Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: A99uavEIpgMsWZqTFKizXgwaHDBLi14HPEZZ8hAFC2w=
Subject key identifier: 3E:FE:8A:0B:17:D9:01:A4:90:09:81:A3:C8:04:F9:C8:BC:27:DA:CA
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 01A140837306E7C970EF2720A62148793852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 191C
Signing time: Thu 15 Oct 2026 17:01:58 +0000
Manifest this update: Thu 15 Oct 2026 17:01:58 +0000
Manifest next update: Fri 16 Oct 2026 17:01:58 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: Ob8QRXAZj03/YXOs1oksRjeq9E0DILPRvaL0i/gSQfU=)
2: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (hash: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:73:06:e7:c9:70:ef:27:20:a6:21:48:79:38:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Oct 15 17:01:58 2026 GMT
Not After : Oct 16 17:01:58 2026 GMT
Subject: CN=3efe8a0b17d901a4900981a3c804f9c8bc27daca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:20:a5:57:46:ae:e7:ca:ce:7c:59:5a:b6:
38:80:b0:2f:d6:eb:c3:dc:36:65:70:97:e0:26:e0:
bf:27:49:7d:15:a3:28:49:b4:09:7f:16:2f:8e:54:
bb:f6:6e:e9:2e:91:3e:5c:59:c2:d7:4c:11:aa:93:
44:e1:5e:df:04:b1:b7:e5:64:63:ba:8d:7b:47:96:
2d:7e:21:8d:42:86:00:e6:96:86:94:a2:ed:bd:8a:
e1:9b:e9:ac:95:5f:65:b7:df:17:32:3f:a2:c0:2d:
e5:9d:cf:59:6b:ce:43:68:3c:e8:9f:cf:b6:8a:6e:
d7:4b:6e:c8:8d:19:08:4d:ab:fc:22:ab:4b:5c:a9:
f1:1c:20:3b:69:12:be:84:61:9f:a2:f6:43:b0:6f:
80:bd:48:f4:77:4e:b9:1c:ea:82:c7:b7:65:0b:02:
0a:1d:c0:7d:f5:c7:8a:0a:7f:58:e2:de:79:7c:dd:
57:20:d4:16:10:35:9a:b5:bd:d9:80:18:0a:63:18:
f0:66:a4:19:10:2b:b7:03:eb:98:c7:01:25:de:68:
03:48:22:b1:ee:3a:c0:12:a6:20:17:dd:08:9f:98:
e6:70:47:70:ba:8c:db:32:ed:d3:d8:a0:10:1a:a1:
76:db:a4:df:b6:6e:41:15:09:c5:79:c9:c3:e6:cf:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:8A:0B:17:D9:01:A4:90:09:81:A3:C8:04:F9:C8:BC:27:DA:CA
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:dd:b9:45:8f:6e:1f:4b:32:46:1c:26:39:e0:98:2c:b9:8b:
62:59:af:48:23:b7:4b:52:3a:1c:d0:f1:4c:23:e8:f2:93:1b:
ed:e0:fe:43:e3:4a:7a:6d:c0:ac:fe:cd:70:88:95:a3:e8:12:
3f:46:da:9d:df:9c:a2:1b:c6:5e:ec:4b:09:ef:25:70:bb:bd:
1a:03:12:45:b7:b7:9b:8e:37:21:ae:c3:1b:68:3e:4e:d0:ca:
5d:f6:cf:fc:0f:17:9a:c7:2b:03:c8:9f:e4:a5:d7:af:9b:f1:
d8:64:74:06:f1:de:7d:4b:ff:32:a2:83:45:a2:65:0e:38:d3:
1d:2c:db:90:f7:ee:3a:8b:a5:ca:c7:68:ac:22:3d:86:9b:5a:
18:a8:8c:4c:d5:12:00:11:e3:11:70:25:21:93:e2:7b:81:53:
6f:e0:86:c2:06:76:6f:82:62:76:98:77:64:7d:05:f5:dd:9f:
1a:15:66:b4:cf:5d:de:cf:02:06:f9:fc:f5:54:7c:4d:d3:61:
05:99:07:1b:3a:03:7e:16:c5:c2:06:ff:b7:1c:4b:27:1b:28:
d5:8b:c8:a2:0d:5f:75:11:99:e2:fc:28:88:2a:ab:f0:39:b7:
52:5b:f1:5a:18:40:ee:d7:b4:05:14:59:00:3b:52:27:8a:f2:
93:f8:2b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAg3MG58lw7ycgpiFIeThSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGUyMzFkNTU1MTg3NmUxNWFmYzY2MzdlYWI3ZmNhODAw
ODgzOTEwHhcNMjYxMDE1MTcwMTU4WhcNMjYxMDE2MTcwMTU4WjAzMTEwLwYDVQQD
EygzZWZlOGEwYjE3ZDkwMWE0OTAwOTgxYTNjODA0ZjljOGJjMjdkYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMgpVdGrufKznxZWrY4gLAv1uvD
3DZlcJfgJuC/J0l9FaMoSbQJfxYvjlS79m7pLpE+XFnC10wRqpNE4V7fBLG35WRj
uo17R5YtfiGNQoYA5paGlKLtvYrhm+mslV9lt98XMj+iwC3lnc9Za85DaDzon8+2
im7XS27IjRkITav8IqtLXKnxHCA7aRK+hGGfovZDsG+AvUj0d065HOqCx7dlCwIK
HcB99ceKCn9Y4t55fN1XINQWEDWatb3ZgBgKYxjwZqQZECu3A+uYxwEl3mgDSCKx
7jrAEqYgF90In5jmcEdwuozbMu3T2KAQGqF226Tftm5BFQnFecnD5s/HSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7+igsX2QGkkAmBo8gE+ci8J9rKMB8GA1UdIwQY
MBaAFPaOIx1VUYduFa/GY36rf8qACIORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTIt
YmExZWQ5NDc0YmEyLzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTItYmExZWQ5NDc0YmEy
LzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWt25RY9u
H0syRhwmOeCYLLmLYlmvSCO3S1I6HNDxTCPo8pMb7eD+Q+NKem3ArP7NcIiVo+gS
P0band+cohvGXuxLCe8lcLu9GgMSRbe3m443Ia7DG2g+TtDKXfbP/A8XmscrA8if
5KXXr5vx2GR0BvHefUv/MqKDRaJlDjjTHSzbkPfuOoulysdorCI9hptaGKiMTNUS
ABHjEXAlIZPie4FTb+CGwgZ2b4Jidph3ZH0F9d2fGhVmtM9d3s8CBvn89VR8TdNh
BZkHGzoDfhbFwgb/txxLJxso1YvIog1fdRGZ4vwoiCqr8Dm3UlvxWhhA7te0BRRZ
ADtSJ4ryk/gr3Q==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:52:55 2026 by rpki-client