Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: CGoCR3EXtdFkMasP+E+yLSPjHfxUG/8yk4Gc7QT/sNo=
Subject key identifier: D3:99:86:8C:8D:0D:5E:84:E6:A3:F6:AF:94:D0:09:EF:EF:F5:2D:A8
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 01A001386A9108C995D5A9C0EB8D0B85B7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 17:01:09 +0000
Manifest this update: Fri 14 Aug 2026 17:01:09 +0000
Manifest next update: Sat 15 Aug 2026 17:01:09 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: AweHygNEfOrsoiEfnES5RuUiklKYjYdQivvRtbYKjAk=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:6a:91:08:c9:95:d5:a9:c0:eb:8d:0b:85:b7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Aug 14 17:01:09 2026 GMT
Not After : Aug 15 17:01:09 2026 GMT
Subject: CN=d399868c8d0d5e84e6a3f6af94d009efeff52da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:8c:bb:6f:d9:2f:45:5b:c2:0d:43:cb:b3:
15:1d:77:3f:a2:85:03:19:8a:f4:c6:60:af:d0:6f:
c1:a5:2c:72:cd:4b:7a:45:8a:87:fc:4f:07:e9:08:
a2:d4:84:3f:bd:c6:60:6e:d2:55:40:5e:1e:c3:89:
66:5f:6b:ba:1f:d3:ae:f5:fa:79:aa:4a:49:e1:e0:
88:9f:81:32:5c:18:58:c2:d1:f7:2a:21:e8:4b:36:
90:43:5d:3f:3e:d4:b2:68:d4:99:e5:d7:67:6e:c3:
1a:01:fd:dd:36:94:c5:45:b5:b0:f5:57:cf:42:46:
9e:0a:a9:6f:e4:fa:78:ee:c2:6f:2a:43:c6:0f:f8:
1a:30:1c:25:25:07:25:01:ef:8a:69:cb:5a:0f:da:
ba:de:56:ef:6e:13:72:b2:05:8e:e2:ea:41:2c:87:
2a:43:92:21:04:90:a2:9a:a4:46:86:35:0d:a7:aa:
4b:16:12:5a:ca:4b:07:28:bf:3b:4c:a3:ac:3b:aa:
b9:47:d2:7b:f6:f1:3d:19:9b:bb:42:5e:6b:02:b5:
a6:27:c6:6e:52:29:20:95:15:0f:9c:84:2e:82:06:
99:6e:8c:cb:70:ab:2e:4b:1f:09:ce:1e:42:04:2e:
51:5b:bb:c3:a5:ea:8b:5b:9c:96:75:f4:ef:fc:43:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:86:8C:8D:0D:5E:84:E6:A3:F6:AF:94:D0:09:EF:EF:F5:2D:A8
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f1:bd:1f:b5:eb:56:4d:c5:af:9f:0a:53:05:d0:91:d1:a8:
78:d5:d9:d8:80:1d:a3:19:e1:cc:57:67:13:9f:b3:31:67:de:
56:82:d9:21:a0:fd:61:11:46:d1:7f:c9:7d:1c:81:6a:d4:a8:
bb:33:78:bd:d2:4e:05:dd:76:13:15:6d:ee:09:d7:25:31:ab:
56:0e:7a:c3:57:13:23:ee:fd:1c:6c:41:07:91:50:0c:74:af:
3f:2e:b3:f0:70:66:97:b4:25:6f:0d:96:d1:02:f5:69:03:d6:
ab:89:ff:ce:c0:28:65:01:74:16:fe:51:86:1f:69:79:44:77:
63:2f:4a:c8:4a:c4:65:0b:48:9b:37:80:64:b0:77:6e:b2:5a:
b0:28:49:ad:42:37:d8:09:44:f0:d2:bf:2b:aa:fa:80:54:3e:
bd:bf:2e:e9:c0:12:c6:6e:c8:15:4d:3a:a5:23:79:4d:3d:7d:
ae:ce:b3:1b:6d:34:a3:38:90:89:bb:c9:79:56:63:a1:70:0f:
3b:db:c7:ed:17:ee:22:a0:d0:ec:cf:70:41:58:cb:0c:35:9b:
0f:4b:01:aa:b5:93:a3:5f:1c:8f:66:d9:14:dd:5e:43:16:0d:
d9:94:cd:d8:45:86:da:ef:0d:a2:34:e9:28:5d:ea:ea:65:35:
e9:01:7d:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOGqRCMmV1anA640LhbflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTQwZjAzOTc5YTNmNGU0YWQzOWRhOTgzYjY3YmE3ZTYy
MTVjMGQwHhcNMjYwODE0MTcwMTA5WhcNMjYwODE1MTcwMTA5WjAzMTEwLwYDVQQD
EyhkMzk5ODY4YzhkMGQ1ZTg0ZTZhM2Y2YWY5NGQwMDllZmVmZjUyZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHSMu2/ZL0Vbwg1Dy7MVHXc/ooUD
GYr0xmCv0G/BpSxyzUt6RYqH/E8H6Qii1IQ/vcZgbtJVQF4ew4lmX2u6H9Ou9fp5
qkpJ4eCIn4EyXBhYwtH3KiHoSzaQQ10/PtSyaNSZ5ddnbsMaAf3dNpTFRbWw9VfP
QkaeCqlv5Pp47sJvKkPGD/gaMBwlJQclAe+KactaD9q63lbvbhNysgWO4upBLIcq
Q5IhBJCimqRGhjUNp6pLFhJayksHKL87TKOsO6q5R9J79vE9GZu7Ql5rArWmJ8Zu
UikglRUPnIQuggaZbozLcKsuSx8Jzh5CBC5RW7vDpeqLW5yWdfTv/EOnaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNOZhoyNDV6E5qP2r5TQCe/v9S2oMB8GA1UdIwQY
MBaAFPTkDwOXmj9OStOdqYO2e6fmIVwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTkt
YTkxNGUzY2UzOTQxLzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNGZmYzAtYTUyZC00NjFiLTk3MTktYTkxNGUzY2UzOTQx
LzEvOU9RUEE1ZWFQMDVLMDUycGc3WjdwLVloWEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfG9H7Xr
Vk3Fr58KUwXQkdGoeNXZ2IAdoxnhzFdnE5+zMWfeVoLZIaD9YRFG0X/JfRyBatSo
uzN4vdJOBd12ExVt7gnXJTGrVg56w1cTI+79HGxBB5FQDHSvPy6z8HBml7Qlbw2W
0QL1aQPWq4n/zsAoZQF0Fv5Rhh9peUR3Yy9KyErEZQtImzeAZLB3brJasChJrUI3
2AlE8NK/K6r6gFQ+vb8u6cASxm7IFU06pSN5TT19rs6zG200oziQibvJeVZjoXAP
O9vH7RfuIqDQ7M9wQVjLDDWbD0sBqrWTo18cj2bZFN1eQxYN2ZTN2EWG2u8NojTp
KF3q6mU16QF96w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:49 2026 by rpki-client