Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: 3ZfJNik5yNCcWp+1q4NXninmQRneGzI9rjCpWHb8CiU=
Subject key identifier: 5F:86:6A:A8:D1:42:66:35:64:FB:94:1E:FD:2E:09:79:35:FF:AD:C6
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 01A11FE51427317B930871DA0BAEAFB1F8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0CE8
Signing time: Fri 09 Oct 2026 09:01:08 +0000
Manifest this update: Fri 09 Oct 2026 09:01:08 +0000
Manifest next update: Sat 10 Oct 2026 09:01:08 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: j6BJWoKphuIlWqNNREvZjwlkYldENTp0sfVcm38od0o=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:e5:14:27:31:7b:93:08:71:da:0b:ae:af:b1:f8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Oct 9 09:01:08 2026 GMT
Not After : Oct 10 09:01:08 2026 GMT
Subject: CN=5f866aa8d142663564fb941efd2e097935ffadc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:39:3a:06:e6:84:23:5e:6d:2c:fb:81:64:
2c:38:73:e5:17:97:51:c9:73:35:13:43:3c:1a:15:
09:ab:a1:19:4f:6b:e6:53:0e:48:f6:88:01:f1:8a:
3a:a0:42:ba:3c:34:bb:e8:14:35:21:66:da:d5:55:
bb:09:f0:1c:91:d8:45:e4:17:8f:2a:d3:5c:3f:c6:
44:dc:16:c8:37:95:35:61:d0:13:8a:95:10:69:e9:
2f:06:b0:b4:46:14:c2:ab:06:31:e3:cc:b2:41:70:
f1:6d:f2:65:aa:2c:93:31:35:62:8b:f0:f2:98:af:
be:f3:51:da:f2:0e:d0:c2:70:a2:e3:b6:10:58:af:
1a:04:87:1e:7a:71:f1:5a:43:6e:c1:69:d1:e1:0b:
97:00:7a:ca:62:b8:4c:34:2c:dd:1f:5d:dc:fb:41:
41:11:9c:e0:a9:f3:73:fe:ac:5f:66:07:35:6b:da:
e4:6c:bd:80:d3:79:0c:5c:93:e2:f5:bf:bb:e6:41:
4f:20:49:4d:e3:38:c8:30:d1:42:ba:47:60:2b:43:
d0:37:23:51:cc:92:e7:7b:98:36:e5:61:a7:30:15:
10:93:6d:96:30:9f:66:ea:d5:b4:31:0c:84:72:59:
f9:f7:d6:13:55:64:db:55:77:fe:3f:9e:6d:b2:cf:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:86:6A:A8:D1:42:66:35:64:FB:94:1E:FD:2E:09:79:35:FF:AD:C6
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e9:ee:ad:4b:9a:a7:bb:fc:c9:40:29:31:aa:23:93:45:23:
52:bb:95:07:3d:ac:be:e3:4c:ba:e1:b1:d8:39:f6:5c:ac:f9:
33:89:52:ec:ef:84:f5:4b:a0:b7:6e:b4:9f:19:71:6f:ff:9f:
67:97:87:e9:5f:a1:d8:a9:c6:9c:40:c1:0c:2c:a5:69:d2:ee:
fc:5a:b7:e2:94:3d:e6:40:09:89:96:ba:bf:25:8a:d3:7e:09:
61:19:02:49:03:22:1f:95:31:ef:d8:ce:af:b2:61:8e:f0:90:
79:f7:5e:1e:11:df:52:e1:3d:7d:dd:65:c4:27:ca:62:56:84:
f3:33:4d:94:29:da:85:13:53:a5:d5:47:08:8a:a3:27:2f:d1:
af:f6:5e:29:d9:ae:83:d6:04:f6:05:11:6d:4b:88:d6:d3:4f:
ef:59:7f:14:bf:ca:60:7a:e7:63:0a:9d:fe:54:19:dc:09:c5:
0d:ad:c4:ef:35:2e:e2:f4:a1:4b:75:a7:d5:06:b3:2d:1b:95:
35:9d:bf:ed:bf:18:ec:d9:f0:b0:1a:47:80:d3:5a:12:ca:0e:
87:6e:5e:59:dd:b5:55:28:49:c5:11:cf:43:05:2b:85:5b:52:
2a:d0:56:9f:4e:95:0f:cf:6b:67:36:6e:ae:e3:44:f0:97:1a:
5b:a4:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:12:33 2026 by rpki-client