Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: AVzWSychP19ndWnR8Af0D+Tt30fTKxqdWiEm/1srbgo=
Subject key identifier: 59:B6:47:97:0F:D3:F6:8D:9F:CA:7F:EB:A3:6F:98:3A:00:D3:D0:AA
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 01A0D07F61C2D57E3FAB160280569A5B054E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 23:00:03 +0000
Manifest this update: Wed 23 Sep 2026 23:00:03 +0000
Manifest next update: Thu 24 Sep 2026 23:00:03 +0000
Files and hashes: 1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: mB0A26F5LwarsvmJ51acDU1rRIq4XciAGzC3uHxU1Eg=)
2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:61:c2:d5:7e:3f:ab:16:02:80:56:9a:5b:05:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Sep 23 23:00:03 2026 GMT
Not After : Sep 24 23:00:03 2026 GMT
Subject: CN=59b647970fd3f68d9fca7feba36f983a00d3d0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:1f:fe:d3:82:ca:e0:e8:3b:6e:fa:e0:4b:
cf:61:69:8c:69:05:78:be:ce:27:f0:5e:7b:94:b6:
83:65:dd:26:01:f1:03:6d:1c:25:48:31:b0:d3:5e:
48:78:64:5e:de:ce:b1:e5:d9:f0:07:80:ac:b5:e0:
36:a4:40:69:0c:9f:4c:64:8e:82:ce:50:a0:f5:25:
94:1c:fe:49:43:79:32:86:37:0c:f3:97:fb:b9:7e:
f8:82:cb:e3:46:27:a3:a9:06:e3:03:aa:55:aa:07:
b4:ac:05:b8:1d:93:7d:f0:d5:53:3b:33:68:52:43:
c2:f4:1e:ac:06:6b:37:36:f6:24:47:97:27:6a:4b:
0b:0f:95:e1:c5:81:f2:00:24:02:3c:72:da:4d:02:
bd:21:d4:50:a1:dc:7c:97:e6:8e:4e:cf:3d:b6:72:
58:64:f6:9a:35:82:77:60:bd:c0:cd:13:07:ff:9b:
cc:3e:0b:89:f9:4f:9d:ce:47:03:71:a8:d6:20:e6:
e0:c0:80:01:b8:94:1a:e3:f4:cf:12:50:f3:ed:a6:
38:40:2c:da:37:0b:40:ee:0b:bd:a4:7c:94:8c:02:
f1:27:61:5b:bd:48:07:ff:82:3c:8a:dc:c2:a4:78:
34:b6:f4:9f:fe:f9:de:2d:0f:96:ef:cd:5d:79:f8:
98:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:47:97:0F:D3:F6:8D:9F:CA:7F:EB:A3:6F:98:3A:00:D3:D0:AA
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f1:2f:bf:d2:be:cd:74:cc:6b:eb:b5:a5:db:bd:71:04:b3:
4f:4e:47:37:55:54:ec:f0:f9:33:bd:14:df:75:15:6f:37:db:
e4:df:1e:2a:53:d0:9a:a5:9c:22:2b:ac:b1:26:66:cf:ba:7f:
cf:e2:be:1b:cf:97:c9:4e:ea:a2:20:56:cd:5f:a1:56:fb:d8:
94:e2:10:29:b9:72:3a:e6:e9:d6:d7:f0:be:89:0a:f7:53:51:
06:ee:7d:76:92:52:2f:71:0b:eb:b7:c6:22:8a:f9:5a:76:80:
12:b1:09:ad:56:64:6c:3b:bc:d6:df:72:6c:f4:d1:09:86:76:
94:3d:35:54:c9:df:f6:98:56:77:20:98:7b:c0:28:b6:ca:c7:
a8:17:25:bd:09:e8:b1:7f:b7:2e:28:ee:fd:b0:73:3b:9b:fe:
56:b4:ac:42:c3:5f:2c:28:51:ee:10:29:ea:ff:db:af:fe:70:
a4:79:ff:0e:e8:c7:f2:25:8b:c1:a0:34:2e:da:25:7c:0b:cf:
4c:c5:47:9a:a0:37:43:3c:bc:cc:01:aa:c8:38:a5:fd:4b:3b:
14:d0:ad:af:6f:58:02:fe:ac:2a:61:48:26:b5:96:2a:f4:15:
a6:cf:64:50:bf:5d:c3:43:33:46:f6:55:49:df:cb:48:88:7b:
4a:b2:95:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf2HC1X4/qxYCgFaaWwVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGIyZjRlNjY4ZWYwYTE3NmE4YmQwMDA0ZTI3Nzc2NzA4
MzMyMzgwHhcNMjYwOTIzMjMwMDAzWhcNMjYwOTI0MjMwMDAzWjAzMTEwLwYDVQQD
Eyg1OWI2NDc5NzBmZDNmNjhkOWZjYTdmZWJhMzZmOTgzYTAwZDNkMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUgf/tOCyuDoO2764EvPYWmMaQV4
vs4n8F57lLaDZd0mAfEDbRwlSDGw015IeGRe3s6x5dnwB4CsteA2pEBpDJ9MZI6C
zlCg9SWUHP5JQ3kyhjcM85f7uX74gsvjRiejqQbjA6pVqge0rAW4HZN98NVTOzNo
UkPC9B6sBms3NvYkR5cnaksLD5XhxYHyACQCPHLaTQK9IdRQodx8l+aOTs89tnJY
ZPaaNYJ3YL3AzRMH/5vMPguJ+U+dzkcDcajWIObgwIABuJQa4/TPElDz7aY4QCza
NwtA7gu9pHyUjALxJ2FbvUgH/4I8itzCpHg0tvSf/vneLQ+W781defiY7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFm2R5cP0/aNn8p/66NvmDoA09CqMB8GA1UdIwQY
MBaAFPaLL05mjvChdqi9AATid3ZwgzI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEt
NTJiMDc3NWM3Y2I0LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEtNTJiMDc3NWM3Y2I0
LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/Evv9K+
zXTMa+u1pdu9cQSzT05HN1VU7PD5M70U33UVbzfb5N8eKlPQmqWcIiussSZmz7p/
z+K+G8+XyU7qoiBWzV+hVvvYlOIQKblyOubp1tfwvokK91NRBu59dpJSL3EL67fG
Ior5WnaAErEJrVZkbDu81t9ybPTRCYZ2lD01VMnf9phWdyCYe8AotsrHqBclvQno
sX+3Liju/bBzO5v+VrSsQsNfLChR7hAp6v/br/5wpHn/DujH8iWLwaA0LtolfAvP
TMVHmqA3Qzy8zAGqyDil/Us7FNCtr29YAv6sKmFIJrWWKvQVps9kUL9dw0MzRvZV
Sd/LSIh7SrKVKw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:03:17 2026 by rpki-client