Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: IVcI/RtcsTt3bDp2T4y6oI4S3MYPcBjtEvBKx1OftGA=
Subject key identifier: 0C:0F:F6:11:61:98:C6:BC:DF:A2:CE:5E:86:55:E3:8D:30:0D:19:22
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 01A0C39FDEE94195E1C4D87A43B97C435438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 02EB
Signing time: Mon 21 Sep 2026 11:00:29 +0000
Manifest this update: Mon 21 Sep 2026 11:00:29 +0000
Manifest next update: Tue 22 Sep 2026 11:00:29 +0000
Files and hashes: 1: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
2: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: VhmIB7dOLf4MR1OhiT5aVi89G6jTiYvJ30GIeqgCiCs=)
3: lziFHs2A2VUAzP4OBhEcFvF0OKo.asa (hash: UdHnnZIMARPO778i7Gu0UeetalCkGAD0yUjUjL33whg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:de:e9:41:95:e1:c4:d8:7a:43:b9:7c:43:54:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Sep 21 11:00:29 2026 GMT
Not After : Sep 22 11:00:29 2026 GMT
Subject: CN=0c0ff6116198c6bcdfa2ce5e8655e38d300d1922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:4e:46:e5:a3:c9:c6:5e:bd:09:bc:00:96:
18:4a:a5:03:31:ae:d9:a0:57:0e:3e:cf:ba:43:d3:
40:97:b7:87:bf:06:30:82:71:cb:c3:f6:82:d0:d3:
12:31:b7:ff:52:18:c7:20:cf:58:1f:ad:ea:16:4d:
64:3c:7b:0b:f5:2a:e3:7e:00:ea:82:ee:43:42:64:
55:16:ea:4a:5c:72:b4:8c:bd:37:12:a2:77:be:6c:
4e:73:5e:d0:15:ce:dc:71:94:76:45:3c:9f:c7:9f:
ae:be:b8:6a:8b:ab:8f:df:0b:f2:ad:b5:b4:94:2b:
c3:af:47:cf:8d:c1:ed:ce:de:4e:89:ca:38:f3:94:
c2:51:8d:dd:f3:74:6c:31:ea:b1:4d:0a:94:2d:04:
ec:a9:3a:9d:0f:29:ce:f0:1e:88:e4:09:92:01:63:
a5:ea:a8:e0:f5:48:00:52:96:f4:7d:68:4b:e9:5e:
49:3c:15:9b:00:62:9e:60:9d:0a:fd:28:80:c8:1a:
a3:8c:0f:7a:1b:71:6a:cc:15:de:7b:b7:b4:77:10:
56:8d:f9:17:9f:f9:70:49:3e:87:c9:df:0e:b1:f1:
0c:50:43:a4:e4:86:d9:c9:54:13:35:d5:c1:2d:45:
7a:b3:9a:74:37:5b:60:62:dd:32:0f:9b:3f:d1:5f:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:F6:11:61:98:C6:BC:DF:A2:CE:5E:86:55:E3:8D:30:0D:19:22
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:85:17:87:ca:c3:fc:d3:2a:44:81:72:db:42:2c:ce:00:6f:
5e:0d:23:c8:68:f7:24:9b:58:f0:1f:cf:de:d1:dc:dd:16:b8:
e1:b3:d7:3e:32:28:8a:5a:a8:a3:42:16:83:93:73:2a:64:31:
a8:7f:c6:61:01:5a:b5:aa:78:ea:37:b3:f9:1c:b2:1a:8f:a2:
cd:25:b8:4b:5a:86:5d:d9:8e:dd:86:f4:ba:17:35:54:9b:cc:
7f:c4:fd:c7:99:d2:c1:09:3f:be:78:92:e9:ea:6d:33:3f:1c:
c7:c3:ab:22:79:83:51:d7:f7:c7:54:1a:99:a6:ba:0d:b6:fc:
e3:37:1e:2f:8c:9c:76:75:38:41:a2:40:24:0a:00:b9:c8:17:
97:91:69:3d:44:76:54:b5:a5:7b:f2:5c:65:7b:b2:26:7c:09:
1a:8b:35:83:80:9d:6b:c3:ac:a5:83:41:e4:56:c3:41:1a:b3:
c4:df:fd:ca:7b:e8:f2:b6:e4:af:d3:4b:2f:a0:e3:2b:f1:69:
8b:c3:6a:64:7f:9c:a7:98:c9:b9:54:b1:62:78:b2:02:5c:ff:
34:9c:0f:92:38:17:1e:b0:79:dd:09:ff:de:2e:84:61:da:f1:
26:9e:77:a3:3a:3b:d9:f8:11:f8:5d:6b:58:38:a4:3d:36:f3:
d0:af:d8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:29:05 2026 by rpki-client