Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: 7mRw4IWKZ9DwaV3i6aL2v9t58ETZFYLjwnrecBHZxhQ=
Subject key identifier: 63:09:14:C5:EA:A0:89:71:1A:98:2B:C3:BC:C7:96:08:9D:12:C9:8D
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01A08CE90230F24F7446C5A439D7A31F98B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 20:01:15 +0000
Manifest this update: Thu 10 Sep 2026 20:01:15 +0000
Manifest next update: Fri 11 Sep 2026 20:01:15 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: xoBrG/R592kOuzppz0iWP6SX1lHwZmegct3Guc4taYc=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:02:30:f2:4f:74:46:c5:a4:39:d7:a3:1f:98:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Sep 10 20:01:15 2026 GMT
Not After : Sep 11 20:01:15 2026 GMT
Subject: CN=630914c5eaa089711a982bc3bcc796089d12c98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:51:b6:0b:16:44:05:ce:bc:f0:56:2d:50:
90:79:9a:53:a1:24:c7:68:30:a1:b8:c3:e2:1c:b1:
72:de:00:a7:73:db:b4:10:83:47:9f:57:11:2a:0d:
8a:0f:12:5c:14:a4:9d:74:1f:62:db:4a:89:25:9a:
1e:2b:23:9e:b2:78:3e:b5:3b:7a:b5:2d:4c:20:a7:
ab:87:6e:d4:b8:ab:02:bb:9f:6f:29:02:73:5f:e5:
03:28:8c:7f:20:31:f0:98:ae:59:32:11:73:50:d9:
ba:0b:f0:a5:5d:c2:67:d4:12:67:80:8a:8f:ef:93:
45:8c:61:06:f9:2d:8e:62:a0:bc:05:72:2a:5d:a6:
dd:c8:47:d7:95:ba:f4:77:29:31:72:08:f5:01:5b:
04:66:86:bf:1d:03:04:49:0c:d3:22:68:9c:31:36:
34:0a:b0:38:84:a6:f1:f0:8a:61:55:2c:6e:1d:e1:
de:cb:cc:87:c5:e3:1e:59:52:a0:10:90:49:5c:79:
98:7c:43:52:47:9b:2f:d5:a9:7b:53:e6:91:16:8f:
f7:6c:0b:cb:40:a9:76:b7:e6:a6:e0:df:a9:89:94:
bd:76:37:9f:49:c6:8d:72:3c:d9:d3:b8:38:84:5f:
5c:65:d7:c5:d0:72:9c:a8:05:3a:2f:d2:8c:17:cc:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:14:C5:EA:A0:89:71:1A:98:2B:C3:BC:C7:96:08:9D:12:C9:8D
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:c2:2c:f3:dd:9f:68:00:57:65:c8:c9:e5:8f:bf:83:67:
22:63:a1:a1:77:94:19:2c:6e:2a:bc:7f:53:b2:9d:0e:70:a6:
c6:1f:23:80:b0:ac:fc:d9:02:2b:75:78:9e:d6:5e:d6:dc:66:
be:c3:a8:f6:da:6b:b9:a6:c2:74:a2:73:b7:5a:89:ef:cd:e2:
bd:db:c7:a9:4d:de:0d:84:66:68:eb:89:a7:65:9b:55:9d:00:
b3:a6:b5:17:79:10:f1:72:3e:24:52:48:16:12:65:77:09:dd:
48:51:57:a0:79:53:f3:0e:48:e3:96:c9:f8:e2:98:31:6b:6d:
ff:bd:8d:7a:c1:38:e4:1e:f1:2d:9e:b4:28:24:53:73:c3:68:
77:9c:a3:dc:bc:81:8e:e2:ba:1a:ff:91:bd:b0:13:3e:6e:32:
bf:b6:8e:ca:a8:f0:d7:3f:0c:a1:2a:b3:53:3a:ad:d8:64:1c:
95:7b:ba:5e:6a:cf:d9:fc:2e:34:2e:b1:a3:33:ba:32:60:ee:
55:e8:f5:79:36:85:f6:68:cc:31:99:58:b6:a7:ae:79:7c:5b:
c9:aa:a9:bc:db:b2:e6:70:8e:88:42:bd:9e:d5:5a:42:bf:a2:
51:57:26:ed:34:87:67:b4:f9:62:ec:ff:ce:3e:56:da:dc:27:
ab:dd:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:36 2026 by rpki-client