Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: xEaCEFqQ1e/1mYbfZzO2i+d8OqjW1L/iY/LUn/K8O6w=
Subject key identifier: B9:A4:28:FB:BE:35:F7:BA:C1:A6:04:AE:80:44:28:7B:23:3E:C4:73
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 01A1231D93D1C7432803043B44C7C24EA25C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 0D03
Signing time: Sat 10 Oct 2026 00:01:43 +0000
Manifest this update: Sat 10 Oct 2026 00:01:43 +0000
Manifest next update: Sun 11 Oct 2026 00:01:43 +0000
Files and hashes: 1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=)
2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: xHlQHRnLSEwUdyC1nJ94pVT0qQOZ8AQ6YWtEZWgJjh8=)
3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=)
4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=)
5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:1d:93:d1:c7:43:28:03:04:3b:44:c7:c2:4e:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Oct 10 00:01:43 2026 GMT
Not After : Oct 11 00:01:43 2026 GMT
Subject: CN=b9a428fbbe35f7bac1a604ae8044287b233ec473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:95:e9:93:1d:4c:28:44:fa:84:81:5c:0c:
dc:f7:09:dc:7f:b4:da:4a:5f:b3:06:ec:55:83:d6:
84:c4:1e:19:28:ce:a9:bd:24:00:32:19:32:c2:ea:
b4:42:f8:f6:59:b0:be:91:e8:57:03:78:2b:31:6c:
41:55:6f:5c:07:45:eb:ed:f5:c4:2e:bc:e9:c8:99:
0e:81:ce:83:f4:21:7e:69:61:9f:b1:e4:c6:26:2a:
f0:a3:60:69:b3:6a:4a:28:92:7c:e6:15:32:44:ca:
c8:2b:1c:be:05:c7:cd:ef:f2:f4:d5:50:49:3d:d2:
ea:c9:e4:3d:28:44:7f:50:a3:16:f8:fd:d9:bb:c9:
16:35:d8:bd:6a:53:3f:f1:cb:23:52:a1:36:25:65:
09:cb:d3:46:58:ff:95:cf:73:d8:2e:39:94:7e:9c:
30:07:30:90:9b:49:85:ef:ab:2f:48:45:2f:a5:8d:
18:63:cc:2f:c1:10:b1:39:02:b4:93:93:b5:91:f3:
8f:ce:5e:03:b6:66:f5:0a:f0:f5:b1:0f:91:2d:05:
7c:7c:59:ae:45:f5:2d:8b:16:48:3c:da:cb:d8:81:
ab:0c:90:c2:74:65:26:f8:57:63:a8:94:3a:cb:20:
fd:40:af:db:47:8e:1b:fd:ce:2e:c3:97:15:53:ca:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A4:28:FB:BE:35:F7:BA:C1:A6:04:AE:80:44:28:7B:23:3E:C4:73
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:98:ec:4d:ae:3b:85:f5:f1:18:75:16:88:3a:7e:fe:96:ef:
d8:cb:26:eb:33:7a:e8:6b:f1:f5:99:3c:19:c9:67:3e:e0:a3:
2a:2e:a4:b0:d7:7e:4e:d5:f9:cd:3b:fa:f0:14:46:99:89:20:
75:70:da:ef:5b:3e:d9:20:76:44:e2:83:ea:81:96:23:64:4b:
a7:e5:b4:e8:16:b3:4e:1f:34:46:eb:ae:d5:42:e5:e3:51:d5:
de:59:87:a6:4f:01:98:f3:9a:bf:cd:64:8b:9c:e3:eb:4a:0d:
12:e2:62:b8:6e:3f:9d:99:78:e7:0d:f6:6a:f0:a5:94:1d:8f:
8c:08:19:b7:b1:c5:20:de:47:16:0c:bd:30:02:47:ff:04:12:
78:ae:ee:17:e6:6e:35:61:9e:c6:89:68:30:11:f7:b9:87:dc:
eb:ce:12:e7:a1:22:8d:e0:a2:02:bc:04:ac:d6:2d:60:e1:a8:
1f:2d:7d:aa:35:54:5e:f3:bc:24:82:b9:2f:17:0a:65:33:e2:
eb:b7:f5:85:38:17:fe:ab:88:f6:2e:0c:1c:7c:4f:32:6f:79:
eb:1c:13:68:19:02:34:07:ac:8f:85:a7:0a:40:b7:33:fb:7a:
aa:8d:f2:7d:fa:d0:9b:82:65:59:b8:e0:00:c8:ca:67:43:5b:
5d:24:ef:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 08:31:49 2026 by rpki-client