Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: o2O5g4JOKmEy3kkIviGGrUZsWS+NbJp3B91YIphYC5A=
Subject key identifier: 43:E5:56:85:DD:88:1C:79:6D:16:E6:D3:69:10:07:30:78:01:CF:EC
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 01A13E94DB4923BC4D9AC243DFC7C31ACE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 08:01:44 +0000
Manifest this update: Thu 15 Oct 2026 08:01:44 +0000
Manifest next update: Fri 16 Oct 2026 08:01:44 +0000
Files and hashes: 1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: ZnUs2ZpvHN2p8oIvN69/SLA9q2wka3K/H6/6LovGwMs=)
2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:db:49:23:bc:4d:9a:c2:43:df:c7:c3:1a:ce:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Oct 15 08:01:44 2026 GMT
Not After : Oct 16 08:01:44 2026 GMT
Subject: CN=43e55685dd881c796d16e6d3691007307801cfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:fe:04:5a:f7:bf:be:0b:63:d9:cc:ca:ff:
9e:be:26:06:02:71:9c:57:c6:a3:11:99:26:bb:b3:
3d:0f:25:07:de:f2:ad:a3:5b:d9:e0:97:48:d1:a3:
3a:c1:36:43:d6:ba:5d:81:11:82:1e:07:b5:67:89:
bb:80:33:d3:5b:38:a1:45:d9:2f:65:83:8a:2c:6a:
7c:0a:58:24:9d:9f:46:74:a3:35:31:20:d0:97:dc:
1c:5c:8e:a1:cc:76:d9:b0:13:09:0f:96:c3:7f:c9:
3e:37:f1:5e:67:84:3f:54:85:13:3e:26:e8:96:73:
da:0b:84:51:c2:fc:e7:fd:13:bc:f6:9e:1b:91:87:
da:a9:1e:6d:f6:c6:5f:ec:36:01:a5:a5:da:3a:cf:
da:0f:38:83:c4:d9:ce:20:dc:fa:9a:3a:da:d0:f0:
e6:12:5b:5f:cc:65:e5:4c:59:96:86:c6:84:6a:c4:
cd:7f:9d:87:46:d5:8a:6e:2d:52:98:32:4b:25:64:
b5:09:db:3c:2e:f3:20:30:fa:5f:b0:99:3e:82:df:
61:63:11:67:94:2e:bf:e7:70:55:90:f2:da:e9:08:
41:0c:bc:da:84:29:1d:c1:16:9e:28:ce:b5:50:42:
cb:9a:f1:5f:a9:c5:8d:ca:91:4c:3f:47:83:95:53:
9a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E5:56:85:DD:88:1C:79:6D:16:E6:D3:69:10:07:30:78:01:CF:EC
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:08:df:34:91:85:f3:75:ab:03:58:82:eb:0f:11:08:81:38:
c6:6f:b8:e4:5a:37:3e:db:5d:34:0a:ad:3a:24:1f:57:4c:26:
97:8d:32:cb:80:2a:bd:9c:79:51:03:29:7e:8a:68:77:e6:29:
3c:e2:a0:8b:57:e5:e0:e7:57:6a:72:4d:bc:02:f2:57:38:56:
ac:5e:89:31:e5:d4:54:5d:43:b2:81:03:e0:94:a3:a1:db:fe:
68:36:95:7f:91:b0:7b:c8:d7:69:22:f1:2e:f2:c9:bd:e5:2a:
6d:f7:19:69:79:cd:e6:e7:d5:3f:6e:2d:61:27:e9:a7:7e:55:
a7:7b:30:18:07:03:05:b9:02:12:de:41:84:98:cc:a2:b7:b7:
a8:bf:11:09:7a:1c:6c:33:07:6a:a5:f2:d3:bc:55:47:a0:ec:
3d:89:c4:d0:cc:25:58:ea:b6:a6:4a:c1:12:5d:30:04:bc:ba:
1e:be:ce:5f:84:d2:96:95:76:2e:c3:d7:53:81:91:7d:b8:9f:
a7:17:a5:93:f9:6c:e8:fa:04:11:2f:c6:ed:57:e8:dc:8a:33:
55:d3:8d:c0:f8:5f:85:fb:be:49:93:ab:3d:d5:b6:d6:92:1e:
07:ad:1e:55:ce:7e:a8:90:60:e6:f0:3e:17:35:f1:f7:32:f7:
50:ff:e0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:14 2026 by rpki-client