Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: UXuGaSARamVw9AtmtbyCmB9DQNOA+hR56uh3zDpHWFY=
Subject key identifier: 80:01:94:EB:90:43:1E:30:39:D0:0D:71:F0:BF:CF:80:D7:80:B2:A5
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 01A001020A372E9FA9B7F761D84CD32A1B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0C24
Signing time: Fri 14 Aug 2026 16:01:45 +0000
Manifest this update: Fri 14 Aug 2026 16:01:45 +0000
Manifest next update: Sat 15 Aug 2026 16:01:45 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: 5KCCcQa7GDxSnLVwIgaLQmMXpX+sqXFKOpY4CL0bMWc=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:0a:37:2e:9f:a9:b7:f7:61:d8:4c:d3:2a:1b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Aug 14 16:01:45 2026 GMT
Not After : Aug 15 16:01:45 2026 GMT
Subject: CN=800194eb90431e3039d00d71f0bfcf80d780b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:be:4d:be:06:89:63:63:ec:78:2b:f4:51:
9a:b3:bf:12:32:59:d9:12:56:91:53:5e:13:48:4f:
78:fc:03:6f:7a:c6:54:71:36:de:57:fd:3e:11:0a:
32:c3:17:ed:91:7e:7b:32:56:ec:5f:b9:e6:c7:3f:
b9:fe:f9:4e:8b:02:ec:5a:bd:af:e9:86:28:84:74:
aa:76:e2:25:e8:52:c0:2d:3d:3c:b7:ac:08:2c:fe:
59:d9:13:e4:07:ab:85:6a:b0:28:98:05:35:7d:f0:
27:c7:85:99:16:5f:a5:81:61:49:41:01:70:ed:f1:
ff:96:26:21:f1:ba:ed:03:c9:f5:6e:af:15:ca:4d:
54:67:c2:c1:06:f2:e7:c9:e6:78:cb:e2:98:d3:17:
b1:e1:44:0f:29:78:fb:5d:3b:f4:fe:9e:fa:5b:28:
b3:12:4e:49:58:0b:49:26:dd:94:d4:53:99:74:88:
ac:be:bf:6f:45:61:9c:37:ac:64:de:49:71:5c:2f:
14:92:a8:f4:79:21:bf:9c:f0:f2:1c:7c:d1:22:ef:
ba:8e:67:e0:e2:45:45:12:51:d9:04:69:4e:45:ed:
3d:21:a0:22:14:82:e6:e8:1e:1c:99:33:79:e7:c3:
81:7f:ad:5d:ec:65:f8:ec:95:c9:7e:71:79:19:2f:
42:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:01:94:EB:90:43:1E:30:39:D0:0D:71:F0:BF:CF:80:D7:80:B2:A5
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ee:b2:8c:55:df:85:b6:98:91:5d:6a:1a:1b:49:8c:dd:49:
bc:c1:55:fb:92:99:3f:87:17:17:37:4e:5b:4c:bd:6b:5c:87:
6f:46:2a:65:15:f4:60:e6:ef:36:55:0c:87:b3:07:d4:d0:6e:
bb:aa:79:50:1b:eb:6e:7c:8c:7c:dc:65:7a:87:6f:fb:40:e2:
d7:56:e5:38:01:f0:d9:06:92:5e:b9:01:77:4c:58:8a:75:d6:
76:8b:87:db:99:52:30:6d:78:c6:9a:da:16:3c:80:28:fb:8b:
4c:f0:7a:cc:c2:f4:8e:82:d0:f3:e7:40:97:48:fb:f3:da:fd:
76:ea:2f:3d:fe:f2:f2:1d:de:86:85:d9:78:da:4f:a4:61:e5:
55:b7:c0:15:50:9f:fc:1e:96:0e:69:07:1b:a6:ab:f0:05:88:
27:e1:46:e7:d1:4c:72:5a:32:9c:8b:77:92:73:8d:9f:f9:be:
21:d0:a0:05:bf:43:dc:90:ef:e2:3b:29:73:93:29:44:99:56:
9e:fb:34:b9:cc:8a:11:81:ac:c9:71:d1:d2:9a:a3:68:41:9a:
e5:53:5e:68:bf:3f:50:57:8f:a2:ff:f0:eb:aa:a7:b5:60:3a:
d5:01:a4:f5:78:33:a9:b8:20:3d:25:dd:60:4e:e1:83:f1:46:
da:a9:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:42 2026 by rpki-client