Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
File: 9Oc28Njp5w8a58qhHFWez3CnKCg.mft (raw, json)
Hash identifier: FadYGbMwusMs1wacbOE3U6Dw6gWpfGw1YzfCOO8gCps=
Subject key identifier: CA:7E:53:E5:F9:87:0E:4E:8E:E7:30:DF:C3:0C:29:D9:D7:DB:16:41
Authority key identifier: F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
Certificate issuer: /CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Certificate serial: 01A0E7AF2E6988C627736D6AF2EFBECEB68F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
Manifest number: 1A77
Signing time: Mon 28 Sep 2026 11:03:32 +0000
Manifest this update: Mon 28 Sep 2026 11:03:32 +0000
Manifest next update: Tue 29 Sep 2026 11:03:32 +0000
Files and hashes: 1: 9Oc28Njp5w8a58qhHFWez3CnKCg.crl (hash: 6ymzRYf1HAbpCBrO2Vi1+1jH0vegRRDMttEdc2J9jME=)
2: M3wRggjCUsGg3wdEN0GVZSY7UNs.roa (hash: syu83Vs+aGOZec7SpDVJCQQPJPYaj6sFS8IZVudbAxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:2e:69:88:c6:27:73:6d:6a:f2:ef:be:ce:b6:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e736f0d8e9e70f1ae7caa11c559ecf70a72828
Validity
Not Before: Sep 28 11:03:32 2026 GMT
Not After : Sep 29 11:03:32 2026 GMT
Subject: CN=ca7e53e5f9870e4e8ee730dfc30c29d9d7db1641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:67:1d:34:33:c2:5a:66:27:9e:7c:af:ab:
7f:b7:64:c6:2d:3e:1d:b0:04:5f:e4:d0:43:e8:f6:
cb:cb:ad:a9:b6:9f:b0:c9:aa:72:9d:4b:0a:67:28:
1f:54:bb:68:d1:f0:0d:28:f1:bf:38:b3:b4:59:9b:
df:88:f2:4f:c8:60:2d:ed:d3:55:a6:97:75:39:de:
68:53:78:ff:28:c0:0e:c4:6a:53:7f:be:e1:73:0b:
ff:29:c0:54:57:4e:25:4a:fe:84:92:d8:b6:12:f7:
95:6e:b6:63:ea:8b:ff:ca:c9:c5:f6:b4:1c:2e:d9:
e3:2a:8d:56:7c:03:09:9a:8a:92:f0:29:0f:75:c9:
20:ea:4b:79:1b:86:d2:f8:3f:ef:bc:a4:38:f3:2f:
fe:78:3b:a0:66:83:50:b5:0a:15:af:f0:ad:6a:d9:
a5:6a:eb:9b:3e:d8:8a:fa:c6:50:b5:b2:3c:3d:6b:
40:32:b8:28:c3:b1:6c:29:ef:d0:15:18:c6:ce:60:
af:ba:b3:ef:a4:e3:04:b2:cd:82:3e:e8:52:78:48:
dd:1f:93:aa:d0:7c:3a:dc:39:c9:ce:b2:4b:19:2e:
fb:eb:83:f7:5d:cf:38:3d:91:51:50:bc:57:65:3f:
a6:de:f6:2b:18:0e:21:ee:86:f0:c2:9c:50:7e:18:
ed:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7E:53:E5:F9:87:0E:4E:8E:E7:30:DF:C3:0C:29:D9:D7:DB:16:41
X509v3 Authority Key Identifier:
keyid:F4:E7:36:F0:D8:E9:E7:0F:1A:E7:CA:A1:1C:55:9E:CF:70:A7:28:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Oc28Njp5w8a58qhHFWez3CnKCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3e2a73-f497-49cc-b420-d7ab514d4ee2/1/9Oc28Njp5w8a58qhHFWez3CnKCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:32:40:62:8a:75:08:02:0d:5f:b9:02:68:38:49:6b:80:cb:
11:34:4d:04:e9:d1:c5:bb:a0:3a:e1:b0:84:71:3f:5a:45:3e:
21:68:a5:ed:25:24:b5:97:1e:ce:b1:a6:b9:bd:dc:b2:56:29:
ed:8a:65:6b:40:0b:8e:4d:db:af:83:b4:84:3b:dd:a8:8f:f1:
a0:ea:13:0e:6e:1b:d2:40:72:64:63:c9:12:a1:59:3b:80:f6:
47:97:8d:1a:a7:3a:6a:26:5a:91:4d:72:44:0a:2f:62:84:23:
f9:3c:48:f0:52:ae:68:1d:3e:38:ed:6e:b8:ef:ef:00:03:18:
29:05:97:49:0f:11:1f:55:61:ec:1f:2d:f7:fd:40:4c:0b:9d:
ec:fe:3f:3a:ac:26:43:c9:49:9c:48:1c:68:12:ed:66:28:87:
6a:6e:2e:76:bd:d7:01:71:ca:c5:64:0e:3e:99:87:45:e0:c4:
ac:22:99:aa:9e:f6:76:5e:23:08:b5:14:5e:fd:85:97:f2:f3:
a4:44:ed:e6:49:8d:7d:54:e1:f0:46:1a:10:2f:52:d4:6c:0b:
87:31:e5:85:ae:ba:f5:c8:07:dc:84:53:18:24:26:80:a1:a6:
51:57:6a:cf:f4:7b:a4:85:ab:4e:51:89:cd:ee:cf:1b:c9:7b:
54:30:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:47:47 2026 by rpki-client