Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
File: 9oBoAaqBnIocqImNFZiUkJzoKCk.mft (raw, json)
Hash identifier: cMgsC5Os+LXBY5L963Uo3cZY6w9egCj2m+p7DDxnOSc=
Subject key identifier: 87:5A:68:E4:FA:BF:F7:70:B4:40:04:D6:0E:C5:D1:BB:18:5B:A5:47
Authority key identifier: F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
Certificate issuer: /CN=f6806801aa819c8a1ca8898d159894909ce82829
Certificate serial: 01A1A970EB9EAF715D6EA6CC0F297887778C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
Manifest number: 01EE
Signing time: Thu 05 Nov 2026 02:01:52 +0000
Manifest this update: Thu 05 Nov 2026 02:01:52 +0000
Manifest next update: Fri 06 Nov 2026 02:01:52 +0000
Files and hashes: 1: 9oBoAaqBnIocqImNFZiUkJzoKCk.crl (hash: IX81QMbstaNf8vGoetXfzivJtqhI+sbPXDPnp2qP0bk=)
2: IdOGiMnwbaG7Q-z5N3y78k80P5s.asa (hash: lMMiZcutUiGbK+2GkPpO7pJ5E4+i2gJQUtdd/6Yri3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 02:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:70:eb:9e:af:71:5d:6e:a6:cc:0f:29:78:87:77:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6806801aa819c8a1ca8898d159894909ce82829
Validity
Not Before: Nov 5 02:01:52 2026 GMT
Not After : Nov 6 02:01:52 2026 GMT
Subject: CN=875a68e4fabff770b44004d60ec5d1bb185ba547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:7e:b7:4f:0b:7c:52:f8:72:a2:80:0d:9a:
01:b5:96:28:d7:71:50:f5:b7:32:ab:83:3c:e5:cb:
3f:4b:37:bc:79:69:13:d6:49:0d:ab:dd:06:e0:3b:
19:3f:9e:69:15:bc:d5:c9:93:7c:4b:03:eb:d5:18:
bf:f3:20:2d:27:67:ce:cb:a2:fe:57:bc:dc:c6:f0:
a6:62:11:1e:48:22:4c:9e:94:a2:26:33:c4:29:a1:
82:26:36:86:56:7c:f0:d9:bf:c9:0d:5c:2b:ad:ed:
4d:97:67:4a:21:52:ef:fc:76:8f:af:d0:bd:d7:7f:
a6:fa:7e:0f:46:0b:8c:30:66:5a:61:e8:04:32:a7:
8e:bb:e1:48:70:63:96:e8:c4:95:03:d5:7e:e4:00:
da:f9:ce:ce:75:59:4b:24:47:ff:17:6b:09:ab:e5:
7e:8c:32:f8:d9:16:8e:4b:5e:d0:ff:04:d2:d4:74:
2e:75:3d:97:cb:f6:82:e2:c6:30:1c:e4:29:89:05:
b2:97:3c:f6:21:8a:4d:86:cc:d5:7b:17:57:62:71:
7b:87:89:16:66:dc:43:85:75:f6:c4:17:bb:7e:4f:
73:26:b5:bb:3d:c0:f6:f6:fb:48:71:b0:f2:9b:23:
55:a1:0e:eb:3e:dc:55:69:12:2e:5e:a2:aa:8b:13:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5A:68:E4:FA:BF:F7:70:B4:40:04:D6:0E:C5:D1:BB:18:5B:A5:47
X509v3 Authority Key Identifier:
keyid:F6:80:68:01:AA:81:9C:8A:1C:A8:89:8D:15:98:94:90:9C:E8:28:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oBoAaqBnIocqImNFZiUkJzoKCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/40b06d-e0e0-4e2d-bb93-9d719f278d9b/1/9oBoAaqBnIocqImNFZiUkJzoKCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ba:39:d7:7d:40:21:96:a8:df:4a:c3:f6:84:32:e8:32:fc:
