Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: 1CUVcv+AmUPaPLVvr4h39DQE58RZLehj5lmuZhzsfog=
Subject key identifier: EE:4E:72:F8:9D:61:9A:4C:A4:C4:EB:3A:16:37:27:90:52:0F:71:78
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 01A0024B0BD25D73DBF8FC7C81C50F933923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 22:01:07 +0000
Manifest this update: Fri 14 Aug 2026 22:01:07 +0000
Manifest next update: Sat 15 Aug 2026 22:01:07 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: 8QlZaWlvv+XhxcDOwwyJYonKUCD49dQGHKZ0AC4YFqY=)
2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:0b:d2:5d:73:db:f8:fc:7c:81:c5:0f:93:39:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Aug 14 22:01:07 2026 GMT
Not After : Aug 15 22:01:07 2026 GMT
Subject: CN=ee4e72f89d619a4ca4c4eb3a16372790520f7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ec:01:78:15:ca:b1:07:62:b6:7b:c9:fc:ac:
19:68:88:6a:93:e5:c5:dd:33:b3:15:90:88:e8:f7:
fb:95:b5:f3:2f:93:0f:7c:95:35:d1:5b:a4:14:7d:
33:53:8b:26:dc:6b:0a:49:13:a3:9a:69:e1:64:3a:
01:9a:13:47:d5:3e:79:0b:8f:da:82:07:be:b5:75:
fd:74:a2:9a:01:30:88:1e:24:8a:0c:5e:40:f6:6d:
5a:f6:27:9f:08:60:51:6b:32:d2:e0:a2:36:83:6f:
e2:9d:d5:83:90:a9:da:e4:5b:a4:7d:80:1d:0c:b2:
bb:b5:aa:6c:ea:ff:a6:ab:9d:09:d1:35:92:74:4d:
f9:3f:21:93:eb:1a:08:d6:8a:af:70:2c:d0:10:da:
d4:df:b8:67:4a:2a:b0:10:8a:fc:50:65:42:11:cf:
d6:64:18:02:83:68:48:ec:cb:e6:6d:66:c8:95:41:
c2:0d:f3:45:a0:17:b8:70:f3:de:3a:74:68:61:99:
17:de:7e:d8:d7:c0:fe:27:80:b9:9b:5e:ba:84:6e:
ad:bb:b2:30:7d:47:b4:da:0d:1f:94:78:7b:29:ea:
c4:d3:6c:2d:91:62:d7:5c:74:47:fd:0c:56:57:35:
51:88:bc:7e:26:fc:1f:b1:0c:d3:81:e1:38:b4:1b:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4E:72:F8:9D:61:9A:4C:A4:C4:EB:3A:16:37:27:90:52:0F:71:78
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b6:c0:d9:4a:f7:d6:d1:fc:9e:c8:fb:4d:56:13:5a:fd:e9:
be:50:d6:79:29:26:ec:b5:a2:7a:1d:fa:55:ef:c6:aa:79:d7:
b8:b5:b2:f4:92:a8:dc:39:96:ba:a1:89:16:eb:c6:32:c4:b1:
51:58:5d:3f:da:a0:cf:cd:f9:e3:15:53:24:a1:de:81:2a:04:
e1:ab:8b:7c:28:ce:be:6a:7f:93:d5:55:ed:0d:2f:51:4f:12:
3b:d1:27:31:4d:6f:95:1d:65:45:30:e0:5b:5f:ec:c5:f9:4b:
eb:78:0e:81:14:6a:65:bf:37:5d:f4:a0:e4:e7:0a:bb:55:65:
ca:fc:ea:37:73:d5:43:13:1b:c4:82:64:df:6d:ca:20:b4:cf:
db:31:f0:1e:9f:68:32:0d:16:3e:f5:69:f4:27:9b:0b:b9:1f:
5c:e7:88:64:85:1b:1b:09:c4:66:56:a7:08:67:4d:3e:67:a7:
33:89:e5:51:40:fc:7f:a1:d8:8e:92:9d:01:d2:34:a6:2e:26:
98:6d:58:c3:be:01:00:02:7a:ae:d5:94:3a:31:a5:b2:6c:13:
45:84:96:ce:d6:08:ab:86:33:f2:ea:4b:83:04:b3:7e:9b:f7:
d2:50:a4:b7:35:5c:6b:5c:16:36:e9:42:fc:37:c4:45:d1:da:
af:d9:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:24:28 2026 by rpki-client