Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: HMJTQ7a2Z8ZQwrkzeJyFUN6KWvsUQXDKw9dACqIG4eE=
Subject key identifier: 0D:9F:85:81:CA:33:23:EB:1B:3B:24:B0:60:A4:3F:4A:B4:3E:22:87
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019CAA8FC961E6C2D712189CA6CC60D5E2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0A99
Signing time: Sun 01 Mar 2026 18:01:15 +0000
Manifest this update: Sun 01 Mar 2026 18:01:15 +0000
Manifest next update: Mon 02 Mar 2026 18:01:15 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: N+1oZ4BVUGhATBSLatGquXHSqdAQDLe4gfBpqJ189EM=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c9:61:e6:c2:d7:12:18:9c:a6:cc:60:d5:e2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Mar 1 18:01:15 2026 GMT
Not After : Mar 2 18:01:15 2026 GMT
Subject: CN=0d9f8581ca3323eb1b3b24b060a43f4ab43e2287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:54:d4:06:0a:06:4d:44:f3:a7:18:d9:24:
b7:d4:4e:dd:e7:29:00:60:d7:63:ad:51:94:bd:03:
a0:55:fc:37:5f:73:5e:60:96:22:48:bc:da:04:06:
e3:a1:76:fe:d0:95:30:78:4c:36:ed:f9:39:be:9b:
2a:61:cc:7c:32:19:f5:57:12:49:c5:62:a4:53:3d:
c7:29:23:0e:86:8d:9b:ef:4c:ae:88:f9:9e:41:b0:
70:df:da:13:f1:d8:0c:b1:63:27:cd:27:d9:62:8b:
da:8c:cd:a2:b5:1c:87:04:88:2f:5d:a5:05:4a:85:
0d:c7:94:0a:19:86:0e:6c:f9:04:ed:0a:99:da:0b:
ef:de:06:78:2e:4a:2d:b2:1e:43:f2:cd:40:f0:c1:
18:2d:3b:a9:ab:b5:e5:e2:7f:52:71:a6:39:b4:76:
97:c7:29:9e:d1:67:31:27:8e:1d:37:2b:b9:64:21:
4b:f7:46:2f:31:d8:46:24:17:a6:bf:31:d7:f3:ee:
28:bc:4b:3d:a1:c7:09:ee:91:93:37:d4:32:19:1b:
89:b4:21:fe:f6:80:f7:04:b0:70:08:26:f7:bc:3d:
1c:af:3f:70:77:d6:c3:3e:18:b9:8d:64:ff:fc:1d:
0d:db:5f:20:15:1d:e5:1a:41:23:85:09:99:8b:27:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9F:85:81:CA:33:23:EB:1B:3B:24:B0:60:A4:3F:4A:B4:3E:22:87
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3e:bb:60:a8:ee:9b:90:c1:7f:82:b6:a3:03:cd:a3:10:5f:
25:9b:ae:70:41:cd:b9:f5:8c:5a:f9:28:b0:4c:e6:27:8f:5e:
60:09:61:0b:55:74:ef:9a:f8:37:fb:7c:70:09:55:8f:41:48:
b1:de:ca:6b:14:48:10:e5:a7:7f:c4:83:66:5f:74:c0:24:0b:
94:92:e4:f7:87:ae:b9:ea:77:02:ce:ec:b4:a6:ef:69:34:27:
c9:8c:03:d3:fe:b1:e7:15:ef:25:1e:f7:4b:22:e3:d5:34:e0:
60:e8:44:36:7b:36:92:81:db:df:3e:f8:0e:a0:b4:a5:72:8e:
22:90:7d:28:f1:03:3a:26:6e:80:6b:44:5a:3b:be:71:95:c6:
ca:3a:65:c6:30:03:dc:09:ef:b3:ed:3a:3d:6c:e4:31:e7:92:
cd:a5:b9:f8:2c:ba:b4:9b:ce:08:a6:1a:da:99:b3:06:73:0a:
5e:3b:ed:bc:29:f3:e0:7e:95:38:fd:e9:8a:38:1a:64:c5:6a:
9b:4d:49:ee:43:3d:72:8c:05:36:77:61:a4:c7:eb:5e:31:09:
88:8a:37:68:a6:a5:2e:dd:12:7a:23:a0:0c:9b:85:92:02:18:
df:c7:c2:9d:18:eb:20:82:27:d8:19:c5:08:37:bb:d3:8a:30:
13:e8:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:47 2026 by rpki-client