Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: xQUW1c07leBfVMbwWin7D7Z6gMunihiDjTDZdRw12+k=
Subject key identifier: FE:A6:E2:9D:C1:34:02:E7:CF:5D:92:55:5E:F2:5D:AB:C4:A8:8C:DA
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 01A13E25995FCA86EB00E902A8F2844E9418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0FD9
Signing time: Thu 15 Oct 2026 06:00:13 +0000
Manifest this update: Thu 15 Oct 2026 06:00:13 +0000
Manifest next update: Fri 16 Oct 2026 06:00:13 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: kvGlFkXFsyRovZmPIDlFOeDxhmMtZft/N4IkvX2Sywc=)
2: Uklboo3tG2E8bmpaNpWg7iBT500.roa (hash: 3bdk4yfdkJQ/C4ZvETpkPR6Yh1F2fFWoUHJ2qwV5MwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:99:5f:ca:86:eb:00:e9:02:a8:f2:84:4e:94:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Oct 15 06:00:13 2026 GMT
Not After : Oct 16 06:00:13 2026 GMT
Subject: CN=fea6e29dc13402e7cf5d92555ef25dabc4a88cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:de:07:da:80:b6:02:1a:9a:51:be:27:bd:33:
2f:36:8c:b3:01:22:ad:c4:03:39:07:d3:d9:66:9b:
cf:48:4e:98:75:40:77:ac:82:d4:2d:c4:f4:ba:de:
61:85:15:11:a9:4d:d4:dd:ab:53:9c:c5:3f:32:09:
39:5a:0d:45:d7:eb:3b:52:35:ea:40:60:49:a7:e4:
23:c3:07:a4:f3:4f:ad:32:61:5e:3d:a9:89:9d:76:
54:d5:f6:62:6f:59:cf:da:57:46:0b:60:f3:2f:7d:
9a:35:1e:fc:20:74:64:9b:d3:c0:b3:d9:01:e4:70:
a8:92:cd:b8:8f:a2:85:cb:82:e7:cb:d5:99:bf:c7:
c7:ee:db:91:8f:c0:fb:fc:2b:c6:43:45:d9:c3:6d:
73:3f:86:2d:d7:c6:6a:ab:5d:69:fe:44:b9:7e:48:
d5:23:57:f5:34:a4:f0:0e:8b:60:c5:06:58:12:a9:
8e:f6:1c:72:24:d4:a6:7a:56:23:64:64:10:ba:49:
27:6f:cf:6a:37:f0:dc:ad:f3:69:99:fc:75:f8:7d:
2f:32:cb:af:0d:55:4e:bd:72:b2:e1:87:cb:76:b2:
a6:5a:c6:32:a8:fb:7f:f1:28:19:34:15:27:9d:3d:
9e:cf:3f:94:63:bd:84:28:03:22:a8:44:93:a5:79:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A6:E2:9D:C1:34:02:E7:CF:5D:92:55:5E:F2:5D:AB:C4:A8:8C:DA
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ce:9b:6f:c8:24:7c:eb:8f:ce:64:fa:4d:57:c5:c3:d5:bc:
a7:a2:c5:72:9a:77:bf:ff:df:c2:04:47:e2:87:75:5d:9d:03:
30:b0:b2:e3:28:0b:a9:b8:c6:2e:22:37:98:dc:fa:13:12:8c:
f6:3b:10:bb:e1:c7:dc:31:22:9b:38:52:6f:cb:e8:12:de:77:
0c:7f:01:d8:d9:35:63:c2:ee:6d:f6:44:f1:57:33:45:c1:db:
de:0f:4d:b8:98:c3:14:db:2f:29:0f:b8:76:f2:21:7e:7a:37:
a4:34:f1:d4:48:d7:c8:96:b8:8c:7b:eb:1a:5b:77:83:65:e6:
80:18:b5:a1:4d:12:7f:10:64:ee:f0:a0:eb:84:56:f0:2a:1f:
c7:d9:16:ca:ce:af:ee:e7:c3:a0:88:ad:97:99:3d:a4:93:6c:
17:f6:8b:2e:90:7d:db:9e:f9:98:fe:0e:c1:a8:2c:2c:53:41:
7f:bc:b8:2d:fb:5b:c3:78:5a:4d:7b:51:ef:f1:50:fb:39:26:
cb:dc:b2:ac:5d:6f:f7:eb:7a:12:d0:d1:a3:f1:65:72:68:7e:
48:73:ec:ac:4d:2f:17:12:66:1e:b2:d7:92:9c:fe:02:d6:5c:
57:38:c3:93:4e:d1:4f:4e:46:8e:bd:b6:29:ee:e0:6d:ad:77:
a0:4f:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:22:09 2026 by rpki-client