Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: LbZwwaOmkMXwtRb+eavecZTU1smjITB7PqU0OJGr4/I=
Subject key identifier: 7B:54:AF:0E:27:99:55:CD:8E:A4:46:1D:CE:C3:DD:06:5D:27:C6:E3
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01A13CA566CE9D7F41390649B103444D41DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 23:00:34 +0000
Manifest this update: Wed 14 Oct 2026 23:00:34 +0000
Manifest next update: Thu 15 Oct 2026 23:00:34 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: eKC5vxvnG2DDml8qHeKe748B5K9q2gWv5rHbesWsVv4=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:66:ce:9d:7f:41:39:06:49:b1:03:44:4d:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Oct 14 23:00:34 2026 GMT
Not After : Oct 15 23:00:34 2026 GMT
Subject: CN=7b54af0e279955cd8ea4461dcec3dd065d27c6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2e:e8:19:c7:4b:1c:a9:e4:8c:01:f5:e3:bc:
eb:9b:2a:36:39:92:a4:60:79:02:2c:43:e0:5c:bd:
78:b9:e6:67:c6:69:90:fd:37:82:09:3f:89:6b:ef:
fe:30:f9:5c:ca:79:50:4f:97:87:86:a6:a9:6b:e1:
cc:56:a6:29:d0:95:7d:9f:18:7d:86:10:96:43:e3:
d1:0e:b8:33:47:6b:09:32:eb:71:06:01:77:94:a7:
03:67:42:cd:ce:a1:8e:19:cd:58:4c:8a:26:1c:3e:
c8:dd:a7:c6:9c:12:d4:90:8d:fd:0a:7f:4d:88:85:
c1:9c:62:c6:19:90:ed:e4:eb:44:7c:e7:b4:ad:ce:
12:f5:82:5e:f6:05:b9:5f:ff:b5:49:b8:40:88:c4:
b2:7a:04:de:3f:a0:05:5a:66:76:36:c4:6e:8d:53:
14:3b:55:b9:5f:04:b3:35:76:88:0a:8d:ed:a3:ca:
0b:4e:83:58:b4:29:0d:dc:f5:14:16:40:73:1f:a4:
ab:08:50:db:39:c7:06:65:f5:30:d8:97:b3:81:3e:
d9:e7:6e:21:02:8d:51:87:4c:93:97:e7:91:57:ef:
0f:ad:28:e0:67:8a:ca:0c:a2:ed:9e:eb:f5:54:4e:
d0:91:50:72:25:57:76:a1:ce:e9:c8:46:eb:29:d0:
79:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:54:AF:0E:27:99:55:CD:8E:A4:46:1D:CE:C3:DD:06:5D:27:C6:E3
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4d:ae:22:9a:99:b4:08:e6:01:9a:70:6f:59:0a:ad:37:66:
46:e4:a2:b9:f7:10:1c:c6:71:7e:f4:a1:6e:65:e5:b7:d4:f1:
3e:bf:8c:97:28:ba:de:11:b4:99:be:4d:b3:fb:39:e7:3c:62:
e4:01:dc:a9:a8:a0:24:9e:00:14:21:4b:0f:84:7c:32:6d:8d:
21:c3:b5:e8:68:ee:a7:77:7b:c8:99:fc:53:5d:43:07:27:ba:
1d:31:84:04:eb:15:8f:39:69:7c:1c:9d:69:30:75:49:d3:de:
c8:7e:fd:38:f0:0f:05:3d:81:84:fc:e9:13:13:e0:99:ef:23:
11:56:b5:f8:5d:a2:82:82:d7:70:0d:09:48:11:9f:3a:82:87:
8e:a5:8d:a3:b5:5a:45:ba:17:66:f3:1a:50:21:36:5e:3e:64:
6a:18:f3:83:35:44:56:03:2e:3a:f9:08:cc:12:9f:95:75:24:
89:ef:bc:e1:40:03:2a:82:f6:f2:ba:b9:5b:b6:d5:18:8c:2e:
b4:97:1e:20:ef:c8:f3:b1:ce:57:2d:a1:c0:f7:54:88:e1:6a:
1d:13:2e:a7:11:48:39:59:cf:81:8e:3a:bb:a5:b2:de:76:0c:
e1:58:f8:35:30:12:83:7f:c9:ac:6e:49:96:34:16:53:89:e5:
66:4a:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:27:58 2026 by rpki-client