Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File: 9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier: UGh5UOTzpVy09FdfkjkN8YPjhOvxa82PN1fpGkiNMAE=
Subject key identifier: EC:E9:12:DF:33:3E:A7:4B:38:8D:65:24:76:96:AC:14:97:81:89:62
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 01A0C58E7FC3108DDCA435C443BE0C939D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number: 01A3
Signing time: Mon 21 Sep 2026 20:00:45 +0000
Manifest this update: Mon 21 Sep 2026 20:00:45 +0000
Manifest next update: Tue 22 Sep 2026 20:00:45 +0000
Files and hashes: 1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: Zsn3NZMFX5lofHj67w09Gu6mI6OQ49h163GQj8d+ZLM=)
2: LLDfBKtlCeW3eI7057StcwRGUvc.asa (hash: FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=)
3: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
4: YIz6jgPy4T57-v5Y0lRVw2yHO-g.roa (hash: y3YrgdUaOAbn2OQqch9+TXJZirScPNyDivnJKIFz94k=)
5: gxhNdT76LUOawd0GerJXEnAbQVU.roa (hash: ViECi6teUjpoYqtJK7rD4xR1mS6VHcPwXBdiN9l6wxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:7f:c3:10:8d:dc:a4:35:c4:43:be:0c:93:9d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: Sep 21 20:00:45 2026 GMT
Not After : Sep 22 20:00:45 2026 GMT
Subject: CN=ece912df333ea74b388d65247696ac1497818962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:c4:fb:00:1c:b6:1d:65:75:50:e4:3f:fa:
a0:b5:5e:aa:e2:02:9f:55:eb:15:b0:68:bf:f7:b0:
9f:b7:66:e7:1d:86:54:c0:a2:c8:bb:c9:df:a7:34:
1c:53:8c:b1:4f:7d:f4:17:96:fa:2b:23:e6:4c:3e:
04:84:bb:95:ea:0e:2d:87:05:7a:ad:85:72:19:79:
16:f2:09:8a:84:bb:2f:cf:21:9f:4f:55:82:76:36:
9e:48:ea:c7:4c:10:9c:6d:81:c2:7a:61:ba:58:49:
bb:24:67:1b:86:c6:79:0d:4a:51:6d:28:cc:62:7c:
b7:e3:4f:67:94:cd:84:4f:81:1c:9b:7c:4d:2e:fa:
5b:01:56:aa:72:c9:c0:9b:8f:1f:9a:78:28:b1:30:
76:bc:3d:ce:11:c2:80:68:3d:10:c7:e7:b3:63:06:
78:bb:e7:05:22:d7:27:94:f5:32:44:8b:c5:3e:be:
ca:6c:3c:4d:fc:3d:f1:7c:3d:f4:ec:82:de:ff:82:
58:3c:0a:b3:b8:10:49:59:e5:f7:2a:0c:ff:99:ef:
d5:c9:7a:f5:d6:49:f8:0a:ff:6d:77:f2:d9:ec:d9:
2b:1c:66:f2:8d:8f:a5:bb:0c:70:95:45:ae:fb:3d:
b4:b5:ab:1e:4a:e8:76:3f:bd:9d:cf:d0:5b:55:9b:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E9:12:DF:33:3E:A7:4B:38:8D:65:24:76:96:AC:14:97:81:89:62
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c7:d9:8d:d0:99:0f:49:cd:00:a3:67:ad:83:a9:66:d3:98:
5e:15:12:c6:81:02:6e:ff:f3:9b:de:11:2e:d7:df:85:53:eb:
12:b0:e6:b4:4d:f0:88:5c:79:07:b5:03:c6:2f:6a:99:22:a0:
db:ad:50:d9:6d:84:fb:e7:5b:9b:4b:1a:35:12:89:ac:da:d8:
19:92:62:2b:03:cf:8f:ae:aa:04:d6:69:1b:b4:0d:4f:a8:b7:
14:a3:da:41:77:27:0c:5e:7e:fa:ae:c0:f3:19:7e:e4:55:40:
69:6f:c1:e3:f5:f7:d9:3d:77:70:fc:10:fd:09:50:4f:55:39:
e8:b7:fb:0b:77:33:e3:18:c2:ed:06:c4:a5:36:21:bc:c2:58:
4a:b1:fb:58:66:ac:94:ae:4c:09:e5:9a:67:a0:fe:01:e7:bb:
f0:71:1c:67:63:9e:d6:ec:f5:fa:50:d9:65:1c:b4:d3:2c:f2:
0d:7e:f7:86:54:06:44:49:04:19:39:31:e9:17:8e:08:f1:b8:
0d:5e:d0:99:66:7a:4c:65:e0:0e:17:76:c6:4d:76:03:af:bb:
c1:2d:0d:9c:5c:82:fc:5a:82:5e:ba:0f:b8:29:3b:d3:fc:d0:
80:d3:3d:ce:b7:ba:ac:45:a1:28:12:7f:39:34:ce:43:89:6b:
96:bb:f0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:15:44 2026 by rpki-client