Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: eFQ/pybwkCgAoNNHUpho5nu6ltIxkktsWr+I6WsVgew=
Subject key identifier: 00:78:4F:34:44:97:9E:9A:82:2C:7C:13:AD:29:D0:4E:1A:E0:60:17
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 01A16A90C0FD8D4AA8C832198745FEFE0C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 0517
Signing time: Fri 23 Oct 2026 21:00:33 +0000
Manifest this update: Fri 23 Oct 2026 21:00:33 +0000
Manifest next update: Sat 24 Oct 2026 21:00:33 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: x00IA8KHX++8JtMxTY/AWw7e5H2rQyzzxd0gyxZls7c=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:90:c0:fd:8d:4a:a8:c8:32:19:87:45:fe:fe:0c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Oct 23 21:00:33 2026 GMT
Not After : Oct 24 21:00:33 2026 GMT
Subject: CN=00784f3444979e9a822c7c13ad29d04e1ae06017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fc:75:68:46:dc:5b:8d:17:6d:0b:5a:f3:2e:
2b:63:c3:bc:cf:08:61:47:24:2b:0e:5a:35:a0:80:
9e:f0:3d:df:48:1e:e5:1f:78:36:dd:b7:65:df:ea:
49:9e:50:47:9c:7c:22:fb:dc:16:d0:b3:0d:d1:28:
38:b8:c1:4a:96:7d:90:87:ba:3b:a8:9d:5b:ab:a5:
0e:fe:f8:9c:1a:52:33:ef:d4:d1:46:0f:71:1b:ca:
ca:1c:16:37:bc:85:2b:ad:89:00:75:93:22:ec:61:
d4:cc:46:b5:46:d1:1b:26:e5:06:58:b8:13:57:c2:
da:19:14:1e:07:78:aa:c0:b6:44:c7:a4:0d:71:13:
10:9d:f1:28:55:60:94:cc:38:ec:c7:34:93:1b:3c:
ce:fd:e1:13:d1:80:be:c6:dd:5e:66:1e:b3:d6:c1:
c1:b1:51:23:a1:6c:0b:4b:4c:57:28:3b:a4:6e:36:
2c:35:00:de:0b:b4:da:66:2c:80:dd:ab:1c:d5:c7:
82:df:f0:96:9c:80:0c:ca:6e:60:13:01:5c:69:5d:
4d:df:8c:9e:ca:3f:6e:41:c5:0d:a5:13:d4:77:61:
36:ef:c0:c9:41:46:89:3d:00:e1:ec:f9:5e:d6:70:
7a:0a:db:a6:5e:a8:6c:8d:10:1e:1e:27:88:80:a1:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:4F:34:44:97:9E:9A:82:2C:7C:13:AD:29:D0:4E:1A:E0:60:17
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b3:7d:45:99:05:e3:1d:d6:84:20:1b:48:39:6a:12:4e:5a:
22:ba:5a:a2:1b:5d:4f:35:a2:c3:37:d2:50:ac:9d:5e:29:ce:
0b:cb:92:ae:67:24:16:a5:20:58:6a:cc:b8:48:a5:8c:f4:7f:
8e:14:38:d0:41:23:18:29:f8:b8:48:f1:66:ea:bc:c3:16:d8:
f2:b7:bb:0a:c4:4e:e1:d3:28:3d:d0:46:06:0d:c0:5a:3b:13:
30:bb:b3:b0:4d:5d:3b:ae:66:00:83:a5:1f:c9:32:88:ad:e1:
a8:19:2f:27:73:fb:76:2c:f0:cf:59:0b:43:f3:e6:85:27:20:
2f:3f:1b:44:73:dc:38:49:98:b2:eb:ec:25:cc:7d:c7:68:21:
4f:9f:a0:95:c7:4a:75:96:57:d4:61:57:6d:24:f1:f9:f0:a6:
fe:e2:43:0c:2e:eb:06:e7:11:42:7e:3c:5a:3a:83:75:a7:f3:
73:20:41:0e:7e:cd:30:52:81:b8:b4:1e:72:57:c3:a0:33:a8:
7e:70:67:f5:d7:d5:3d:0b:f1:6d:fe:c1:18:fd:27:14:5b:5f:
d7:e2:47:d8:15:51:b8:f0:02:a4:59:6a:bc:b9:ca:41:70:90:
04:cd:5a:a3:34:72:8a:1f:8a:05:e3:4d:e6:b2:30:95:31:a7:
1b:de:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:44:50 2026 by rpki-client