Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: 6t87vY4jlAip7fZRu+bax/r+vm3CJscQssHKLKzlHAw=
Subject key identifier: B0:60:F9:9D:1C:CE:69:8F:1E:BE:5E:F9:C1:DD:F0:1C:C8:41:18:8C
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 01A13DEEC0912121CD080AE18509BE45A56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 05:00:19 +0000
Manifest this update: Thu 15 Oct 2026 05:00:19 +0000
Manifest next update: Fri 16 Oct 2026 05:00:19 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: ++hxWfPufgsqD2aauxAXUxxdw5vKBuUoalOv/d/uXzU=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:c0:91:21:21:cd:08:0a:e1:85:09:be:45:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Oct 15 05:00:19 2026 GMT
Not After : Oct 16 05:00:19 2026 GMT
Subject: CN=b060f99d1cce698f1ebe5ef9c1ddf01cc841188c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4d:6e:f8:c5:d8:aa:0b:2d:45:8a:8e:6f:f0:
52:5a:cc:40:56:7f:8a:74:a2:db:a0:b7:64:f5:e8:
10:51:46:ab:68:98:a9:12:9f:ed:d7:9e:1f:28:7f:
69:61:8d:c6:ac:db:65:48:65:b2:a0:47:15:39:2d:
cd:3e:7f:a3:db:7c:35:be:11:5a:0b:15:85:85:e0:
12:b4:5d:ea:1f:0c:64:ec:f1:c3:18:e5:5a:05:09:
75:fa:f0:85:1b:b9:bb:fb:c4:8f:de:7b:4f:0f:72:
55:54:f4:6a:ea:09:87:29:0e:a4:eb:20:6d:3b:6f:
59:c2:22:33:93:a0:8e:7f:c4:87:6a:18:be:1a:4d:
cc:19:82:fb:0a:e9:a3:7d:28:4c:c0:47:82:6f:3a:
cd:93:2f:34:1f:81:74:4c:c1:d3:60:fc:40:35:97:
36:95:d6:94:f7:27:02:2c:89:d2:99:39:5f:36:bc:
b3:d5:68:a2:e9:17:59:09:19:bb:e2:fb:a9:d9:48:
d6:ef:c8:99:50:b1:00:6a:3d:c8:04:ea:d6:a4:cc:
f3:c5:79:ef:16:f2:8a:c5:ce:e8:6e:db:b7:8b:83:
5a:bc:17:49:23:86:0c:d0:06:00:1c:19:a4:f1:ba:
31:f1:39:4b:19:a4:e9:36:e2:06:60:9b:7b:35:86:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:60:F9:9D:1C:CE:69:8F:1E:BE:5E:F9:C1:DD:F0:1C:C8:41:18:8C
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:65:2c:f8:c7:ee:f1:82:76:95:98:64:9a:fa:85:14:34:65:
1e:8a:ab:4d:5b:40:23:dd:09:3f:08:56:90:a7:b0:54:1e:cb:
e7:37:80:07:f7:59:49:5a:be:b5:16:2d:c3:47:1b:74:2d:80:
73:66:e4:7c:2f:59:3b:b1:63:0f:d7:d1:93:ea:11:06:28:2b:
a2:ec:75:4c:6f:e1:c7:6a:7c:9b:14:2b:63:af:c6:1c:c5:90:
f7:6b:3e:2a:31:24:8e:ab:ac:8d:cc:6c:02:29:1b:99:67:18:
89:1d:4a:24:ba:0d:61:8c:b8:f3:19:ec:40:ce:c1:be:4d:af:
e0:8d:c2:5e:49:68:48:0c:38:a9:91:9d:a1:e0:99:78:9a:d8:
fb:d1:91:72:3c:b4:17:b1:82:bc:f0:2b:bb:14:1c:a1:dc:44:
d2:63:08:48:e9:93:d9:48:9b:81:b8:8d:ab:f8:ae:a4:5a:72:
8c:ae:8f:89:36:f2:48:25:32:e6:1b:59:0c:c3:ca:9d:e0:de:
cd:2f:11:68:b5:7e:9d:6c:67:6d:51:cf:b3:47:23:1e:b5:a8:
05:3b:68:0f:23:34:f4:8f:6e:29:2b:cd:b1:2d:b7:f6:a3:73:
3d:8c:58:b5:a9:9a:cb:1b:a4:27:e9:06:62:c6:8f:d0:2c:93:
f7:e7:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:14:49 2026 by rpki-client