Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json)
Hash identifier: Gs9t2Hee8cZIchOzvSiBEAcxvn2mO6UTxKv8nUKCCW0=
Subject key identifier: FC:A5:89:37:8A:77:02:CA:98:06:00:E3:74:CB:1E:E6:D4:D2:CB:22
Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Certificate serial: 01A1494F01E17CAAA789D0DDAC14F98FA8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
Manifest number: 1AA6
Signing time: Sat 17 Oct 2026 10:01:16 +0000
Manifest this update: Sat 17 Oct 2026 10:01:16 +0000
Manifest next update: Sun 18 Oct 2026 10:01:16 +0000
Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: BRpVZjrQD3wz4L5ZL7legs3L05uduQShnOJ2rYMXBzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:4f:01:e1:7c:aa:a7:89:d0:dd:ac:14:f9:8f:a8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Validity
Not Before: Oct 17 10:01:16 2026 GMT
Not After : Oct 18 10:01:16 2026 GMT
Subject: CN=fca589378a7702ca980600e374cb1ee6d4d2cb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:bb:fd:42:8f:1d:80:e4:bb:fb:3b:b2:0d:
5f:1a:d4:33:04:70:aa:b5:e9:a3:dd:63:a2:28:7c:
4d:52:24:a8:ce:4b:a2:8e:8c:08:c2:29:48:46:4a:
14:b2:12:02:90:71:12:a1:8e:06:26:e0:61:3a:43:
e2:36:6d:52:b1:9d:77:11:65:e7:7f:35:09:28:f5:
f1:94:02:5c:33:00:2a:db:2c:a9:7f:87:8a:db:8c:
13:f8:11:ef:6d:34:12:fe:dd:30:81:54:ba:2c:42:
af:9a:be:d1:4c:21:07:40:b0:b0:7d:78:25:58:7b:
95:f0:09:10:82:af:b8:12:0a:7e:3b:a8:35:a0:b3:
7f:23:b7:dc:d3:15:b6:9e:a9:4d:43:49:e8:1f:48:
13:6a:c9:3e:55:d3:9e:eb:af:4a:42:b3:9b:6e:00:
c4:4d:ea:62:ce:c1:0f:d7:59:9b:da:c7:d5:1a:1b:
eb:3d:79:13:82:51:5a:c7:64:b5:a8:19:3c:56:bb:
13:2e:a5:28:83:42:0f:05:76:03:6a:f4:28:c9:2c:
75:4d:5e:9c:0d:56:e6:e6:22:d7:5a:86:71:61:5a:
f9:07:ab:34:1a:88:da:b8:fe:de:ba:64:02:1e:90:
38:60:ae:ac:99:2a:b6:1a:27:61:81:50:31:5e:93:
60:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:89:37:8A:77:02:CA:98:06:00:E3:74:CB:1E:E6:D4:D2:CB:22
X509v3 Authority Key Identifier:
keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6f:31:a4:05:ee:19:b0:cd:52:d6:7e:a1:df:65:5b:0e:66:
7e:93:e7:37:82:3c:12:3a:7f:2f:2c:42:fe:df:3e:35:7e:0c:
c0:e3:2b:cf:a6:45:27:d0:48:88:70:58:04:3e:23:44:f9:10:
84:9d:84:68:3a:c2:cd:4d:eb:e4:c6:59:00:25:7a:cd:4d:ba:
81:34:31:78:49:96:03:2b:25:8c:d6:c4:30:14:24:b0:08:b7:
64:5f:ee:c1:00:f6:bb:5f:9c:32:bc:50:26:f5:d9:e8:6c:90:
78:30:0e:a4:73:46:ed:b3:ef:cb:1b:0c:0d:fc:b7:5e:95:54:
b0:0c:c8:eb:38:8f:91:58:5f:50:7e:ef:d0:b9:a2:fd:82:7e:
1b:4d:19:4a:dd:1f:8e:4a:be:ca:44:d1:8c:2b:ae:d4:ee:ec:
89:02:72:70:4b:bd:1a:41:99:e5:01:59:65:d7:b2:c6:aa:1f:
16:5e:2f:d1:b3:cf:24:38:28:44:5a:3f:af:36:df:95:f0:c3:
6b:28:05:59:9f:59:9a:78:34:15:6e:4a:c3:72:9d:db:1c:64:
7b:24:36:97:e1:90:0b:e2:5d:36:9a:a0:41:53:16:4a:52:4e:
45:2c:01:03:ec:5e:19:0e:f7:b6:e1:1b:23:7f:20:df:85:d7:
d4:aa:61:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJTwHhfKqnidDdrBT5j6irMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky
ZmY5NmMwHhcNMjYxMDE3MTAwMTE2WhcNMjYxMDE4MTAwMTE2WjAzMTEwLwYDVQQD
EyhmY2E1ODkzNzhhNzcwMmNhOTgwNjAwZTM3NGNiMWVlNmQ0ZDJjYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsma7/UKPHYDku/s7sg1fGtQzBHCq
temj3WOiKHxNUiSozkuijowIwilIRkoUshICkHESoY4GJuBhOkPiNm1SsZ13EWXn
fzUJKPXxlAJcMwAq2yypf4eK24wT+BHvbTQS/t0wgVS6LEKvmr7RTCEHQLCwfXgl
WHuV8AkQgq+4Egp+O6g1oLN/I7fc0xW2nqlNQ0noH0gTask+VdOe669KQrObbgDE
TepizsEP11mb2sfVGhvrPXkTglFax2S1qBk8VrsTLqUog0IPBXYDavQoySx1TV6c
DVbm5iLXWoZxYVr5B6s0GojauP7eumQCHpA4YK6smSq2GidhgVAxXpNg5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyliTeKdwLKmAYA43TLHubU0ssiMB8GA1UdIwQY
MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt
ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk
LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPW8xpAXu
GbDNUtZ+od9lWw5mfpPnN4I8Ejp/LyxC/t8+NX4MwOMrz6ZFJ9BIiHBYBD4jRPkQ
hJ2EaDrCzU3r5MZZACV6zU26gTQxeEmWAysljNbEMBQksAi3ZF/uwQD2u1+cMrxQ
JvXZ6GyQeDAOpHNG7bPvyxsMDfy3XpVUsAzI6ziPkVhfUH7v0Lmi/YJ+G00ZSt0f
jkq+ykTRjCuu1O7siQJycEu9GkGZ5QFZZdeyxqofFl4v0bPPJDgoRFo/rzbflfDD
aygFWZ9Zmng0FW5Kw3Kd2xxkeyQ2l+GQC+JdNpqgQVMWSlJORSwBA+xeGQ73tuEb
I38g34XX1KphWA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:30:20 2026 by rpki-client