Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: iYEFn91YHEdNzwwncwUxNv5edDlIhoMi3aTccocZqFE=
Subject key identifier: F2:9F:02:28:6E:61:1C:95:B0:E4:0E:CB:39:F2:86:16:AD:30:AF:6A
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 01A12AD6F92FF6D3ABC21DB4E6C1ACB221F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 0D07
Signing time: Sun 11 Oct 2026 12:01:33 +0000
Manifest this update: Sun 11 Oct 2026 12:01:33 +0000
Manifest next update: Mon 12 Oct 2026 12:01:33 +0000
Files and hashes: 1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=)
2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: X2LK0FYb02fucQsLKu7ku/Bvga4EDRhNIxineCWMnIo=)
3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=)
4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=)
5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:f9:2f:f6:d3:ab:c2:1d:b4:e6:c1:ac:b2:21:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Oct 11 12:01:33 2026 GMT
Not After : Oct 12 12:01:33 2026 GMT
Subject: CN=f29f02286e611c95b0e40ecb39f28616ad30af6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:39:a0:c6:c5:90:e9:fb:84:61:89:1d:b2:2f:
ce:03:83:5e:49:ab:9b:a6:23:26:6f:a8:41:be:be:
99:80:51:f5:a2:cd:dc:b1:a3:87:da:f9:05:bb:95:
e4:e4:85:23:37:47:63:06:2e:54:36:e2:0c:d0:29:
66:a1:bb:48:3b:af:22:e9:0f:05:ee:37:c1:81:21:
61:98:00:af:0c:3a:77:54:fa:da:75:5a:19:35:a4:
df:d4:04:fb:ab:76:42:0e:ef:e0:7d:12:52:50:d0:
4f:e2:7e:b7:c7:8c:94:4b:b7:5c:37:67:b5:07:62:
05:4f:c9:ca:b4:19:5e:9c:13:fe:2f:d4:0d:17:69:
7e:b8:57:7c:e6:f8:87:fb:b1:b1:fb:51:67:12:39:
3b:35:a9:ac:bd:2a:c5:40:90:6a:11:12:d4:14:c8:
9d:ae:8e:05:dc:1f:1c:07:23:3c:78:62:8d:2b:83:
ba:33:05:f5:f7:bd:29:c6:59:7b:a0:38:06:6f:c7:
1c:2a:af:21:a4:73:ab:f4:e9:3d:91:3c:5b:5e:fa:
a4:b3:d7:34:8f:9d:d7:1c:77:94:d2:63:00:59:82:
1e:2f:a4:2c:85:f1:19:95:5b:4e:58:50:08:5f:94:
92:2d:30:e0:e7:2e:f6:fb:e5:b0:ca:2d:4a:dd:02:
53:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:9F:02:28:6E:61:1C:95:B0:E4:0E:CB:39:F2:86:16:AD:30:AF:6A
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:19:2b:eb:47:dc:91:55:aa:88:00:36:35:a7:78:53:97:f5:
26:7e:e4:c3:4b:3d:b7:ab:5c:e6:ce:bb:0c:f0:25:de:b7:3e:
ad:22:fd:53:9b:4f:a3:24:33:95:f4:b9:b9:6d:57:40:16:1c:
10:cb:d8:2b:18:4e:29:5e:4c:2f:c6:cb:ab:4f:48:22:92:5b:
18:2e:c0:ab:6f:90:94:72:28:a1:c3:fd:66:f9:58:e3:68:90:
13:a2:72:31:a3:65:ee:24:99:84:4e:50:d3:af:53:11:8e:23:
dd:be:57:93:9f:8c:80:41:5a:dd:5f:ff:d7:e6:3c:ac:e7:c1:
e0:4d:02:01:bd:be:1e:7d:3c:ff:f2:5e:f8:df:28:11:cd:d9:
95:05:d5:d2:a0:b8:81:0e:42:95:e3:ae:30:60:99:87:f5:93:
ed:e9:49:70:ae:08:20:8c:69:be:24:4f:90:6a:5e:bc:6c:c6:
b6:19:96:cd:1b:5c:a2:3f:6e:2c:6d:85:70:2a:54:ff:50:a1:
6e:68:ce:49:74:7c:70:69:38:49:f1:14:bd:b6:f9:f9:8f:7d:
ba:ef:05:01:44:8f:14:d3:28:3e:af:85:33:ad:92:f1:02:6a:
f1:e5:77:2d:86:74:a1:06:62:a8:2b:d5:8a:34:73:00:ae:88:
af:0f:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:07:16 2026 by rpki-client