Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: X6G7FF+uwi8Fm1C0sCTDzP64rnKV1fT4KOc7pYTBkxw=
Subject key identifier: 00:BC:34:F4:01:49:73:0B:09:E5:99:55:B7:D6:51:BD:71:6A:AA:66
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01A0C4E9FDCDA2BEB6AC0C49EDFE4F5DB490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 17:01:04 +0000
Manifest this update: Mon 21 Sep 2026 17:01:04 +0000
Manifest next update: Tue 22 Sep 2026 17:01:04 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: uxYERnOshMxtb0M8NvQ5Hi47xAdzGZUpiYLl86oLco8=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:fd:cd:a2:be:b6:ac:0c:49:ed:fe:4f:5d:b4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Sep 21 17:01:04 2026 GMT
Not After : Sep 22 17:01:04 2026 GMT
Subject: CN=00bc34f40149730b09e59955b7d651bd716aaa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:bc:11:ef:79:6d:47:01:91:a0:d5:5e:ae:
76:d9:ab:46:1a:6c:4c:e2:8c:dd:9c:6c:1b:83:54:
77:d7:88:1b:ac:af:27:fa:46:8f:50:29:c5:8f:f1:
16:ed:fb:38:5f:18:8b:52:e7:e3:22:f6:26:e6:1d:
e2:e2:4b:cd:84:8c:4c:74:44:c8:e8:9d:9a:bb:f2:
93:74:82:f3:26:d7:c6:f5:a3:8e:e5:8e:bc:80:6d:
a6:0e:08:1d:06:dc:19:ff:6f:db:ee:10:8e:15:f8:
13:d2:40:8f:e9:38:02:14:89:cb:f8:84:d0:ad:bf:
bc:e7:6c:cb:98:48:69:68:21:e2:b2:5e:59:79:bc:
2e:97:c2:e1:65:67:23:71:de:3c:59:ee:00:58:3d:
7f:d3:41:52:d2:2d:ed:c1:6f:03:16:2c:ef:d7:10:
38:c5:33:5b:f4:69:80:11:ef:0d:aa:55:26:7b:b9:
21:03:18:12:c5:4e:83:6c:4d:ee:50:81:c0:4c:26:
e4:6c:11:2e:67:41:7c:6e:b6:74:07:58:5c:bb:f3:
60:56:3f:e8:85:6f:34:21:72:88:87:94:ac:8a:5f:
c0:12:8c:09:de:8c:06:15:eb:6c:5e:ba:04:7a:13:
ee:66:40:d4:4e:bf:e2:11:6b:41:c3:bc:cb:8f:66:
62:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BC:34:F4:01:49:73:0B:09:E5:99:55:B7:D6:51:BD:71:6A:AA:66
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8d:74:44:69:f3:2b:46:a9:98:ff:ab:d0:01:87:7f:62:2e:
60:55:01:08:ff:f9:9f:6d:fc:1f:c0:b8:e8:c1:30:31:61:19:
9f:36:1e:71:2e:8c:e0:f3:08:84:95:b6:7a:63:b2:ee:68:d6:
43:79:48:61:e8:40:c8:9c:58:6f:24:cc:65:a5:67:7f:3e:69:
a8:2d:9b:f0:38:24:a7:e4:de:a6:73:d4:80:d8:3d:f1:74:16:
7d:aa:17:aa:b3:5d:b2:7b:c3:36:54:b4:33:c4:1a:ed:81:88:
8d:21:d3:3e:61:e6:ab:1c:16:31:40:21:6a:51:77:4c:32:a2:
46:1a:c8:ba:9b:e6:7e:50:90:ca:5c:66:b4:b9:96:f1:25:cb:
b8:dc:65:6a:3c:f2:71:db:1b:ae:94:b0:b8:97:d0:60:a9:cc:
f5:a5:c8:24:0d:ca:8a:2e:de:88:47:63:4f:86:76:c0:b6:d9:
31:3a:20:e9:a4:b9:04:d2:2a:b9:eb:b8:1a:08:4f:f7:07:46:
97:59:6e:aa:27:fa:57:af:5e:c1:05:e5:d3:01:74:43:ac:59:
41:96:e9:ba:31:dc:75:c9:bd:93:b4:4f:d0:76:b6:e8:dd:6b:
e3:16:43:cc:c5:57:9a:e6:42:33:36:ca:f6:68:96:ab:6b:2d:
ca:da:e2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:50:36 2026 by rpki-client