Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: aqTEgbmhkxcClqoYKCprp/s37pmEgdbDrRYqUBaNFng=
Subject key identifier: 64:AE:44:52:C2:00:61:A2:63:A2:D7:BF:56:7C:F5:01:04:2D:D9:E8
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 01A120C166D7FBB1851B5C5A048F7C0B42C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0CB9
Signing time: Fri 09 Oct 2026 13:01:47 +0000
Manifest this update: Fri 09 Oct 2026 13:01:47 +0000
Manifest next update: Sat 10 Oct 2026 13:01:47 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: ncNdPq128aa3y1+vNwRA+3xna64WYNFKpjeExczodGE=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c1:66:d7:fb:b1:85:1b:5c:5a:04:8f:7c:0b:42:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Oct 9 13:01:47 2026 GMT
Not After : Oct 10 13:01:47 2026 GMT
Subject: CN=64ae4452c20061a263a2d7bf567cf501042dd9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f1:31:15:fe:84:06:71:04:23:9b:87:4f:89:
d3:c1:25:04:fc:a2:33:b0:21:6b:53:dc:87:e8:e8:
cc:22:ee:59:79:b6:4f:a6:3f:65:f4:20:fa:df:47:
9f:d2:eb:68:55:0f:9d:34:e0:3b:5e:07:d9:ff:a5:
f0:37:dd:20:81:57:09:57:c5:ee:01:7b:62:07:bf:
a5:da:86:20:a6:72:cc:24:8c:fd:be:cf:73:12:76:
c5:a9:45:7e:ee:5a:5b:b1:cc:14:b5:40:fd:d0:96:
c9:8a:95:5e:81:12:2d:a3:6a:db:ce:a6:70:45:0e:
18:84:4f:37:f7:22:fe:5d:4c:af:e7:03:e1:36:e1:
b7:fa:83:5c:34:ab:4c:53:e7:56:4a:3e:e5:ad:2e:
e3:27:ee:28:b5:c9:f8:55:9b:e7:42:67:c6:5c:12:
39:a0:eb:cd:be:f6:3c:ac:26:00:25:7b:76:bb:e9:
4a:31:23:4f:ae:1b:9e:d0:31:0f:75:ca:98:b5:40:
70:25:59:9e:6b:65:db:96:af:54:92:94:5a:52:f6:
5b:60:be:f3:ed:0b:96:82:4d:bf:c8:93:75:a4:58:
e1:99:35:ed:3c:68:cd:55:ca:fe:af:33:5f:fe:31:
38:d9:fe:e8:9f:7f:67:f4:82:eb:75:a8:5c:61:03:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:44:52:C2:00:61:A2:63:A2:D7:BF:56:7C:F5:01:04:2D:D9:E8
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dc:d7:ff:9a:9f:fd:1e:ce:79:ff:49:17:3b:1f:20:01:df:
8c:5e:78:fd:7b:2f:b8:d5:86:1d:cd:ed:75:e3:71:d7:c2:a8:
79:66:2e:fa:c6:54:ac:39:10:39:fc:93:01:64:8c:34:f4:7e:
68:89:d9:15:ef:a9:51:9e:0f:fc:8f:81:6c:a0:87:16:da:4a:
4a:b2:32:75:77:6e:9c:7e:89:42:a6:11:f9:ca:c2:90:9e:5d:
db:36:42:ef:17:57:d6:d1:49:91:5b:0e:49:ee:e4:d9:cf:c1:
e8:9f:db:5c:03:e0:9c:5c:fc:0d:0f:7b:4e:09:d9:42:60:bf:
85:b7:df:dd:b5:dc:cc:98:c7:de:ad:a6:8b:f1:e3:e4:ca:6d:
8b:a2:8c:2e:ed:59:9f:c4:94:3a:57:a8:b0:8c:a9:4d:fa:cd:
48:72:9e:98:e3:2d:ed:7e:5d:ef:93:8b:07:0f:58:25:fc:fb:
8a:92:27:cf:51:31:a7:df:06:63:6f:a5:63:83:45:a3:c1:c5:
f8:a2:03:ae:63:35:b9:5e:08:78:b2:bd:de:02:78:fd:8b:95:
09:fe:65:80:94:12:89:a4:f9:45:db:f3:6e:f1:72:9e:1f:87:
db:3c:5c:68:23:e0:8c:1d:cb:d6:6d:e9:06:01:8a:cd:53:57:
2d:28:68:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:11:50 2026 by rpki-client