Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: OCcEVyIJASxh201zJeTK7zyj/1L+/yMxpSje28QkyEs=
Subject key identifier: CC:F5:69:24:41:44:95:A1:96:65:32:53:37:6B:40:8C:5D:E5:5C:B9
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 01A10AA6E66578A79434B9F1BB51ADE79469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0CDD
Signing time: Mon 05 Oct 2026 06:01:12 +0000
Manifest this update: Mon 05 Oct 2026 06:01:12 +0000
Manifest next update: Tue 06 Oct 2026 06:01:12 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: p+/pTc/OkrtSQUASguwLsO8KebR25ZTtbu75ofylWWo=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a6:e6:65:78:a7:94:34:b9:f1:bb:51:ad:e7:94:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Oct 5 06:01:12 2026 GMT
Not After : Oct 6 06:01:12 2026 GMT
Subject: CN=ccf56924414495a196653253376b408c5de55cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:d4:ef:07:e0:47:a0:b3:37:65:29:13:43:
43:73:be:86:c3:d1:e1:59:e3:72:18:b7:b0:ef:eb:
b1:ff:53:ff:ff:6f:30:78:bb:f4:45:40:be:fe:a1:
10:c7:18:e5:de:41:d8:ea:63:d2:f4:18:3c:54:01:
69:a4:55:24:fd:90:a4:7d:82:83:c0:ef:0b:9b:dd:
7e:2a:7f:37:55:2d:06:3c:61:0c:cd:94:e7:fd:cb:
b5:be:7b:38:6c:a1:f4:72:6f:cf:6c:43:f9:bd:90:
e8:d9:65:81:30:4a:e4:d2:8b:fb:6c:12:f3:2f:43:
38:f1:bc:e1:bb:06:0d:77:f1:28:61:41:00:6c:d3:
55:ff:1f:dc:11:5e:2e:7e:45:e5:3a:9d:68:8c:0b:
ba:9f:24:94:df:4b:3b:77:76:74:30:ae:a2:6b:e5:
11:4d:3e:7e:af:66:30:d5:e5:07:3e:b3:34:bc:66:
67:6d:3a:d7:1e:66:b8:94:0a:cf:18:b4:d8:5c:a0:
3e:27:a4:69:2d:5d:2a:43:8a:11:84:af:6f:12:7a:
a5:24:4f:5e:27:8d:de:5d:b1:fd:12:be:76:d4:3f:
47:c0:c6:68:d4:5a:d3:22:8f:f9:f2:b5:76:f4:8d:
b9:78:20:0e:d5:37:32:c0:91:2a:84:8a:2f:91:15:
b4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F5:69:24:41:44:95:A1:96:65:32:53:37:6B:40:8C:5D:E5:5C:B9
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:6c:a6:99:1f:9b:5d:5f:af:ae:65:60:bd:b7:ae:b1:f8:
a7:3b:0b:d8:6b:81:f6:56:d7:65:5b:77:74:c2:a1:ac:49:8b:
7d:56:2c:48:44:5a:7e:74:94:e9:4d:1a:5f:7a:db:ad:6c:fe:
d7:ce:ea:33:e9:a4:e7:61:e3:56:1d:cd:4c:92:eb:11:43:24:
43:c3:38:cb:5d:dc:28:3b:77:0b:eb:76:a0:41:c7:03:0c:37:
07:f4:70:65:cb:f2:9e:ca:81:37:af:27:22:03:86:42:be:4e:
16:6f:6f:1b:cc:ff:1e:9a:8e:2a:ac:66:e3:d0:72:d0:91:8a:
2d:39:86:82:9f:f9:86:44:cf:24:33:d0:f7:f9:f0:da:14:45:
7d:8c:cd:72:51:c8:dd:6c:90:45:83:52:1a:a4:12:d6:28:52:
15:6a:99:0c:5f:e1:cb:40:f5:4a:56:3a:f5:8a:79:48:65:18:
51:4c:9f:57:32:68:e4:88:d5:e1:28:81:b6:5c:58:a6:7c:74:
15:d2:2e:64:67:ff:c6:63:33:81:8b:55:4c:60:22:8a:b4:7a:
63:79:93:1f:65:5d:59:32:83:4e:28:c1:07:3b:75:9b:9b:bf:
94:30:28:5a:2d:02:40:1c:57:d0:6f:82:63:c7:37:87:61:ed:
4b:c3:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:38:00 2026 by rpki-client