Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: NQazoS/a/3TEhPuiHn0L3n0LJeVe4JWBY1+0LGrtX1Q=
Subject key identifier: C2:DD:C0:FB:AF:3F:4D:10:AE:6A:45:6E:C6:8F:F5:7B:0A:68:EB:D7
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01A001DD6C56986EF369D6638A458A6D9C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 20:01:23 +0000
Manifest this update: Fri 14 Aug 2026 20:01:23 +0000
Manifest next update: Sat 15 Aug 2026 20:01:23 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: 42yLhXUfjTnqUbsr5vLZ+vqf6reZwIjy7ytkuBdbFTE=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:6c:56:98:6e:f3:69:d6:63:8a:45:8a:6d:9c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Aug 14 20:01:23 2026 GMT
Not After : Aug 15 20:01:23 2026 GMT
Subject: CN=c2ddc0fbaf3f4d10ae6a456ec68ff57b0a68ebd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:cd:7f:2f:86:1d:bb:d9:d3:30:51:0f:31:
e7:d2:db:04:bb:53:84:e9:54:96:0a:1a:15:ea:b3:
d0:0b:51:d4:ba:f1:f6:5b:24:02:e1:1d:8c:a2:cd:
20:38:aa:ca:b8:bb:20:b1:52:dc:d4:54:9d:47:46:
05:34:5f:26:27:3e:15:c2:f7:2f:32:0c:7c:a8:f8:
11:ac:85:e5:da:a4:75:cd:0a:34:b1:36:22:22:3d:
c4:2c:37:9d:32:f3:aa:b6:c2:f0:e1:75:7c:22:d4:
9e:ee:fc:6f:9a:f4:8e:1a:77:6d:1a:e8:ad:4b:94:
ee:f2:92:78:be:50:82:17:da:a3:cd:75:aa:f1:e7:
f1:4d:a1:8c:0e:56:4e:10:32:4b:ba:55:47:e1:0b:
99:74:bf:a0:c1:46:ce:bd:4e:d3:5d:36:72:cb:44:
07:b9:1f:26:ed:2a:e1:43:34:68:69:f2:e8:fe:31:
80:2a:a9:18:43:ca:2d:89:3a:8b:d0:6f:28:ef:92:
85:a1:65:12:a9:48:90:91:c6:00:f6:cc:16:03:65:
10:8c:aa:a4:1c:11:f8:e9:38:09:7e:ee:16:bb:61:
96:a3:e8:db:db:89:38:28:bb:8a:db:b8:fa:53:01:
04:cf:f8:d3:1d:62:7a:d6:ca:6b:6c:47:a4:c2:d0:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DD:C0:FB:AF:3F:4D:10:AE:6A:45:6E:C6:8F:F5:7B:0A:68:EB:D7
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d4:4d:fc:75:6b:66:7f:ec:29:1e:33:9e:59:2f:e8:fb:15:
83:11:5d:32:71:7f:c9:14:15:5b:c6:e8:a6:c6:6a:c8:e7:79:
c6:04:7c:2a:16:49:ed:33:72:2e:2a:09:4c:44:22:18:6f:58:
52:fc:39:d1:54:ae:30:c4:df:18:c0:72:b4:9b:c0:ba:01:fe:
8b:bb:cb:26:b8:08:67:59:07:f1:cf:92:81:50:2d:f2:4a:d5:
0b:9e:57:57:12:34:01:af:b2:21:37:75:67:79:81:6b:9b:eb:
f3:aa:1b:8d:ef:3a:94:7d:b6:cd:8f:55:41:79:51:25:98:46:
e1:d4:2f:be:13:8f:7a:24:60:6f:3b:94:ff:c5:cc:9c:ca:33:
b2:97:58:18:6e:ea:49:1c:71:8f:37:fc:e9:5c:08:0b:07:71:
52:54:31:5e:6d:3d:f7:4f:b4:3a:57:d0:29:71:77:8b:a9:c8:
bc:18:39:33:f0:49:e1:f0:11:0d:97:ca:88:1e:37:e8:b0:1f:
f0:de:36:bc:6e:ae:47:b1:67:21:98:74:f1:74:ee:68:c4:5e:
39:ab:0a:3d:0c:1f:10:9c:1f:6b:5e:86:97:9f:f1:b9:dc:c1:
e4:1a:fa:99:37:d4:e1:68:28:48:aa:ed:00:83:0a:a7:f9:11:
5c:b1:f5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3WxWmG7zadZjikWKbZxdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw
ODkwNDMwHhcNMjYwODE0MjAwMTIzWhcNMjYwODE1MjAwMTIzWjAzMTEwLwYDVQQD
EyhjMmRkYzBmYmFmM2Y0ZDEwYWU2YTQ1NmVjNjhmZjU3YjBhNjhlYmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2njNfy+GHbvZ0zBRDzHn0tsEu1OE
6VSWChoV6rPQC1HUuvH2WyQC4R2Mos0gOKrKuLsgsVLc1FSdR0YFNF8mJz4Vwvcv
Mgx8qPgRrIXl2qR1zQo0sTYiIj3ELDedMvOqtsLw4XV8ItSe7vxvmvSOGndtGuit
S5Tu8pJ4vlCCF9qjzXWq8efxTaGMDlZOEDJLulVH4QuZdL+gwUbOvU7TXTZyy0QH
uR8m7SrhQzRoafLo/jGAKqkYQ8otiTqL0G8o75KFoWUSqUiQkcYA9swWA2UQjKqk
HBH46TgJfu4Wu2GWo+jb24k4KLuK27j6UwEEz/jTHWJ61sprbEekwtDwBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLdwPuvP00QrmpFbsaP9XsKaOvXMB8GA1UdIwQY
MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt
N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0
LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATtRN/HVr
Zn/sKR4znlkv6PsVgxFdMnF/yRQVW8bopsZqyOd5xgR8KhZJ7TNyLioJTEQiGG9Y
Uvw50VSuMMTfGMBytJvAugH+i7vLJrgIZ1kH8c+SgVAt8krVC55XVxI0Aa+yITd1
Z3mBa5vr86obje86lH22zY9VQXlRJZhG4dQvvhOPeiRgbzuU/8XMnMozspdYGG7q
SRxxjzf86VwICwdxUlQxXm0990+0OlfQKXF3i6nIvBg5M/BJ4fARDZfKiB436LAf
8N42vG6uR7FnIZh08XTuaMReOasKPQwfEJwfa16Gl5/xudzB5Br6mTfU4WgoSKrt
AIMKp/kRXLH1+w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:18 2026 by rpki-client