Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: HN081P4bfOzPPFs9oWA/HTkRK7mQ+msIzoD1hlTuhsk=
Subject key identifier: C8:52:98:BD:9F:AA:16:A3:6F:F4:F2:C6:28:6C:67:62:1D:FF:32:E3
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 01A1DEDEA90DACB14EE1093AF501357FDEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1AF6
Signing time: Sun 15 Nov 2026 11:01:36 +0000
Manifest this update: Sun 15 Nov 2026 11:01:36 +0000
Manifest next update: Mon 16 Nov 2026 11:01:36 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: GxNN9/OK2NpI6W2l0N6dvEGEKdzqpNwm+imz2KcL+A8=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:a9:0d:ac:b1:4e:e1:09:3a:f5:01:35:7f:de:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Nov 15 11:01:36 2026 GMT
Not After : Nov 16 11:01:36 2026 GMT
Subject: CN=c85298bd9faa16a36ff4f2c6286c67621dff32e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:f5:ad:06:de:f7:82:c0:7f:7c:7f:7d:76:
3a:20:db:b8:40:30:2f:68:43:3b:9b:a6:e8:c6:60:
2d:4e:d7:6c:32:ba:23:45:47:bc:72:28:60:26:9e:
0b:1e:1d:f1:16:ab:70:16:8f:c2:32:84:39:e9:84:
fe:5b:b6:30:c3:5a:4b:12:d9:d6:67:fb:88:f7:fd:
40:40:44:5f:52:fb:26:20:0b:ab:a2:a6:d1:fc:a7:
23:e2:05:46:68:5d:38:31:41:e5:d6:c2:2f:a2:33:
81:76:95:37:6c:4d:52:e7:8d:ee:21:f6:8c:3a:b1:
99:2a:6b:af:27:02:37:0b:c0:da:a3:d5:26:c2:3c:
0b:e6:6b:a4:42:ca:c7:66:f8:f2:ce:7c:9b:7c:c5:
61:5c:e9:b7:66:26:13:fb:95:a7:4c:b3:4f:8b:a7:
fb:f1:a2:66:3b:d9:fe:19:92:5b:5f:8f:2f:0c:4a:
52:b6:c7:01:62:98:ca:94:75:70:cf:19:80:47:b4:
32:2f:1c:92:a6:69:e0:93:cd:4e:70:2a:d4:bb:3a:
5f:16:6a:f9:ab:3e:a2:00:48:1a:9d:e1:94:ba:de:
65:04:ef:15:af:a3:8f:d0:73:98:3e:e8:2b:54:26:
63:08:3e:87:c8:85:53:57:67:20:2d:32:9b:07:b5:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:98:BD:9F:AA:16:A3:6F:F4:F2:C6:28:6C:67:62:1D:FF:32:E3
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a1:21:96:cb:f0:b6:e4:b6:69:a6:6c:4e:6d:76:0c:e7:81:
82:89:75:2b:5d:e0:63:2d:fa:0d:00:ea:d8:a4:73:2d:cd:fa:
24:4a:80:77:2b:f8:ea:31:a7:17:cc:a1:34:da:eb:01:8f:70:
62:6f:f9:b7:2a:d1:07:e6:01:35:dc:0d:b9:bc:90:64:76:21:
49:42:b0:6a:23:af:9a:31:30:06:ec:f4:f1:20:57:53:74:40:
e6:80:95:ac:8b:05:cc:3a:c7:73:5d:c0:f3:85:db:6b:66:bd:
01:12:6b:73:8d:b5:35:d9:eb:d8:96:b4:92:47:56:aa:ae:0c:
f4:5c:08:b6:7c:11:e3:93:4e:35:97:76:3e:ad:f4:48:53:d1:
eb:56:49:38:99:06:2b:89:ed:91:9f:7b:dd:93:74:84:d3:29:
3b:60:02:06:f5:7f:5b:04:00:09:31:f9:76:c6:23:ff:54:2b:
5a:7b:fe:03:3f:d1:be:c0:c4:28:cc:c5:59:18:1b:97:54:d3:
06:17:7b:bd:f7:79:da:de:c3:5a:90:e4:f0:05:8f:14:e1:aa:
c1:12:81:23:9c:f7:59:b6:98:51:e6:50:d4:0a:42:00:69:f2:
4b:8b:72:67:37:5d:8e:37:2a:11:cd:e5:8b:dd:03:f4:2d:13:
8b:88:ff:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3qkNrLFO4Qk69QE1f97JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw
ODkwNDMwHhcNMjYxMTE1MTEwMTM2WhcNMjYxMTE2MTEwMTM2WjAzMTEwLwYDVQQD
EyhjODUyOThiZDlmYWExNmEzNmZmNGYyYzYyODZjNjc2MjFkZmYzMmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbT1rQbe94LAf3x/fXY6INu4QDAv
aEM7m6boxmAtTtdsMrojRUe8cihgJp4LHh3xFqtwFo/CMoQ56YT+W7Yww1pLEtnW
Z/uI9/1AQERfUvsmIAuroqbR/Kcj4gVGaF04MUHl1sIvojOBdpU3bE1S543uIfaM
OrGZKmuvJwI3C8Dao9UmwjwL5mukQsrHZvjyznybfMVhXOm3ZiYT+5WnTLNPi6f7
8aJmO9n+GZJbX48vDEpStscBYpjKlHVwzxmAR7QyLxySpmngk81OcCrUuzpfFmr5
qz6iAEganeGUut5lBO8Vr6OP0HOYPugrVCZjCD6HyIVTV2cgLTKbB7UqlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhSmL2fqhajb/TyxihsZ2Id/zLjMB8GA1UdIwQY
MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt
N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0
LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6Ehlsvw
tuS2aaZsTm12DOeBgol1K13gYy36DQDq2KRzLc36JEqAdyv46jGnF8yhNNrrAY9w
Ym/5tyrRB+YBNdwNubyQZHYhSUKwaiOvmjEwBuz08SBXU3RA5oCVrIsFzDrHc13A
84Xba2a9ARJrc421Ndnr2Ja0kkdWqq4M9FwItnwR45NONZd2Pq30SFPR61ZJOJkG
K4ntkZ973ZN0hNMpO2ACBvV/WwQACTH5dsYj/1QrWnv+Az/RvsDEKMzFWRgbl1TT
Bhd7vfd52t7DWpDk8AWPFOGqwRKBI5z3WbaYUeZQ1ApCAGnyS4tyZzddjjcqEc3l
i90D9C0Ti4j/Rg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:58:59 2026 by rpki-client