05:22:18:d8:db:99:fb:1d:28:6b:3d:f0:d6:26:b7:67:9b:ab:
a7:ae:7f:6e:b6:a1:e3:83:50:34:a2:ca:6e:cf:ba:df:7d:92:
07:84:13:74:27:2c:3b:4e:14:dc:f8:3c:e1:e1:81:9d:82:b9:
3e:09:d9:7b:9d:6e:2c:e6:a3:85:32:7f:98:18:8f:89:34:67:
a6:b4:68:fc:2b:28:38:59:56:b5:a1:3f:3f:6c:ac:49:af:ff:
68:aa:de:5e:d1:4d:bb:95:2f:32:d6:25:e1:3b:f5:c7:2b:a9:
f2:2f:19:88:8a:04:03:a8:de:0c:b2:49:7d:c0:6e:c2:80:65:
24:23:5d:93:13:fa:d2:72:12:d8:62:51:b1:79:c4:91:32:e5:
63:50:d1:ed:39:6b:5c:65:6f:c9:ab:34:ff:d0:71:5e:ea:36:
9b:e8:b6:fa:e1:b7:87:04:00:3e:75:3f:25:21:7e:19:9a:22:
83:d8:6a:46:81:46:d1:06:67:4a:76:e2:cc:49:19:86:56:ed:
f5:12:aa:dc:d4:3d:bd:20:48:a0:de:9a:09:39:ec:be:c5:4c:
3c:8c:88:b3:c6:7c:77:73:f8:a7:02:3c:20:d0:3b:65:eb:e9:
25:dc:91:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGpcOuer3FdbqbMDyl4h3eMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ODA2ODAxYWE4MTljOGExY2E4ODk4ZDE1OTg5NDkwOWNl
ODI4MjkwHhcNMjYxMTA1MDIwMTUyWhcNMjYxMTA2MDIwMTUyWjAzMTEwLwYDVQQD
Eyg4NzVhNjhlNGZhYmZmNzcwYjQ0MDA0ZDYwZWM1ZDFiYjE4NWJhNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8x+t08LfFL4cqKADZoBtZYo13FQ
9bcyq4M85cs/Sze8eWkT1kkNq90G4DsZP55pFbzVyZN8SwPr1Ri/8yAtJ2fOy6L+
V7zcxvCmYhEeSCJMnpSiJjPEKaGCJjaGVnzw2b/JDVwrre1Nl2dKIVLv/HaPr9C9
13+m+n4PRguMMGZaYegEMqeOu+FIcGOW6MSVA9V+5ADa+c7OdVlLJEf/F2sJq+V+
jDL42RaOS17Q/wTS1HQudT2Xy/aC4sYwHOQpiQWylzz2IYpNhszVexdXYnF7h4kW
ZtxDhXX2xBe7fk9zJrW7PcD29vtIcbDymyNVoQ7rPtxVaRIuXqKqixOcswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdaaOT6v/dwtEAE1g7F0bsYW6VHMB8GA1UdIwQY
MBaAFPaAaAGqgZyKHKiJjRWYlJCc6CgpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW9Cb0FhcUJuSW9jcUltTkZaaVVrSnpvS0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80MGIwNmQtZTBlMC00ZTJkLWJiOTMt
OWQ3MTlmMjc4ZDliLzEvOW9Cb0FhcUJuSW9jcUltTkZaaVVrSnpvS0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80MGIwNmQtZTBlMC00ZTJkLWJiOTMtOWQ3MTlmMjc4ZDli
LzEvOW9Cb0FhcUJuSW9jcUltTkZaaVVrSnpvS0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZro5131A
IZao30rD9oQy6DL8BSIY2NuZ+x0oaz3w1ia3Z5urp65/brah44NQNKLKbs+6332S
B4QTdCcsO04U3Pg84eGBnYK5PgnZe51uLOajhTJ/mBiPiTRnprRo/CsoOFlWtaE/
P2ysSa//aKreXtFNu5UvMtYl4Tv1xyup8i8ZiIoEA6jeDLJJfcBuwoBlJCNdkxP6
0nIS2GJRsXnEkTLlY1DR7TlrXGVvyas0/9BxXuo2m+i2+uG3hwQAPnU/JSF+GZoi
g9hqRoFG0QZnSnbizEkZhlbt9RKq3NQ9vSBIoN6aCTnsvsVMPIyIs8Z8d3P4pwI8
INA7ZevpJdyRIQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:19:04 2026 by rpki-client