Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json)
Hash identifier: WU1gn1CVB7EzuG2iR/lueKgGHm99J6KEDeRJIWLJ9TE=
Subject key identifier: 20:B5:D6:99:FE:C1:8B:2F:81:C2:DE:92:EA:38:58:90:0C:D1:0A:3B
Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391
Certificate serial: 01A0C4E95CB7D5849A3DE3655A2C04D3E7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
Manifest number: 18DC
Signing time: Mon 21 Sep 2026 17:00:22 +0000
Manifest this update: Mon 21 Sep 2026 17:00:22 +0000
Manifest next update: Tue 22 Sep 2026 17:00:22 +0000
Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: QQ8iy/4CO0uN1wfhXGGzYItHaSxLITU3Gv8/jTQ6JC0=)
2: BrhtiCQ6piwiqQ1pBvv28oLuyG8.roa (hash: ryijqGxwQHpnmrcmVfe+7BnWPcERkXO0XSnxMSNhaks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:5c:b7:d5:84:9a:3d:e3:65:5a:2c:04:d3:e7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391
Validity
Not Before: Sep 21 17:00:22 2026 GMT
Not After : Sep 22 17:00:22 2026 GMT
Subject: CN=20b5d699fec18b2f81c2de92ea3858900cd10a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:53:a8:fa:c1:e0:62:20:d2:8e:db:38:d8:
30:db:8e:61:1c:b5:34:fc:d0:0e:b1:c6:b5:21:57:
18:39:34:8f:78:08:75:e6:ba:e7:0f:8a:ec:04:99:
06:89:12:87:7a:a1:92:b7:2d:e3:7d:e6:2a:24:75:
39:28:e7:5b:c7:7f:83:86:4e:49:43:e0:98:99:0a:
5b:fc:71:e8:8a:82:6c:56:8c:8d:68:fb:9d:8b:ba:
35:5a:a7:8d:32:08:ac:a6:63:7f:c7:dd:d3:9a:33:
60:da:b6:71:36:87:39:ee:01:77:af:11:78:a5:f5:
ba:dc:da:ff:ec:ff:cd:10:a5:72:aa:64:bf:e5:67:
51:c2:35:86:4f:be:8b:d9:ce:74:3c:78:f5:d6:9b:
90:57:e3:bc:99:6b:5d:e2:1f:04:fa:fe:55:cd:3a:
1c:1a:c3:0d:8c:51:ee:40:67:44:55:22:be:98:be:
d3:8b:fa:25:ca:70:58:25:03:73:54:4d:c7:31:9a:
a6:91:4a:c2:92:77:d4:cc:e6:74:78:34:47:fd:1e:
86:c9:85:f4:a2:e2:74:e6:a5:94:4b:e1:d2:85:73:
37:0d:00:9b:2a:b7:1d:c7:75:f2:4b:b6:a5:4e:09:
47:d6:55:ad:86:c6:51:a7:05:a8:b8:45:b3:2b:6c:
64:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B5:D6:99:FE:C1:8B:2F:81:C2:DE:92:EA:38:58:90:0C:D1:0A:3B
X509v3 Authority Key Identifier:
keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:85:e9:cc:3e:19:ed:4d:20:53:61:80:a8:e9:3a:5c:88:41:
f3:3f:76:da:e7:db:0a:23:f1:68:7d:9a:5c:55:06:d5:08:5f:
17:14:b1:9f:f2:2d:52:ba:ac:91:e9:f9:b7:81:76:ab:c5:f4:
7c:c9:38:79:10:c9:5c:b7:ea:95:49:1f:08:02:93:b1:43:bb:
2e:5c:c8:15:24:ee:c4:0a:66:71:62:a3:1a:89:44:fe:5c:af:
a5:cb:f3:ea:74:73:82:f6:bd:57:b3:85:b9:87:37:3e:58:55:
f6:1a:92:9d:c4:38:91:d5:6c:95:be:ad:6c:f2:f1:9e:c6:a9:
d9:fd:17:6d:34:bf:41:ad:16:14:41:2c:e5:2c:c7:76:21:91:
8a:b0:69:6d:c2:db:55:a9:5e:5e:0b:d5:d9:e3:78:59:d7:cc:
a9:c6:5d:88:3e:cd:91:31:e5:d4:ea:0b:81:37:c7:fe:b8:90:
67:de:f3:d8:51:2d:34:f6:22:60:18:df:33:84:92:ce:ee:7e:
73:2e:38:5b:7b:98:a2:7c:72:0f:8d:7e:a6:a6:23:0f:54:6d:
74:5c:12:ce:7f:a7:2e:bc:e8:ed:92:27:51:43:c6:7f:bf:fb:
a4:80:4c:2d:78:45:b4:22:c7:9e:69:24:8d:6d:53:cd:98:5b:
23:02:69:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDE6Vy31YSaPeNlWiwE0+eoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2OGUyMzFkNTU1MTg3NmUxNWFmYzY2MzdlYWI3ZmNhODAw
ODgzOTEwHhcNMjYwOTIxMTcwMDIyWhcNMjYwOTIyMTcwMDIyWjAzMTEwLwYDVQQD
EygyMGI1ZDY5OWZlYzE4YjJmODFjMmRlOTJlYTM4NTg5MDBjZDEwYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA5TqPrB4GIg0o7bONgw245hHLU0
/NAOsca1IVcYOTSPeAh15rrnD4rsBJkGiRKHeqGSty3jfeYqJHU5KOdbx3+Dhk5J
Q+CYmQpb/HHoioJsVoyNaPudi7o1WqeNMgispmN/x93TmjNg2rZxNoc57gF3rxF4
pfW63Nr/7P/NEKVyqmS/5WdRwjWGT76L2c50PHj11puQV+O8mWtd4h8E+v5VzToc
GsMNjFHuQGdEVSK+mL7Ti/olynBYJQNzVE3HMZqmkUrCknfUzOZ0eDRH/R6GyYX0
ouJ05qWUS+HShXM3DQCbKrcdx3XyS7alTglH1lWthsZRpwWouEWzK2xkWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC11pn+wYsvgcLekuo4WJAM0Qo7MB8GA1UdIwQY
MBaAFPaOIx1VUYduFa/GY36rf8qACIORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTIt
YmExZWQ5NDc0YmEyLzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTItYmExZWQ5NDc0YmEy
LzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoXpzD4Z
7U0gU2GAqOk6XIhB8z922ufbCiPxaH2aXFUG1QhfFxSxn/ItUrqsken5t4F2q8X0
fMk4eRDJXLfqlUkfCAKTsUO7LlzIFSTuxApmcWKjGolE/lyvpcvz6nRzgva9V7OF
uYc3PlhV9hqSncQ4kdVslb6tbPLxnsap2f0XbTS/Qa0WFEEs5SzHdiGRirBpbcLb
ValeXgvV2eN4WdfMqcZdiD7NkTHl1OoLgTfH/riQZ97z2FEtNPYiYBjfM4SSzu5+
cy44W3uYonxyD41+pqYjD1RtdFwSzn+nLrzo7ZInUUPGf7/7pIBMLXhFtCLHnmkk
jW1TzZhbIwJp6g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:30 2026 by rpki-client