Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: vHFSqte8hMa6pT4y6yAmMlIkIwVivT3wckN3H4SsNDA=
Subject key identifier: CD:65:C6:AC:F0:EF:2B:9B:9A:34:8D:95:C3:18:CF:19:45:A2:86:B5
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 01A182625E409DBE26EADC820C8B8E22DC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 12:00:47 +0000
Manifest this update: Wed 28 Oct 2026 12:00:47 +0000
Manifest next update: Thu 29 Oct 2026 12:00:47 +0000
Files and hashes: 1: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: tOO9WhYSgYnXKDxklO9ftsxyoO8oenhGEsBRCsVb240=)
2: DM0EXQBkZr0e7E2rftq5-TtNVUc.roa (hash: 4qPVGZtejJWXy8T9lJtHmIGF6CkNf88ym74PPqmxTh0=)
3: yp2AU1llCHkyOj3CufgRPl-N_Tk.asa (hash: WtTfRm5N0C4SFgr+MVGe8srzzJzvJBZGACuMZcOKeM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:5e:40:9d:be:26:ea:dc:82:0c:8b:8e:22:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Oct 28 12:00:47 2026 GMT
Not After : Oct 29 12:00:47 2026 GMT
Subject: CN=cd65c6acf0ef2b9b9a348d95c318cf1945a286b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:47:ca:2c:9c:c5:b1:dd:a1:80:3a:d3:e9:
38:54:66:e9:b6:49:bb:fe:27:ec:f2:db:49:f9:50:
54:1f:53:25:34:64:62:4b:e0:96:83:c0:78:47:66:
72:c7:7f:81:88:43:bb:f2:89:6d:1a:c5:5b:47:e2:
16:5e:5c:60:90:1a:9f:fa:fd:f1:95:de:19:db:15:
81:99:86:77:ab:57:3d:ee:dd:93:79:15:62:63:6d:
14:82:61:80:e4:16:18:fd:c2:27:b1:73:e0:b7:9b:
f1:e3:2a:0e:43:ca:74:47:82:94:5c:85:e5:2e:d9:
bc:e8:85:16:62:10:a7:7c:21:e0:72:eb:5c:af:31:
58:d2:d5:21:63:6f:80:29:c5:12:f9:e4:9a:4f:ea:
1d:c3:29:f2:f3:31:e9:d4:84:52:46:69:5d:65:54:
e5:c7:26:b3:6c:41:40:5c:42:0f:12:87:c1:2a:af:
21:56:2b:8e:64:a0:2f:92:64:49:1a:6f:a2:00:fd:
9c:70:c1:33:11:c8:fc:88:70:7a:13:43:1b:a6:5a:
c7:59:96:65:d6:37:0b:43:75:5a:e1:58:42:e4:37:
8e:eb:97:46:56:90:0d:d8:fa:a3:15:cd:42:6a:f4:
cf:8d:16:27:7c:a4:36:16:3f:0e:86:eb:37:a7:e8:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:C6:AC:F0:EF:2B:9B:9A:34:8D:95:C3:18:CF:19:45:A2:86:B5
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:9f:85:3e:b0:73:b8:48:e8:f0:58:a6:d7:9e:93:64:ec:4c:
d6:33:9c:58:14:47:c4:97:5f:22:1b:70:c9:b0:53:2d:92:a3:
c5:e3:b7:8d:08:3c:bf:10:ac:85:d3:e1:b4:66:8a:0d:af:10:
37:70:45:92:6c:10:9c:90:c7:be:1e:b3:7d:39:f8:d1:7d:85:
92:f1:22:7f:99:29:67:56:c3:a7:58:f6:af:e8:86:3b:59:43:
49:e7:e8:e8:f0:1b:d2:2c:21:fa:ac:51:ba:12:cf:36:b7:f8:
7c:65:c3:f4:f4:61:1b:b1:65:c2:f9:43:9a:5f:65:ea:01:94:
39:ea:36:16:73:95:3a:e5:43:0e:b9:ce:5f:07:3b:c0:de:24:
63:80:fc:68:42:02:42:fe:33:c2:d0:60:ac:dc:c2:18:fa:2f:
24:54:ff:eb:05:a6:f2:b3:e1:ec:8c:3d:10:88:56:fb:83:61:
f8:fe:c5:dc:3f:c5:83:0c:0c:0a:ce:4b:10:59:b8:6b:7c:27:
6a:5d:9e:86:6c:2b:60:09:b4:78:1f:f7:a7:60:a3:76:b4:0a:
1e:97:3b:7d:15:28:95:ee:9c:a2:97:c7:5f:31:59:0f:6b:aa:
b1:2b:69:81:1b:2b:99:3d:83:8f:88:8d:8c:9a:83:bb:6e:71:
f9:15:b4:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCYl5Anb4m6tyCDIuOItwWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MzFjMzM5YjE4NjE3MjJiZmZlODY3MjE4MzE0Y2UxMjk1
YzNjODUwHhcNMjYxMDI4MTIwMDQ3WhcNMjYxMDI5MTIwMDQ3WjAzMTEwLwYDVQQD
EyhjZDY1YzZhY2YwZWYyYjliOWEzNDhkOTVjMzE4Y2YxOTQ1YTI4NmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINHyiycxbHdoYA60+k4VGbptkm7
/ifs8ttJ+VBUH1MlNGRiS+CWg8B4R2Zyx3+BiEO78oltGsVbR+IWXlxgkBqf+v3x
ld4Z2xWBmYZ3q1c97t2TeRViY20UgmGA5BYY/cInsXPgt5vx4yoOQ8p0R4KUXIXl
Ltm86IUWYhCnfCHgcutcrzFY0tUhY2+AKcUS+eSaT+odwyny8zHp1IRSRmldZVTl
xyazbEFAXEIPEofBKq8hViuOZKAvkmRJGm+iAP2ccMEzEcj8iHB6E0MbplrHWZZl
1jcLQ3Va4VhC5DeO65dGVpAN2PqjFc1CavTPjRYnfKQ2Fj8Ohus3p+iROQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1lxqzw7yubmjSNlcMYzxlFooa1MB8GA1UdIwQY
MBaAFPcxwzmxhhciv/6GchgxTOEpXDyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAt
MGRjMjBhN2Q4MmI5LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAtMGRjMjBhN2Q4MmI5
LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJ+FPrBz
uEjo8Fim156TZOxM1jOcWBRHxJdfIhtwybBTLZKjxeO3jQg8vxCshdPhtGaKDa8Q
N3BFkmwQnJDHvh6zfTn40X2FkvEif5kpZ1bDp1j2r+iGO1lDSefo6PAb0iwh+qxR
uhLPNrf4fGXD9PRhG7FlwvlDml9l6gGUOeo2FnOVOuVDDrnOXwc7wN4kY4D8aEIC
Qv4zwtBgrNzCGPovJFT/6wWm8rPh7Iw9EIhW+4Nh+P7F3D/FgwwMCs5LEFm4a3wn
al2ehmwrYAm0eB/3p2CjdrQKHpc7fRUole6copfHXzFZD2uqsStpgRsrmT2Dj4iN
jJqDu25x+RW0hA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:45:41 2026 by rpki-client