Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json)
Hash identifier: Ard9ZcVhPh0RAS95G8gStdLJMZDY3vwXKjdCJqW8fy0=
Subject key identifier: FE:D2:51:88:DC:76:1F:A5:6D:FF:EE:DA:83:E0:0C:7A:70:70:5C:CB
Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Certificate serial: 01A118D0226C96A5EE801D5DFEB3A4EC8DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
Manifest number: 0C0D
Signing time: Thu 08 Oct 2026 00:00:55 +0000
Manifest this update: Thu 08 Oct 2026 00:00:55 +0000
Manifest next update: Fri 09 Oct 2026 00:00:55 +0000
Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: GoLPPSCAr+ua2j7/JCosC6LL3brBq4+TvoiHm/7vO8M=)
2: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (hash: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI=)
3: vlpxtqpjpQxPD5I7h8_GagReIJQ.roa (hash: TD2wCDrzMV1HjU3in4n/cQ4TcCR7y/LDU6bd62cCGK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:d0:22:6c:96:a5:ee:80:1d:5d:fe:b3:a4:ec:8d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee
Validity
Not Before: Oct 8 00:00:55 2026 GMT
Not After : Oct 9 00:00:55 2026 GMT
Subject: CN=fed25188dc761fa56dffeeda83e00c7a70705ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:cf:7c:10:4f:df:00:4f:c6:54:ab:95:72:
88:06:99:e0:2a:d9:5c:73:4f:35:28:a7:f1:97:ca:
ef:6c:b8:4a:01:3c:ca:f4:f5:96:f3:59:87:0c:33:
f3:7a:ef:26:4d:e5:fe:27:e7:12:fe:77:78:9b:73:
78:4f:8e:3b:ac:49:a8:52:9e:11:7c:c3:cb:d1:7d:
9e:93:ee:f4:31:eb:4c:c8:2b:b6:59:59:13:61:6a:
0c:ea:75:84:c7:dc:be:b6:7d:5c:6d:41:bb:21:2f:
60:c7:1f:56:35:64:05:9f:d6:b6:1e:07:43:11:94:
b7:07:93:21:01:0a:ce:c2:da:f3:5f:5a:fe:ca:91:
36:33:37:7d:6e:0c:b2:a3:92:45:7e:7b:d0:51:2c:
46:f5:87:39:fb:36:ba:12:c5:73:e9:a6:ac:62:23:
67:65:78:b7:c3:a3:54:39:ae:0e:02:ac:08:c3:ba:
4a:7f:55:6c:8b:9b:f1:6c:54:03:a3:64:45:c0:bc:
15:1a:e8:d5:72:26:da:44:20:84:6b:21:90:6c:b9:
05:c3:d5:9d:75:cb:bf:83:62:8d:57:09:db:4d:b5:
d5:ff:72:67:73:1d:7c:09:d8:8c:3b:64:f8:21:c0:
1c:4a:98:26:40:45:f6:84:72:ec:54:e7:61:23:51:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D2:51:88:DC:76:1F:A5:6D:FF:EE:DA:83:E0:0C:7A:70:70:5C:CB
X509v3 Authority Key Identifier:
keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6f:5c:26:18:e5:aa:ec:04:13:19:87:0f:26:ce:bc:6b:c3:
34:94:55:49:75:7c:43:16:4a:75:97:43:df:49:f9:f0:84:e0:
00:3c:e3:33:58:f4:ff:dd:87:42:59:97:49:83:25:ea:9a:68:
91:29:37:26:43:44:81:d6:db:63:01:c2:00:9d:66:f7:5e:32:
b3:ef:db:95:fd:6c:5d:81:95:3a:6e:f7:d0:26:e8:49:e0:3a:
fa:7b:ef:e3:a1:1b:e0:e6:f8:9f:65:42:8a:7e:96:ba:a4:e5:
ef:bc:50:02:84:aa:d6:41:f8:8e:0c:a6:b9:c9:d6:a7:91:22:
98:bf:93:67:4d:cc:e9:6d:c6:31:c4:4f:ab:4e:7b:14:b6:16:
84:27:8f:44:79:26:4f:3f:10:bc:da:bc:2a:41:c8:83:a6:2f:
3d:73:7b:ec:4a:41:82:f4:ef:3d:85:44:ad:93:05:77:13:00:
4d:9d:4d:9c:c8:27:67:04:28:c6:47:40:2f:f6:26:5a:f9:61:
8e:59:66:5c:67:28:d8:6e:d7:37:48:a6:b6:a0:f1:5f:40:fb:
2e:a1:c3:f8:91:d1:55:9e:7b:71:8b:eb:c3:6a:c9:65:d0:cb:
6c:f0:fa:15:5c:f7:92:f5:85:a3:40:f8:1d:b7:d8:39:d2:12:
7f:11:3d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:55:03 2026 by rpki-client