Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: wDACrWS6e0+7+7H5w/OA0MCFsvnwEuy5HAvnD4SPJ50=
Subject key identifier: 00:F9:09:D9:F6:02:81:B6:80:3A:FF:BE:19:D2:87:D4:E7:60:0A:A2
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019F1A561BA52E1FAF5D17310EF618998AB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0BDC
Signing time: Tue 30 Jun 2026 21:01:18 +0000
Manifest this update: Tue 30 Jun 2026 21:01:18 +0000
Manifest next update: Wed 01 Jul 2026 21:01:18 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: Tf+lMI+1YUkFMoSKdKxAGtrOLlq9yZJ6yUYEgQgJ8PA=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:1b:a5:2e:1f:af:5d:17:31:0e:f6:18:99:8a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Jun 30 21:01:18 2026 GMT
Not After : Jul 1 21:01:18 2026 GMT
Subject: CN=00f909d9f60281b6803affbe19d287d4e7600aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:f3:11:78:c0:d2:8e:41:0a:eb:7e:d9:37:
21:08:13:b1:f2:25:6e:88:c7:30:68:f7:f0:1f:aa:
54:65:87:74:17:2c:a5:fa:8e:62:de:41:26:b5:e9:
8f:5e:41:e5:dd:ef:87:56:f2:76:75:a3:92:e3:da:
4e:98:30:dc:b8:55:6d:df:ba:4c:28:c0:ce:9f:b5:
bf:04:16:cc:c8:e3:09:00:07:74:79:3e:5c:95:ab:
49:14:38:54:da:8b:b3:8c:c1:bb:0a:bd:e9:5e:33:
43:b2:04:30:01:18:05:d4:08:66:b0:9c:cc:1d:0a:
0a:08:e8:03:6a:fe:e3:62:ec:46:ba:38:ee:05:40:
67:66:f8:22:dc:cf:3a:89:15:61:a4:15:0f:4f:34:
46:ba:c6:e6:7b:38:99:39:bc:a0:b4:41:09:53:97:
45:b8:3f:61:b9:00:59:f3:88:2a:e6:5f:1b:e0:16:
b4:fa:98:a3:da:0a:19:9a:7b:79:7c:e8:5c:2a:1f:
6f:f7:70:02:b9:c6:51:4a:1c:f6:87:24:5f:12:77:
34:0d:c7:cf:1c:b4:90:40:42:8c:39:8e:38:28:c0:
2d:09:7a:41:9b:db:d0:39:70:0f:9a:88:7d:1e:05:
d2:06:7d:8a:93:c5:be:fc:6d:04:e7:51:fb:6d:17:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F9:09:D9:F6:02:81:B6:80:3A:FF:BE:19:D2:87:D4:E7:60:0A:A2
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8e:85:c1:c1:92:90:c1:24:1e:5a:c2:16:dc:6a:24:4a:cc:
82:06:a7:e0:41:57:b4:8e:9f:c4:a6:fa:c2:6e:04:ae:36:4b:
c6:87:2a:2a:52:c6:b4:2f:f2:b1:8a:cc:4a:b6:ec:bf:7c:95:
92:6f:e2:25:f1:04:2c:b8:45:7a:59:97:0d:63:98:5b:01:9c:
e7:e3:ca:b1:2b:a8:a1:96:5b:2a:90:09:71:20:50:36:30:ba:
ec:11:46:09:45:25:16:f4:c5:9d:4b:c7:f8:5e:aa:36:a4:a9:
c5:6e:d0:2c:81:8c:65:10:a4:b0:9f:5b:03:e6:5e:a2:aa:79:
d9:07:6a:34:0c:bf:69:61:71:ce:6c:7d:9c:21:2c:82:81:22:
f3:c7:42:0d:cc:5f:15:f8:c5:c3:29:09:31:a7:4c:27:f6:09:
5f:e5:af:5e:61:6d:a3:91:d0:39:23:2f:c5:48:b2:04:d1:55:
af:a7:d2:9b:da:3c:bd:14:43:81:2f:8f:57:b6:54:3d:26:33:
91:ea:79:39:a5:d2:e5:db:11:55:39:be:77:95:7f:a7:43:61:
12:21:a2:8f:91:cf:a2:d9:0f:fc:e2:00:20:67:c0:c0:19:43:
5d:e6:05:8b:d7:c5:c0:c0:d4:4e:7a:4f:22:a8:a2:0b:c0:44:
33:c6:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:24 2026 by rpki-client