:39:A6:0F:A8:FC:74:F6:00:A9:84:51:55
X509v3 Authority Key Identifier:
keyid:FC:EF:60:D9:FA:6A:A0:AC:03:BA:16:7D:B0:1F:C1:82:B5:85:63:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d8f9a1-0a89-4dde-a31a-0f475bf14603/1/_O9g2fpqoKwDuhZ9sB_BgrWFY9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b8:3c:90:09:91:88:5a:dc:12:5c:bf:87:ae:fd:28:85:3a:
a5:ea:f0:4b:a1:3b:54:43:b0:7a:22:33:5c:69:ca:7f:bf:0a:
e1:73:23:56:cc:ab:a9:61:a7:96:59:e6:9a:96:0c:86:13:b3:
5a:84:de:7b:90:01:15:55:ec:0e:0e:e5:83:24:7d:3f:ac:46:
6b:d9:10:d3:c5:ff:6a:a7:da:02:5b:fe:3f:9c:36:cf:cb:0e:
3f:67:96:33:49:27:f0:9c:7e:2b:ea:81:9a:68:41:20:ed:c9:
16:3e:5b:46:fd:01:2a:bb:2d:3e:ee:f1:41:e2:0b:d3:5c:32:
c3:79:1a:6a:c9:15:3c:d5:23:f4:28:95:c5:e8:7f:04:3b:bf:
12:19:d2:af:23:0d:60:0e:4d:35:d9:3c:14:f7:e8:40:c0:18:
48:ff:95:c7:b8:8a:ec:a2:c1:2e:83:28:b7:18:59:60:7c:72:
08:8a:3e:8c:fb:39:20:a9:79:f8:39:bd:46:14:68:0f:83:76:
30:59:0d:f6:24:e2:01:ff:cd:cc:e3:8c:83:02:e2:45:34:f1:
40:f5:a8:dc:a9:44:37:8a:02:1d:0b:f4:c8:9c:95:b1:3b:b6:
7f:86:f8:69:56:ab:f9:9e:e2:a9:cf:dc:62:37:fc:f2:3d:8b:
61:f4:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:23:05 2026 by rpki-client