Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier: R8ulPykly5c+DW+4oXWmL212/Lb1RdK4E0VmgzK1PI4=
Subject key identifier: E4:9C:81:E7:47:7D:8B:D9:D0:86:79:05:15:DA:9D:8B:DB:95:20:83
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 01A0C8FD4E771AD6C755CE96673CB8149C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number: 0CBB
Signing time: Tue 22 Sep 2026 12:00:38 +0000
Manifest this update: Tue 22 Sep 2026 12:00:38 +0000
Manifest next update: Wed 23 Sep 2026 12:00:38 +0000
Files and hashes: 1: 5TCdgL2HtG2U6UqaKMQzmRQpVYg.roa (hash: iiy0cvTf0H0qnM221d0FdIuvs2I+5Ca1XYPiAhqx6SI=)
2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: G6Qh8W3tjWGFoOXi0P49+E/A58h9UWFQhqD/Q5C6Otw=)
3: Xn2Z7IHqH0X53_Ab46jTcOu-vm0.roa (hash: jRPa3G5ri1yL/E0W7FEV48WgsM0Xg5oNizTu+wX+3Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:4e:77:1a:d6:c7:55:ce:96:67:3c:b8:14:9c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Sep 22 12:00:38 2026 GMT
Not After : Sep 23 12:00:38 2026 GMT
Subject: CN=e49c81e7477d8bd9d086790515da9d8bdb952083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:b7:aa:a9:fd:d7:61:9c:bf:fd:57:7f:56:
8a:d8:c6:90:06:93:9e:ce:a9:5d:f0:28:93:13:f9:
a4:79:6e:d2:85:d3:bf:40:e8:b7:cd:b7:e3:a5:15:
c7:a6:38:6e:fe:d8:1a:c6:08:3c:6d:a6:68:ca:b1:
42:02:e8:3c:5f:72:a4:10:a9:b7:15:e8:b1:e6:37:
9b:b4:66:d4:2f:4a:e2:df:f4:b3:81:3f:e9:70:31:
47:ca:9c:59:bf:2c:56:44:c5:55:77:87:55:0c:ae:
24:72:54:5a:26:c5:5e:d0:2d:ff:db:7b:a1:71:dd:
57:20:c5:07:b7:a7:0d:3a:ea:68:c0:7f:37:97:bc:
b5:53:99:be:0e:33:f6:25:c2:fd:e5:48:33:ad:5b:
45:35:9b:cf:4d:1d:78:7c:fe:8f:fd:c0:f1:29:84:
df:ee:96:37:32:de:33:06:e4:66:68:36:2d:0b:dc:
c2:0c:a1:e5:89:5b:24:8a:cc:24:7f:c3:99:cb:41:
03:2d:ec:13:c1:50:5d:90:10:f7:9c:e8:69:42:a8:
8d:26:2e:96:42:e2:9c:08:cd:06:ab:af:0b:f0:5c:
22:d6:f9:29:8c:3a:21:45:a4:a4:9f:a9:52:be:52:
a5:b4:ca:58:a7:cf:4b:6b:18:9c:67:23:9b:5d:93:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9C:81:E7:47:7D:8B:D9:D0:86:79:05:15:DA:9D:8B:DB:95:20:83
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:64:69:e8:58:73:0f:5f:62:f3:a3:1b:eb:d8:25:0b:82:21:
27:3c:9f:1c:fd:a6:0d:d3:55:35:18:15:9d:e1:03:13:e7:51:
bd:03:11:29:3c:9f:9f:96:0d:5a:04:f3:9d:da:2c:ab:14:9c:
56:13:a6:fc:0e:16:f2:a0:e0:05:cd:1f:fb:58:4e:15:9f:92:
01:30:37:df:8a:ee:72:c6:7a:ba:e9:c3:eb:ca:4f:15:2b:73:
c2:43:8c:de:4d:5e:74:3a:18:ce:57:c1:6e:c8:86:ae:18:a4:
93:86:37:7f:23:0d:0f:46:0e:95:10:29:f2:cf:c3:bc:cf:1b:
29:76:9d:3b:fa:3c:e7:dd:46:c2:9b:30:48:01:87:2c:56:6a:
79:df:f8:95:40:0f:40:60:56:70:90:28:01:1d:03:20:65:47:
b9:63:76:46:28:03:20:1f:e3:7a:3b:9e:b2:23:9a:b1:fb:c7:
27:16:53:2c:1f:81:05:67:2f:88:93:0e:5c:8a:49:65:82:15:
25:da:79:a0:b0:ad:48:80:75:4e:df:29:2f:c6:7c:70:c9:16:
98:4a:b3:1f:a5:48:12:d2:9e:cc:74:21:bf:03:7b:cf:b7:fa:
ad:7f:09:56:9e:7a:48:53:f7:a5:f3:90:ba:1c:6b:ef:d6:ea:
44:92:60:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDI/U53GtbHVc6WZzy4FJwaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTE1NTU0OGVjOWFiZTExZWYzYmU3MDYwNmE0Yjk4N2Vh
ZTM4MjUwHhcNMjYwOTIyMTIwMDM4WhcNMjYwOTIzMTIwMDM4WjAzMTEwLwYDVQQD
EyhlNDljODFlNzQ3N2Q4YmQ5ZDA4Njc5MDUxNWRhOWQ4YmRiOTUyMDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eS3qqn912Gcv/1Xf1aK2MaQBpOe
zqld8CiTE/mkeW7ShdO/QOi3zbfjpRXHpjhu/tgaxgg8baZoyrFCAug8X3KkEKm3
Feix5jebtGbUL0ri3/SzgT/pcDFHypxZvyxWRMVVd4dVDK4kclRaJsVe0C3/23uh
cd1XIMUHt6cNOupowH83l7y1U5m+DjP2JcL95UgzrVtFNZvPTR14fP6P/cDxKYTf
7pY3Mt4zBuRmaDYtC9zCDKHliVskiswkf8OZy0EDLewTwVBdkBD3nOhpQqiNJi6W
QuKcCM0Gq68L8Fwi1vkpjDohRaSkn6lSvlKltMpYp89LaxicZyObXZOuuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOScgedHfYvZ0IZ5BRXanYvblSCDMB8GA1UdIwQY
MBaAFPThVVSOyavhHvO+cGBqS5h+rjglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMt
YzlmMTZlODBiM2M0LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy80ZWRlOWQtY2RmOC00YzI4LTg4YjMtYzlmMTZlODBiM2M0
LzEvOU9GVlZJN0pxLUVlODc1d1lHcExtSDZ1T0NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZGRp6Fhz
D19i86Mb69glC4IhJzyfHP2mDdNVNRgVneEDE+dRvQMRKTyfn5YNWgTzndosqxSc
VhOm/A4W8qDgBc0f+1hOFZ+SATA334rucsZ6uunD68pPFStzwkOM3k1edDoYzlfB
bsiGrhikk4Y3fyMND0YOlRAp8s/DvM8bKXadO/o8591GwpswSAGHLFZqed/4lUAP
QGBWcJAoAR0DIGVHuWN2RigDIB/jejuesiOasfvHJxZTLB+BBWcviJMOXIpJZYIV
Jdp5oLCtSIB1Tt8pL8Z8cMkWmEqzH6VIEtKezHQhvwN7z7f6rX8JVp56SFP3pfOQ
uhxr79bqRJJgvA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:47:52 2026 by rpki-client