Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: limKJ/sEsRXw3DePrvV5DHhUH2skt20odbLnqQEZ4bs=
Subject key identifier: 26:6B:E4:0B:82:96:81:C9:44:7D:7D:C5:45:C0:1F:CF:A9:35:44:A6
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 01A08D8D757BF71A49A5577C325C307B4766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 23:00:53 +0000
Manifest this update: Thu 10 Sep 2026 23:00:53 +0000
Manifest next update: Fri 11 Sep 2026 23:00:53 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: xB+UVLLoc9CgegqrQx6c8jhb5eiTdsDqFwsmsm6fRYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:75:7b:f7:1a:49:a5:57:7c:32:5c:30:7b:47:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Sep 10 23:00:53 2026 GMT
Not After : Sep 11 23:00:53 2026 GMT
Subject: CN=266be40b829681c9447d7dc545c01fcfa93544a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:9a:23:ff:70:a8:38:43:44:32:16:e2:2f:
a9:ba:aa:0f:6a:2d:0c:ad:b1:81:63:c3:3f:63:18:
02:5c:a7:bd:0a:9b:c1:c9:13:62:3e:b2:a5:56:d0:
bd:63:4c:9d:d4:e3:95:96:1f:2d:7c:9e:6c:a1:de:
5e:81:bc:79:c0:f1:db:2b:f3:59:54:d2:2b:9d:cc:
17:4c:58:b4:13:54:dc:c5:39:33:66:26:71:dc:55:
1e:66:10:5a:92:24:28:8a:c8:82:0e:a8:d8:ad:1a:
2d:30:d1:e0:94:79:e1:85:0f:ea:c3:9a:46:f3:02:
d3:59:15:74:6d:81:b6:28:04:92:00:7b:fa:b5:01:
67:82:4a:f5:cd:88:e7:39:67:83:68:96:ad:a3:40:
60:69:eb:d1:e7:1b:a8:89:f7:42:e5:f9:b1:48:8c:
b4:d9:95:20:ef:b7:91:e6:4b:a0:9a:3d:64:32:64:
37:b5:ca:87:ef:bd:24:a4:e1:62:37:9e:d2:59:16:
e2:51:eb:62:20:e6:26:0f:1f:22:2d:d3:1e:5b:83:
3e:59:a5:3a:46:3f:20:49:09:87:1d:fb:56:7f:0f:
a5:56:87:86:95:ce:49:60:53:73:d2:e5:cc:23:51:
b9:b7:fa:5f:77:f7:9e:d9:02:27:c8:78:1b:75:b3:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:E4:0B:82:96:81:C9:44:7D:7D:C5:45:C0:1F:CF:A9:35:44:A6
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:46:5f:66:c3:4f:55:f2:99:d6:0c:aa:50:52:7d:c7:bd:5f:
b2:93:40:60:c4:76:77:86:5e:1c:17:f9:bb:ac:ec:62:77:e6:
19:ff:34:b3:82:a3:1d:55:d8:d7:76:85:b2:1f:80:78:f5:db:
7f:92:fd:65:0c:cc:84:cc:27:d6:93:1a:33:78:7b:f6:f1:71:
6f:a2:b2:4e:d4:45:aa:95:43:0c:6b:a4:47:09:15:53:20:33:
d5:a6:85:82:a2:c4:3f:0c:d7:0e:c3:11:e3:e6:2b:19:78:2a:
e7:89:c1:7b:62:39:c4:97:75:26:1d:d8:f1:82:0a:c0:ae:fd:
a4:93:78:3f:19:0a:eb:8e:a2:9f:bf:e2:32:40:56:e3:b8:9f:
6f:c2:c3:e2:8d:27:5b:89:7f:90:f9:06:45:65:a6:ec:98:9e:
ce:56:17:bf:d8:55:bb:86:52:5f:cb:90:db:37:37:b8:8e:c5:
46:ab:e5:04:5e:e0:06:10:38:c9:f1:ce:65:01:59:e6:45:49:
49:35:a9:57:e7:3d:3c:33:42:3b:6f:16:64:ba:fe:39:2f:b5:
ee:10:72:43:cd:7e:4b:e9:10:08:6e:7e:2d:09:ba:24:4e:52:
98:1a:78:57:70:a3:0f:77:59:93:93:8f:7d:39:17:a1:9e:38:
85:34:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:35:42 2026 by rpki-client