Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json)
Hash identifier: S75W3QtcvzRer4MHwX+88JOwUS/iO0L6SvEwj2N7BP4=
Subject key identifier: F4:DA:C6:6F:98:A7:34:65:E7:A3:53:27:89:81:5F:F8:02:77:13:B0
Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85
Certificate serial: 01A08B3191CBE8C5B85F10DFC91A134DA34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 12:01:16 +0000
Manifest this update: Thu 10 Sep 2026 12:01:16 +0000
Manifest next update: Fri 11 Sep 2026 12:01:16 +0000
Files and hashes: 1: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: sZ+R4bhRySD6zSPiHdepD8Mu6TyAYSe6STuQtEI+b1Q=)
2: DM0EXQBkZr0e7E2rftq5-TtNVUc.roa (hash: 4qPVGZtejJWXy8T9lJtHmIGF6CkNf88ym74PPqmxTh0=)
3: yp2AU1llCHkyOj3CufgRPl-N_Tk.asa (hash: WtTfRm5N0C4SFgr+MVGe8srzzJzvJBZGACuMZcOKeM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:91:cb:e8:c5:b8:5f:10:df:c9:1a:13:4d:a3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85
Validity
Not Before: Sep 10 12:01:16 2026 GMT
Not After : Sep 11 12:01:16 2026 GMT
Subject: CN=f4dac66f98a73465e7a3532789815ff8027713b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:45:9e:44:82:45:4b:a2:d0:95:fa:0d:26:
38:ae:eb:e7:b7:bf:f0:2c:23:11:01:84:14:6c:93:
49:4f:ac:e9:0d:ab:a3:96:8f:06:2b:1e:57:02:1c:
6f:30:a3:dd:cd:7d:50:bf:b1:21:82:6f:b4:1c:68:
e2:26:15:44:38:a1:0a:d2:a4:59:59:80:bc:e7:d4:
99:67:a4:6c:a3:19:f1:15:1a:5d:9e:88:96:3c:cc:
fe:ce:ff:59:21:a2:d2:69:41:a6:af:75:40:50:80:
8b:01:5c:2e:05:d4:72:3f:e2:d4:d3:f7:ba:cc:cf:
09:7a:67:bc:08:72:63:bf:b1:eb:85:99:cd:a0:7a:
17:a5:64:31:e1:8a:75:1e:2a:86:3a:22:22:53:ab:
aa:c4:a3:c4:cf:c3:ce:75:8f:49:be:39:14:03:6a:
26:6b:47:67:2e:8e:c9:a2:e1:9d:3e:5e:f0:d3:7c:
40:ad:9f:44:ac:ac:45:34:0b:ba:6b:cf:f5:c1:38:
20:95:f5:61:7d:5c:3f:29:0a:95:89:76:d8:10:e8:
e0:35:8a:e0:c7:5b:17:04:d8:f8:13:2c:a5:df:ba:
2f:a9:27:6e:a4:38:b7:67:b3:0a:19:ff:b5:1d:e6:
5a:10:a7:3b:59:d2:71:76:0f:ba:d7:74:70:64:31:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:DA:C6:6F:98:A7:34:65:E7:A3:53:27:89:81:5F:F8:02:77:13:B0
X509v3 Authority Key Identifier:
keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a9:85:7b:a1:04:88:b6:43:87:32:5e:a0:b9:a5:88:75:c5:
45:e6:b4:cd:46:eb:6a:95:50:a9:77:18:82:ef:81:a2:b1:e0:
df:49:1d:6d:1c:9e:e4:c3:8c:b0:73:1b:94:43:87:25:a9:21:
ff:34:d6:c9:44:57:cc:74:91:0f:3c:20:90:ad:8f:c9:09:59:
ed:2b:82:c5:e7:54:ea:fc:67:43:0b:df:5e:e6:4e:da:f2:df:
33:1c:8d:5c:13:fc:39:80:7a:d0:ec:e7:9c:05:20:e9:61:40:
00:fd:a3:41:f4:62:eb:d4:08:bf:df:ee:4a:05:19:b8:1b:6f:
3c:12:17:49:c7:63:ff:06:25:bf:fc:e7:61:57:a7:82:9b:74:
92:cf:89:99:d6:27:0d:49:3f:88:ac:69:03:ac:b4:bc:c9:2d:
20:58:1c:04:c6:b4:db:b0:e8:40:63:f8:c4:33:c2:8d:1e:c9:
ba:ac:9e:c9:33:e4:0e:ba:5a:e5:80:4b:d2:82:0b:17:6c:64:
2d:70:05:97:ad:a5:93:96:d7:f2:ec:55:36:9c:83:4c:8a:1e:
50:66:56:74:85:fd:7a:0f:31:17:de:73:87:90:74:99:cc:65:
5f:57:96:c3:fd:76:3f:18:07:da:34:ec:e4:43:d1:da:d7:7b:
b4:64:1f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:15:27 2026 by rpki-client