Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
File: 9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft (raw, json)
Hash identifier: HAIMWBnVdRkKnLDeq6dTH/HoMgCv5n1a1GRDkZZ9Oqo=
Subject key identifier: 28:8E:75:78:7A:F8:77:60:E8:F0:56:F6:C4:AF:2D:53:D8:30:E0:AC
Authority key identifier: F6:83:2F:42:A5:CB:A7:96:48:E3:16:97:A9:69:90:0D:7B:61:7D:8E
Certificate issuer: /CN=f6832f42a5cba79648e31697a969900d7b617d8e
Certificate serial: 01A0D983603F004A4BC2A6A169B4FE3CEFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
Manifest number: 0139
Signing time: Fri 25 Sep 2026 17:01:00 +0000
Manifest this update: Fri 25 Sep 2026 17:01:00 +0000
Manifest next update: Sat 26 Sep 2026 17:01:00 +0000
Files and hashes: 1: 9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl (hash: Q5/J8GUxSAiKxwyq9UCsSmSSxC8PpVpuT4xbPcniLGE=)
2: _QLic1olYUPd_fY2d_h9WrgGPIA.roa (hash: OjCrer3sO5hPLgOKZ7yjVlWStPYb1xzzz03u7geE+lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:60:3f:00:4a:4b:c2:a6:a1:69:b4:fe:3c:ef:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6832f42a5cba79648e31697a969900d7b617d8e
Validity
Not Before: Sep 25 17:01:00 2026 GMT
Not After : Sep 26 17:01:00 2026 GMT
Subject: CN=288e75787af87760e8f056f6c4af2d53d830e0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:5a:68:66:10:ae:c3:42:e0:fa:b9:d7:55:
e8:31:4a:9a:61:43:6a:31:af:67:ac:cd:4d:95:ac:
a4:d2:5d:53:d2:1d:29:f7:50:5c:47:b2:71:2c:1a:
c7:94:d4:7a:4a:b2:1e:71:ab:48:4f:16:11:84:6b:
bf:03:7e:8f:d4:b0:18:36:5b:7a:83:ca:d6:0c:6b:
c1:60:4a:fd:71:6a:17:2c:06:19:3b:86:89:3b:7b:
6c:67:bc:73:be:2c:c5:69:21:91:b5:13:04:6c:32:
0c:50:95:2d:cd:b8:db:e0:28:42:9a:a7:77:32:c3:
f6:8a:51:38:ad:b9:a5:28:03:fd:16:ed:d2:d1:87:
7c:f5:4f:1b:ee:49:e8:68:7a:24:da:0c:1a:28:ac:
d1:ea:46:0f:3c:31:3c:e6:4f:e6:3b:3e:bf:a0:5c:
0c:fe:16:ec:62:a6:2b:cf:56:25:2a:2b:14:49:90:
78:a6:c3:59:23:82:e4:a3:8b:ce:9c:de:11:87:ac:
8b:52:eb:0a:28:17:4c:d1:40:a7:99:96:50:89:a8:
ea:b6:ab:3d:f1:b9:4b:4e:e1:2f:35:bb:a2:91:a7:
ab:8b:79:51:1a:67:90:e9:57:8b:47:e9:ac:82:96:
8a:1b:0d:96:7b:c8:8a:2d:72:7f:68:30:08:37:37:
c3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8E:75:78:7A:F8:77:60:E8:F0:56:F6:C4:AF:2D:53:D8:30:E0:AC
X509v3 Authority Key Identifier:
keyid:F6:83:2F:42:A5:CB:A7:96:48:E3:16:97:A9:69:90:0D:7B:61:7D:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oMvQqXLp5ZI4xaXqWmQDXthfY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b5601a-3474-4082-8030-8e898e9fa9ea/1/9oMvQqXLp5ZI4xaXqWmQDXthfY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:38:f5:ee:20:db:de:9b:e4:be:6a:76:f7:c9:e5:2e:12:fd:
93:93:ea:89:39:19:e1:20:49:f4:26:13:d5:80:fc:ba:ba:f1:
8f:dc:55:3b:84:c3:a0:6e:cd:a5:1b:de:4d:ec:a6:28:e9:70:
f0:d7:cf:1e:3a:b7:cb:ce:13:31:8d:a4:2c:18:9b:df:c3:be:
67:de:f6:b0:36:44:8d:3e:c5:27:8e:11:2a:0b:19:6b:97:24:
1f:85:3c:25:60:47:7f:f8:9a:69:d8:76:af:74:66:1e:2e:04:
ff:18:ad:83:05:6e:ec:c7:9b:ab:5c:20:dd:81:b0:0d:cb:aa:
fc:55:a1:82:1b:cd:41:b7:e8:4a:97:a5:28:bd:97:53:de:cc:
b2:1e:c1:21:ff:13:d6:cb:61:b3:0e:bd:c0:0b:f9:8f:60:fc:
34:a2:ec:cd:61:95:1b:46:eb:8d:7c:15:c5:85:66:4e:55:32:
82:d2:e7:17:a0:25:ad:4a:12:e3:bf:42:c9:f8:10:5e:e1:7b:
6b:93:d5:98:a4:78:72:70:e8:9b:73:89:cc:59:4f:3e:01:d2:
5f:1e:db:54:03:03:ed:b2:27:da:93:57:b9:62:67:ca:5f:e4:
23:a7:51:96:f2:51:30:e3:8e:88:13:9a:20:23:35:82:fa:ef:
95:a8:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:45:22 2026 by rpki-client