
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: vTrcDrgO1qduvtLZrEn84TA2bdY5Qmo0Hd/ztwEjrTo=
Subject key identifier: C4:1B:95:AE:50:09:B4:40:9C:21:65:BF:7C:04:1B:C6:EC:47:9A:E7
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 01A0005D213A04A0BEEDA87AAC37FB6CF457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1991
Signing time: Fri 14 Aug 2026 13:01:38 +0000
Manifest this update: Fri 14 Aug 2026 13:01:38 +0000
Manifest next update: Sat 15 Aug 2026 13:01:38 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: 7MGYm5gM2GxFwMFUt/x2gaqzfs1pm2nyMrU3BHZUIWs=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5d:21:3a:04:a0:be:ed:a8:7a:ac:37:fb:6c:f4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Aug 14 13:01:38 2026 GMT
Not After : Aug 15 13:01:38 2026 GMT
Subject: CN=c41b95ae5009b4409c2165bf7c041bc6ec479ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:00:97:d0:ca:0f:b2:2e:60:d2:77:7a:40:
9d:74:12:ae:dc:19:4c:bb:93:6c:e3:f1:c0:41:3c:
1c:aa:46:fe:24:23:07:25:11:54:27:c7:dd:02:8e:
f1:c2:5a:83:1e:bf:83:0c:c5:71:e9:9b:e0:fc:fe:
fa:70:23:b1:8c:1f:0d:e3:42:aa:f0:03:33:18:fe:
fa:b2:f5:56:38:e9:18:55:4c:bb:df:91:99:cb:cc:
d9:ca:46:16:b3:18:ed:18:be:54:06:47:0d:f3:f4:
8f:52:ea:c6:2c:e0:4e:58:ff:4a:d6:9e:f7:68:4d:
2d:75:8a:2f:ac:48:e0:9e:a3:98:a7:6f:2e:92:e4:
de:40:d3:9c:0a:8c:9a:a1:a9:b3:9d:f5:d9:16:83:
b7:83:ae:ee:3c:44:79:b5:14:f9:c6:82:1e:15:73:
02:ae:02:c6:2e:67:82:55:bc:b2:8d:d9:13:ea:7f:
e3:1f:04:d6:a3:d4:ef:44:59:c3:cb:88:fa:15:ce:
2b:34:c1:23:83:06:47:1e:5a:13:db:55:de:81:67:
31:7d:4f:ed:17:4b:a9:ef:15:67:87:10:6f:8b:c1:
a4:73:d5:0e:f3:26:69:44:fc:66:3e:63:3e:67:f4:
b4:7f:d7:38:a0:98:c5:14:cb:9f:3f:64:16:d3:59:
58:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1B:95:AE:50:09:B4:40:9C:21:65:BF:7C:04:1B:C6:EC:47:9A:E7
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:cc:89:f2:3a:59:f2:6d:aa:56:90:14:8a:48:02:12:99:35:
bf:77:73:6c:45:2e:72:55:98:fe:0d:a0:8e:10:fc:15:0d:9c:
03:5f:41:92:34:9f:bd:de:0f:37:21:34:1d:a4:bb:8d:ca:17:
1f:7f:06:5d:5c:6c:a6:92:87:19:89:41:22:04:b7:41:36:d4:
a5:1e:62:02:cb:d3:75:35:e1:f8:25:6b:21:b2:41:30:4b:90:
db:23:76:04:5a:88:ad:0c:ab:a1:a8:1c:ed:34:a1:85:0e:83:
fa:0a:7a:4f:cd:d5:55:9a:23:89:cd:4e:92:90:7a:8e:b1:4b:
d5:85:54:3c:d3:e9:ca:f6:35:a5:dc:48:94:51:0d:05:6b:6d:
4c:39:15:14:80:21:d2:ba:2c:c6:93:c4:39:ef:cc:cd:4a:46:
6e:06:cf:7e:56:e1:7e:90:69:c0:18:76:49:7e:9f:b9:85:d7:
16:8a:79:3b:6f:c4:1a:e5:77:ad:d6:f6:ae:c3:ee:ea:d8:c1:
58:df:06:7f:70:3b:e7:f1:4c:c5:c0:42:bc:ad:b8:82:b7:c6:
40:3b:bd:3d:30:c2:a0:9a:c5:8c:3b:f4:2f:96:ee:0d:86:48:
c3:38:67:7b:64:00:0e:b4:69:19:e0:43:8a:a6:0a:5b:2b:81:
04:39:3c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXSE6BKC+7ah6rDf7bPRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTcxNzRjNmY3NGZhOWEyMmIwYWRlZTI1MWE4ZDY0MzEy
MzEzZjIwHhcNMjYwODE0MTMwMTM4WhcNMjYwODE1MTMwMTM4WjAzMTEwLwYDVQQD
EyhjNDFiOTVhZTUwMDliNDQwOWMyMTY1YmY3YzA0MWJjNmVjNDc5YWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQAl9DKD7IuYNJ3ekCddBKu3BlM
u5Ns4/HAQTwcqkb+JCMHJRFUJ8fdAo7xwlqDHr+DDMVx6Zvg/P76cCOxjB8N40Kq
8AMzGP76svVWOOkYVUy735GZy8zZykYWsxjtGL5UBkcN8/SPUurGLOBOWP9K1p73
aE0tdYovrEjgnqOYp28ukuTeQNOcCoyaoamznfXZFoO3g67uPER5tRT5xoIeFXMC
rgLGLmeCVbyyjdkT6n/jHwTWo9TvRFnDy4j6Fc4rNMEjgwZHHloT21XegWcxfU/t
F0up7xVnhxBvi8Gkc9UO8yZpRPxmPmM+Z/S0f9c4oJjFFMufP2QW01lY8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQbla5QCbRAnCFlv3wEG8bsR5rnMB8GA1UdIwQY
MBaAFPTnF0xvdPqaIrCt7iUajWQxIxPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQt
Mjg5NzhjM2M3ZWM1LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQtMjg5NzhjM2M3ZWM1
LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcyJ8jpZ
8m2qVpAUikgCEpk1v3dzbEUuclWY/g2gjhD8FQ2cA19BkjSfvd4PNyE0HaS7jcoX
H38GXVxsppKHGYlBIgS3QTbUpR5iAsvTdTXh+CVrIbJBMEuQ2yN2BFqIrQyroagc
7TShhQ6D+gp6T83VVZojic1OkpB6jrFL1YVUPNPpyvY1pdxIlFENBWttTDkVFIAh
0rosxpPEOe/MzUpGbgbPflbhfpBpwBh2SX6fuYXXFop5O2/EGuV3rdb2rsPu6tjB
WN8Gf3A75/FMxcBCvK24grfGQDu9PTDCoJrFjDv0L5buDYZIwzhne2QADrRpGeBD
iqYKWyuBBDk8fA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:03 2026 by rpki-client