
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File: 9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier: f0LAszAuSPzC1mNW3Ga2XLfoVq7CnmB9ciZg2kNiyng=
Subject key identifier: 7D:BA:56:A3:53:9A:7A:FB:89:DF:34:EE:7A:2D:C7:CE:23:B1:24:7A
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer: /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial: 01A0BC53E39A9FC742CAB0FB60264B8A878D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number: 0173
Signing time: Sun 20 Sep 2026 01:00:09 +0000
Manifest this update: Sun 20 Sep 2026 01:00:09 +0000
Manifest next update: Mon 21 Sep 2026 01:00:09 +0000
Files and hashes: 1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: N54EORhVMiwmivguy/bRhIvsc4QeEECOGqCMMdiQbso=)
2: ystfWuwLG_sjkRPz74-K9kJmCS0.asa (hash: A/Zpc7HU31s0tuJut1dPdLlpZdSrvy9Su9vtCFoJBpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:53:e3:9a:9f:c7:42:ca:b0:fb:60:26:4b:8a:87:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
Validity
Not Before: Sep 20 01:00:09 2026 GMT
Not After : Sep 21 01:00:09 2026 GMT
Subject: CN=7dba56a3539a7afb89df34ee7a2dc7ce23b1247a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:40:03:66:49:da:74:59:98:ed:20:93:de:
56:81:0f:55:57:30:cb:db:83:e5:b5:c1:06:6f:aa:
c4:7b:8d:0f:35:c6:b6:f4:13:01:b1:63:d6:18:47:
ff:76:66:3a:ff:93:6e:d4:23:70:ba:3e:ee:c6:24:
1b:0b:88:e6:68:ab:b4:41:37:23:7d:1c:26:63:dc:
8e:99:00:08:c9:c8:65:98:cf:93:58:a4:44:82:4a:
b5:b5:93:41:00:5d:75:07:25:2b:25:b1:bd:f3:83:
97:e7:45:d8:b9:9f:66:e1:4d:ab:55:84:2a:7b:f3:
14:b0:90:78:a1:e4:64:ca:78:3c:c2:00:f3:c1:1b:
e8:83:9b:f5:d3:9b:cc:91:5a:33:29:8f:90:7b:b5:
21:75:fa:db:8c:5f:d3:b9:72:ad:41:df:89:c3:93:
ca:f9:4b:9e:4a:8d:2a:25:e3:d5:9f:67:10:c4:8c:
ad:62:10:43:3f:b1:25:bd:05:96:f5:54:48:35:87:
45:1f:c5:d3:19:90:79:5c:d9:2b:0f:46:d1:40:4c:
0b:ee:14:35:12:b9:62:aa:ef:4a:97:6f:6b:8a:d6:
90:0c:67:b3:76:2a:a5:e6:29:3a:b2:e3:de:47:91:
09:5a:41:9d:a7:bd:39:39:e6:ae:68:4b:ff:ad:f8:
48:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:56:A3:53:9A:7A:FB:89:DF:34:EE:7A:2D:C7:CE:23:B1:24:7A
X509v3 Authority Key Identifier:
keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:d5:c8:c3:12:b7:0c:ff:a4:3d:ec:ee:57:63:73:07:e6:
61:2c:7f:12:89:fb:65:0b:97:cc:03:7e:19:19:db:8e:da:e9:
f6:aa:6c:3a:12:9c:7b:7d:fe:de:35:c7:f5:88:0f:6f:bd:28:
be:8a:dc:c7:b1:14:db:7e:19:66:76:81:ae:2c:11:67:2b:c5:
c4:ea:28:58:82:9f:19:6d:00:d4:c0:e4:b5:4a:bb:76:5a:48:
09:61:61:9d:c4:d8:7d:eb:84:5f:59:ee:9a:eb:c7:26:a5:a6:
f9:f1:c9:64:72:25:23:74:b2:89:df:2c:e5:ea:94:62:6a:17:
24:f8:05:c1:7e:72:47:5b:2a:57:03:2c:23:3e:0d:8d:05:2f:
08:b7:9a:1a:53:94:2f:6f:f0:b3:56:6f:42:48:4a:70:eb:23:
8a:b3:e2:1b:de:b5:7a:d1:8f:c9:c5:04:bb:9f:df:a3:a3:5f:
1d:68:df:6c:ef:7b:c9:6a:43:79:07:65:95:d8:a6:c2:c2:b1:
40:50:4d:e3:da:e7:cc:8c:ef:de:7c:62:40:f9:d4:cf:10:55:
76:76:08:f2:67:42:9c:dc:d1:81:ee:bb:f0:68:e2:9c:0d:d3:
ea:74:82:72:96:b2:ae:97:56:cf:ff:f9:9e:2c:31:94:dc:19:
da:7c:9e:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8U+Oan8dCyrD7YCZLioeNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODA2ODAxYWE4MTljOGExY2E4ODk4ZDE1OTg5NDkwOWNl
ODI4MjkwHhcNMjYwOTIwMDEwMDA5WhcNMjYwOTIxMDEwMDA5WjAzMTEwLwYDVQQD
Eyg3ZGJhNTZhMzUzOWE3YWZiODlkZjM0ZWU3YTJkYzdjZTIzYjEyNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIFAA2ZJ2nRZmO0gk95WgQ9VVzDL
24PltcEGb6rEe40PNca29BMBsWPWGEf/dmY6/5Nu1CNwuj7uxiQbC4jmaKu0QTcj
fRwmY9yOmQAIychlmM+TWKREgkq1tZNBAF11ByUrJbG984OX50XYuZ9m4U2rVYQq
e/MUsJB4oeRkyng8wgDzwRvog5v105vMkVozKY+Qe7UhdfrbjF/TuXKtQd+Jw5PK
+UueSo0qJePVn2cQxIytYhBDP7ElvQWW9VRINYdFH8XTGZB5XNkrD0bRQEwL7hQ1
Erliqu9Kl29ritaQDGezdiql5ik6suPeR5EJWkGdp705OeauaEv/rfhIIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH26VqNTmnr7id807notx84jsSR6MB8GA1UdIwQY
MBaAFPaAaAGqgZyKHKiJjRWYlJCc6CgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9Cb0FhcUJuSW9jcUltTkZaaVVrSnpvS0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80MGIwNmQtZTBlMC00ZTJkLWJiOTMt
OWQ3MTlmMjc4ZDliLzEvOW9Cb0FhcUJuSW9jcUltTkZaaVVrSnpvS0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80MGIwNmQtZTBlMC00ZTJkLWJiOTMtOWQ3MTlmMjc4ZDli
LzEvOW9Cb0FhcUJuSW9jcUltTkZaaVVrSnpvS0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIrVyMMS
twz/pD3s7ldjcwfmYSx/Eon7ZQuXzAN+GRnbjtrp9qpsOhKce33+3jXH9YgPb70o
vorcx7EU234ZZnaBriwRZyvFxOooWIKfGW0A1MDktUq7dlpICWFhncTYfeuEX1nu
muvHJqWm+fHJZHIlI3Syid8s5eqUYmoXJPgFwX5yR1sqVwMsIz4NjQUvCLeaGlOU
L2/ws1ZvQkhKcOsjirPiG961etGPycUEu5/fo6NfHWjfbO97yWpDeQdlldimwsKx
QFBN49rnzIzv3nxiQPnUzxBVdnYI8mdCnNzRge678GjinA3T6nSCcpayrpdWz//5
niwxlNwZ2nyeWw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 11:00:09 2026 by rpki-client