Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json)
Hash identifier: GGee51/uduzQixGmQ9vkgOspmrKn9VE9BpDlwm4kjG8=
Subject key identifier: 2F:C8:45:A3:42:B2:80:FA:6A:C2:16:2F:0F:BE:7B:1E:01:90:76:C6
Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Certificate serial: 01A0CDB57B74F2273FA4F0212F6C87FBBF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
Manifest number: 0C8E
Signing time: Wed 23 Sep 2026 10:00:17 +0000
Manifest this update: Wed 23 Sep 2026 10:00:17 +0000
Manifest next update: Thu 24 Sep 2026 10:00:17 +0000
Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: Zlq4eXmR5/Kn8mp38ij677c5SLcUg/AlHVeTKcvEYbY=)
2: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (hash: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g=)
3: ey3Mr8JzbFWqpi_zpEHpZfcPVTI.roa (hash: RZTYOXGch0DUBzdLJFR6bBMusCngAipnQLe9rTFjcIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b5:7b:74:f2:27:3f:a4:f0:21:2f:6c:87:fb:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3
Validity
Not Before: Sep 23 10:00:17 2026 GMT
Not After : Sep 24 10:00:17 2026 GMT
Subject: CN=2fc845a342b280fa6ac2162f0fbe7b1e019076c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:81:fc:c9:5f:97:bb:8b:ea:5c:ec:c1:44:
98:d8:5f:f7:94:12:94:fe:4b:eb:1f:4d:56:0a:49:
4c:d8:66:2f:4d:49:05:6c:f8:38:fe:e2:11:fd:59:
98:53:e6:73:64:a8:1e:7a:ad:30:ba:0c:2c:db:62:
ee:5a:c1:30:0d:e6:50:1c:8e:f8:4b:ef:27:75:a1:
70:be:de:48:e2:0c:a4:07:34:c7:93:fd:e5:4b:1a:
0a:d3:db:17:54:09:75:0a:e1:0c:a3:55:90:bf:90:
f2:2d:f3:f8:1c:87:66:b2:98:fa:bb:3f:2f:b0:0c:
d2:03:17:3d:da:96:10:4e:44:1c:24:51:a6:b3:20:
87:e7:03:e9:b8:ad:ca:49:d0:d7:9e:01:97:b3:0c:
88:24:75:ea:cb:6c:80:82:59:5b:0a:e9:cb:f0:6a:
99:34:ea:37:19:42:c3:e5:1a:34:22:b9:ee:a1:da:
94:d3:29:46:ab:e3:72:9d:d9:38:ed:4a:28:14:12:
2a:ed:d0:8b:66:20:5b:1c:dc:22:27:fd:83:72:ad:
d7:f5:8e:74:33:d9:05:53:91:fd:88:d0:1e:4c:35:
c0:9e:41:df:f5:1b:b8:ca:42:42:e5:0e:66:f8:1e:
73:6c:d7:2a:fd:7c:9a:42:bd:43:48:9f:ef:6c:94:
04:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C8:45:A3:42:B2:80:FA:6A:C2:16:2F:0F:BE:7B:1E:01:90:76:C6
X509v3 Authority Key Identifier:
keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c5:e4:1b:97:0b:45:a6:20:1c:e8:d1:33:39:14:d7:40:f1:
86:e3:e8:e2:f2:9e:ba:18:a1:0c:cd:ea:00:c3:7d:6c:ab:12:
4a:87:22:89:c1:70:e0:0d:83:5f:a3:37:9d:ef:e7:ac:a6:60:
ca:d5:bc:d2:c4:cb:05:47:c3:10:5a:83:0f:7a:ab:f0:f0:17:
57:06:43:56:4a:aa:1a:6f:f0:11:4b:7a:88:b0:25:c3:72:30:
ec:df:0b:43:66:02:0a:ec:f2:6c:9d:6d:29:54:b1:4f:24:28:
9b:64:c3:02:fa:a5:06:af:76:96:d5:66:fe:48:43:96:26:2f:
f4:a1:b5:ad:45:51:38:66:c5:f1:96:0a:f4:8e:b3:ed:9f:46:
9e:f6:f0:cb:c7:9d:94:30:f8:38:0d:e6:2f:e3:2d:b8:b9:75:
39:49:84:f2:db:3f:60:90:82:cf:94:a5:0b:ed:be:f3:12:b3:
43:eb:6d:2f:0a:6d:93:d2:81:6e:d6:0f:1a:5b:2a:ed:54:f5:
9f:9c:c8:3c:19:c9:29:89:0f:da:d2:6d:c4:8b:06:cc:45:65:
1c:ec:26:ff:f0:5e:1d:4f:40:59:27:39:81:c2:c3:e3:b7:dd:
13:a8:bf:df:3d:6c:d1:09:58:d3:f8:38:c8:5c:12:75:a4:28:
12:98:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:55:53 2026 by rpki-client