Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
File: 0KFr9-DjuTMLVEg-GfYTsCtie-8.mft (raw, json)
Hash identifier: GnEsV1aPVbX8dzj/AejGuLKWTvX3e3tXdOQmC3tWUZA=
Subject key identifier: AC:9F:85:B6:DE:00:F8:BB:B7:E3:14:E7:08:FC:BD:80:8D:5E:25:BD
Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Certificate serial: 01A13FDE04EF975A8CE57423D50ACE98D876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
Manifest number: 14E0
Signing time: Thu 15 Oct 2026 14:01:17 +0000
Manifest this update: Thu 15 Oct 2026 14:01:17 +0000
Manifest next update: Fri 16 Oct 2026 14:01:17 +0000
Files and hashes: 1: 0KFr9-DjuTMLVEg-GfYTsCtie-8.crl (hash: RXkfBJRp69bm2yz0SOl5DPtwIquPbItfB5Z9dPE+Fpw=)
2: wf4Dioz38ILB4v1B0ECWLEz6X7c.roa (hash: EBxrOoYlpbtk2ShhC7WmcBl12gxV4Wa50Z9TM1JzCUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:de:04:ef:97:5a:8c:e5:74:23:d5:0a:ce:98:d8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef
Validity
Not Before: Oct 15 14:01:17 2026 GMT
Not After : Oct 16 14:01:17 2026 GMT
Subject: CN=ac9f85b6de00f8bbb7e314e708fcbd808d5e25bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:08:ba:47:5e:4a:4d:11:ff:a2:dc:5b:ee:
ec:7d:b2:ea:64:87:48:5b:79:fe:70:9b:84:68:d2:
00:1f:ff:f0:00:0a:fd:ff:53:08:4c:c8:3e:19:f4:
f3:d4:23:dd:fb:72:ab:d4:b3:c4:a2:51:25:1c:40:
b7:52:a9:c9:c5:6c:54:5e:24:f6:bf:cd:c9:d9:b3:
b9:db:70:29:8b:10:ed:b6:aa:72:a1:30:e2:25:82:
7b:41:2b:02:cc:41:8b:e5:95:4d:01:07:88:d1:72:
e1:2c:af:89:ec:5b:f8:ef:ee:ea:b5:5a:94:36:bf:
3b:96:1d:a0:11:f1:e8:bf:09:7b:29:a0:e9:fc:e0:
e9:7b:6a:20:b8:e1:4e:1e:7c:c8:34:e5:63:24:b7:
03:3d:73:77:39:fe:ea:7b:ca:5a:45:f7:63:b8:87:
55:ae:77:5e:65:68:de:96:79:05:ee:9a:60:51:bd:
0b:71:d2:86:d2:bb:67:07:64:19:85:6c:b5:a6:0e:
17:a8:80:58:b1:25:98:fe:ec:be:0c:77:83:51:02:
0a:14:df:eb:1d:eb:c2:6b:de:fd:8a:1d:36:3e:28:
b3:f2:da:6b:d8:97:33:76:98:04:a4:b7:e9:dd:dd:
bd:be:25:b1:dd:d5:d6:e6:aa:bf:d2:10:d4:9e:d3:
48:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:85:B6:DE:00:F8:BB:B7:E3:14:E7:08:FC:BD:80:8D:5E:25:BD
X509v3 Authority Key Identifier:
keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:54:e6:fc:b7:5b:df:e6:46:50:a9:4a:d3:ef:6d:8d:e0:cd:
95:af:61:a9:da:5b:44:52:99:ce:ab:7b:d3:a1:ff:fa:4d:75:
58:4b:06:e0:50:6d:06:d2:64:39:a5:5b:fb:13:56:f7:2d:f6:
79:08:16:c1:f8:8f:02:0c:62:0e:70:00:9a:3b:cc:31:00:18:
33:16:40:cd:77:3b:2b:bb:a5:3e:60:4b:8d:10:9b:e2:e7:bb:
e6:2c:f2:34:d2:02:6c:10:fe:8c:39:03:59:01:e0:c6:7b:6d:
5e:e4:c1:72:f6:3d:7b:c3:ca:de:bd:23:78:97:53:92:43:cd:
e4:fd:c0:68:5b:a8:9f:ba:8d:69:7f:f4:65:e3:f1:cc:3a:9b:
4d:65:f6:77:fd:63:e1:0c:83:62:e7:1b:b9:9a:1b:94:78:8e:
7f:be:73:0f:b6:e6:c5:ee:39:90:f7:0e:79:87:92:53:16:8d:
16:f1:ef:9a:26:2c:97:f1:77:0d:2a:32:2c:39:18:87:0a:ac:
4a:48:7b:83:a9:8c:8b:e5:8e:a2:53:cb:11:14:e6:40:f6:ee:
18:37:7c:a0:d7:c7:a8:6a:63:f2:d0:eb:f6:44:1d:53:f7:a5:
37:23:64:57:ee:e5:71:db:d3:ed:e6:c1:67:67:4d:c3:b4:7d:
f6:aa:45:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:44:48 2026 by rpki-client