Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: lyOWk8I6GyCB1JCu1aFTOBORgkXuSnde9z2THeBN2YU=
Subject key identifier: 99:C6:91:C8:2F:0F:03:47:43:B9:36:DB:8C:4F:B0:43:1A:E1:37:AC
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 01A186AD32D928CCA8CAFF297BB98939D01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1AC9
Signing time: Thu 29 Oct 2026 08:01:00 +0000
Manifest this update: Thu 29 Oct 2026 08:01:00 +0000
Manifest next update: Fri 30 Oct 2026 08:01:00 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: sP03zaJ08VzdagOPvaUpHVmkRmE7rPobTzyRlofvGc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:ad:32:d9:28:cc:a8:ca:ff:29:7b:b9:89:39:d0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Oct 29 08:01:00 2026 GMT
Not After : Oct 30 08:01:00 2026 GMT
Subject: CN=99c691c82f0f034743b936db8c4fb0431ae137ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a9:98:e9:85:a7:a5:e7:d3:52:51:19:bf:5d:
fd:81:a3:b0:e6:f7:cf:83:75:37:c4:71:ee:f6:f5:
02:aa:d8:97:5f:f4:a8:8a:d1:f2:46:7e:c7:b4:b1:
b1:29:80:b8:ee:01:42:b4:ae:ea:15:d3:9a:f7:46:
0f:2d:80:52:c8:c1:ec:ca:48:de:0b:f5:f8:11:97:
b6:00:9c:c9:f6:37:80:b7:ba:58:e2:8f:e2:d9:43:
9a:fc:0f:e7:b0:47:2d:de:84:64:34:90:4b:38:b3:
b4:01:c2:6d:66:95:a4:c8:fa:09:0a:86:50:48:e2:
c4:9e:25:81:7a:b1:f5:65:9b:12:18:90:9d:d7:36:
e6:13:64:14:b5:5c:ec:24:e6:10:7c:58:2d:15:16:
2a:6e:44:a1:38:36:8c:89:79:04:db:df:4c:b2:d1:
0d:07:fb:e8:a9:0f:49:b8:11:60:52:77:cc:f1:80:
0c:42:4a:de:39:1d:09:19:e0:0f:7a:6e:b7:cf:6f:
bc:df:bd:5e:ee:7a:5d:a7:28:a4:02:af:60:18:10:
47:32:5a:99:b5:36:60:87:21:22:6d:09:a4:54:20:
5e:cc:94:b3:51:ac:c2:19:41:76:8b:0c:8b:d4:b3:
74:1f:ac:88:0f:ef:7a:4c:1f:8d:68:59:a9:b7:1e:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C6:91:C8:2F:0F:03:47:43:B9:36:DB:8C:4F:B0:43:1A:E1:37:AC
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:64:d4:4f:91:f0:61:82:51:65:a1:20:12:e0:a5:38:cf:e7:
82:12:bd:ee:ee:c9:1a:5e:4e:af:0b:51:77:61:20:f2:4b:f0:
eb:06:d7:d0:f0:1d:09:ab:dc:a0:d7:a2:27:21:02:ef:8a:f1:
34:8f:0a:55:74:ef:d4:cc:3c:d1:95:f8:65:fa:3b:84:5f:3c:
05:a7:28:01:3e:a1:64:ba:e3:62:e7:4e:42:b6:80:b1:bb:69:
98:ca:83:b2:d5:69:a2:fd:9a:6d:1e:d9:94:fc:c5:24:67:6a:
4c:9c:df:ff:7c:eb:c1:f6:40:cc:75:d4:96:b9:b8:e1:a3:83:
cc:a9:bb:d9:c6:3f:cb:42:f6:5a:4d:6d:b2:27:3a:56:f1:a1:
be:47:a1:ec:f3:10:31:b8:a8:52:5c:06:c6:b5:8f:9b:3d:96:
86:a3:71:27:33:d4:77:a2:f8:78:5a:1f:5d:32:f7:d0:c9:1f:
5a:20:c3:e1:c2:02:ec:08:d3:4e:e8:38:76:21:33:c6:e9:c9:
a7:ea:9d:a5:6a:d3:b5:ec:3e:36:42:d1:91:55:5e:2d:f7:52:
ed:4b:ca:2c:e4:f3:66:8c:3b:a1:49:53:ca:6d:51:ad:08:45:
d7:4c:7b:01:a6:d3:24:03:3b:95:44:a7:3e:ff:93:73:7e:e4:
46:3c:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 18:49:38 2026 by rpki-client