Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: c4TrSBYU9Rx7Sg/1WTQ0iNO7Vy2v/7q3lPVuzF+xVeE=
Subject key identifier: 2A:48:71:54:10:E6:F1:AD:D2:B3:0E:C3:AE:19:05:90:E0:2A:95:F2
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01A1803D14C7454D0A396D172F06B0F81084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1AC6
Signing time: Wed 28 Oct 2026 02:00:48 +0000
Manifest this update: Wed 28 Oct 2026 02:00:48 +0000
Manifest next update: Thu 29 Oct 2026 02:00:48 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: F4jKDi5Ct5J3hHGMhsYcJFR5e9dg0aDu65oOTSbC9Ws=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:14:c7:45:4d:0a:39:6d:17:2f:06:b0:f8:10:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Oct 28 02:00:48 2026 GMT
Not After : Oct 29 02:00:48 2026 GMT
Subject: CN=2a48715410e6f1add2b30ec3ae190590e02a95f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:85:1c:fb:46:ad:01:50:3e:ed:59:c3:eb:
6d:14:77:b8:e6:13:42:41:95:30:d5:75:ec:ef:ce:
bc:f7:d1:93:09:04:50:25:b9:99:66:46:83:25:ed:
d3:33:21:16:74:77:21:54:e9:cc:c7:d7:6b:d4:a0:
88:4f:8e:f4:b7:a6:09:09:ed:63:3f:ba:ff:a8:f6:
0e:83:2b:65:9b:d8:36:e3:24:8f:6c:7f:59:f5:b0:
aa:56:5d:92:18:b9:74:d6:f6:d1:b0:a5:0b:28:61:
b4:d7:84:0c:c1:bf:d6:5c:af:89:98:f2:fb:32:98:
e0:44:b5:f2:03:b4:90:ca:e8:84:b5:e6:e2:5c:b3:
50:12:97:74:ef:3a:52:de:a9:b9:e4:a8:db:be:c3:
11:58:7f:17:cc:e9:f5:62:70:ef:a9:f1:5f:31:64:
b7:9f:e3:b9:34:0a:de:82:82:23:9d:f1:37:c9:05:
86:d9:1c:32:78:5f:59:c9:1c:09:bf:4e:2c:ff:0a:
0a:6f:48:d2:41:50:6d:63:39:d4:fd:fc:c0:84:81:
1f:33:20:fc:c9:50:4a:f5:72:12:61:62:b3:27:ce:
01:e6:08:8a:99:3d:17:c0:b7:df:65:f3:2c:ac:44:
5b:1f:1e:55:cc:96:2c:94:de:df:93:ee:d2:ea:80:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:48:71:54:10:E6:F1:AD:D2:B3:0E:C3:AE:19:05:90:E0:2A:95:F2
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:77:56:fd:bb:ae:e7:f4:f6:c6:e8:33:d4:51:6f:d4:a6:5a:
8c:83:18:2f:b3:aa:05:ab:84:90:fd:40:ce:dc:b5:ce:bb:77:
c9:d5:ea:4c:bb:aa:11:4e:68:d5:25:f5:96:d8:11:ad:f8:f6:
92:88:f1:be:b2:b4:60:01:67:a0:b2:1b:ad:6b:4c:cc:1c:68:
59:26:42:21:4f:2c:d0:aa:7d:71:9a:1a:db:ba:61:8c:95:f9:
d3:6a:1e:2d:99:04:a1:51:bf:8a:ef:d6:69:14:f2:f5:a4:6f:
c2:1c:79:5a:89:4c:38:57:ad:f7:c9:5e:88:74:a2:c5:e1:eb:
40:4f:84:56:f0:55:0a:9f:44:fe:2f:cd:16:aa:53:e6:fb:6b:
ca:e0:97:ac:09:c0:8f:d1:99:10:87:ff:95:67:5d:52:3c:34:
da:37:30:73:c9:4f:17:24:67:90:19:1d:2b:3c:70:fd:46:3d:
41:b1:66:3e:8e:a4:81:76:ad:11:e4:c5:f4:64:c9:e8:5d:86:
26:b6:37:b1:88:aa:af:30:42:1f:8b:a6:ee:8f:6b:76:36:0a:
19:6f:42:96:2d:55:d8:1e:95:17:36:c7:fb:c9:34:bc:13:51:
fb:f6:fb:0c:45:eb:c3:68:09:c6:f6:05:4f:12:2d:b7:de:66:
39:6d:1f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPRTHRU0KOW0XLwaw+BCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTczNmYwZDhlOWU3MGYxYWU3Y2FhMTFjNTU5ZWNmNzBh
NzI4MjgwHhcNMjYxMDI4MDIwMDQ4WhcNMjYxMDI5MDIwMDQ4WjAzMTEwLwYDVQQD
EygyYTQ4NzE1NDEwZTZmMWFkZDJiMzBlYzNhZTE5MDU5MGUwMmE5NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyuFHPtGrQFQPu1Zw+ttFHe45hNC
QZUw1XXs786899GTCQRQJbmZZkaDJe3TMyEWdHchVOnMx9dr1KCIT470t6YJCe1j
P7r/qPYOgytlm9g24ySPbH9Z9bCqVl2SGLl01vbRsKULKGG014QMwb/WXK+JmPL7
MpjgRLXyA7SQyuiEtebiXLNQEpd07zpS3qm55KjbvsMRWH8XzOn1YnDvqfFfMWS3
n+O5NAregoIjnfE3yQWG2RwyeF9ZyRwJv04s/woKb0jSQVBtYznU/fzAhIEfMyD8
yVBK9XISYWKzJ84B5giKmT0XwLffZfMsrERbHx5VzJYslN7fk+7S6oBmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpIcVQQ5vGt0rMOw64ZBZDgKpXyMB8GA1UdIwQY
MBaAFPTnNvDY6ecPGufKoRxVns9wpygoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAt
ZDdhYjUxNGQ0ZWUyLzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zZTJhNzMtZjQ5Ny00OWNjLWI0MjAtZDdhYjUxNGQ0ZWUy
LzEvOU9jMjhOanA1dzhhNThxaEhGV2V6M0NuS0NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHdW/buu
5/T2xugz1FFv1KZajIMYL7OqBauEkP1Azty1zrt3ydXqTLuqEU5o1SX1ltgRrfj2
kojxvrK0YAFnoLIbrWtMzBxoWSZCIU8s0Kp9cZoa27phjJX502oeLZkEoVG/iu/W
aRTy9aRvwhx5WolMOFet98leiHSixeHrQE+EVvBVCp9E/i/NFqpT5vtryuCXrAnA
j9GZEIf/lWddUjw02jcwc8lPFyRnkBkdKzxw/UY9QbFmPo6kgXatEeTF9GTJ6F2G
JrY3sYiqrzBCH4um7o9rdjYKGW9Cli1V2B6VFzbH+8k0vBNR+/b7DEXrw2gJxvYF
TxItt95mOW0fxg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:50 2026 by rpki-client