Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
File: 9On4vS-aSts8ccewsDAHr7UwPek.mft (raw, json)
Hash identifier: xLlyIKDQ98iG5SGWZzNgeu3uxcyfrW6G6DLhKUb/iMI=
Subject key identifier: 65:81:5E:69:65:F5:F7:C0:0B:C7:4A:A6:A6:A3:1B:27:67:A2:07:97
Authority key identifier: F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
Certificate issuer: /CN=f4e9f8bd2f9a4adb3c71c7b0b03007afb5303de9
Certificate serial: 01A1DEA7516F0936BC3F5245E0BABD2673C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
Manifest number: 0A
Signing time: Sun 15 Nov 2026 10:01:09 +0000
Manifest this update: Sun 15 Nov 2026 10:01:09 +0000
Manifest next update: Mon 16 Nov 2026 10:01:09 +0000
Files and hashes: 1: 9On4vS-aSts8ccewsDAHr7UwPek.crl (hash: bAyTdadW65jzyHpPm53q1i5L3LbJAdqLwzvr0JnYjYw=)
2: MGzCP-3egIZv-ryFkuQCUFDWEqs.roa (hash: bJhpD6FoorD1c1XWBALWLkhn3d9wdJmlj8XJVxONDqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:51:6f:09:36:bc:3f:52:45:e0:ba:bd:26:73:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9f8bd2f9a4adb3c71c7b0b03007afb5303de9
Validity
Not Before: Nov 15 10:01:09 2026 GMT
Not After : Nov 16 10:01:09 2026 GMT
Subject: CN=65815e6965f5f7c00bc74aa6a6a31b2767a20797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:18:ea:66:5e:61:a7:12:b3:96:87:ea:4f:a0:
88:b2:5b:aa:af:10:fc:5c:dd:d2:5d:d2:b9:40:06:
03:40:26:dd:72:ef:03:c5:ce:fd:5a:19:4d:70:4d:
ee:b1:ba:1b:a2:dd:21:9d:fb:82:87:ce:5e:a9:85:
2f:d7:23:46:db:1c:f6:0b:e5:e3:e0:ce:0d:96:ec:
1c:87:28:65:55:b6:18:f1:ed:1c:fb:a0:81:0d:8f:
cc:90:2a:93:00:aa:07:c3:dc:c4:06:6f:a1:66:67:
19:49:fe:87:04:39:fa:1e:33:54:77:d9:8b:51:bb:
6c:59:d6:86:84:cb:76:ad:55:dc:2a:dc:c8:4c:b0:
86:6e:6b:8f:d9:ef:6e:59:28:c9:a4:ac:c5:16:62:
c0:3f:a6:21:49:57:3d:15:19:14:79:2b:73:db:df:
42:7b:1a:7e:eb:7c:f3:7d:51:66:1a:70:0e:42:93:
c1:34:ce:90:93:a2:ed:24:8c:72:5d:c2:74:01:82:
9b:ff:93:23:46:31:ec:52:50:d7:4e:95:14:db:04:
f9:a0:61:23:55:59:8a:14:e6:90:9d:c7:df:5a:a2:
32:27:4e:fa:6e:17:18:2b:1c:b1:06:b6:46:5f:a5:
f6:3c:d6:72:44:42:2d:7e:cb:f0:95:dc:64:5c:04:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:5E:69:65:F5:F7:C0:0B:C7:4A:A6:A6:A3:1B:27:67:A2:07:97
X509v3 Authority Key Identifier:
keyid:F4:E9:F8:BD:2F:9A:4A:DB:3C:71:C7:B0:B0:30:07:AF:B5:30:3D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9On4vS-aSts8ccewsDAHr7UwPek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd359b-c0b4-4cf7-995d-25dab7d7713c/1/9On4vS-aSts8ccewsDAHr7UwPek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a0:b7:5d:58:ce:b5:60:14:d8:3e:7d:06:0e:22:88:e2:aa:
e6:71:71:d2:ca:b8:1f:d8:73:f5:7b:f2:54:bd:40:f9:e9:62:
2c:54:d8:4d:7a:3e:6c:1c:6e:3c:74:17:df:6e:d8:89:0d:04:
04:9d:11:90:20:a9:ba:91:7d:a9:d6:62:81:d5:b7:07:dc:48:
91:e9:e9:3a:1a:84:c0:72:24:ae:c8:14:d1:d3:82:e7:12:71:
83:2f:32:72:0c:7b:a8:74:cf:6f:c6:5c:fa:00:7e:ee:83:dd:
d9:de:ae:ba:5a:ce:19:a4:13:06:61:f9:5b:1b:2a:ce:6a:26:
b6:52:12:62:3a:70:58:1e:e1:17:c4:c1:a5:9c:d0:8f:91:7d:
82:12:35:f5:b0:d7:1e:0a:db:c7:1f:bf:74:5b:d2:7e:9c:0f:
a6:d9:18:8e:ce:4c:47:a4:09:cd:12:78:2a:5a:02:1c:67:06:
56:7f:26:c7:18:f6:73:17:ec:b7:23:87:f7:95:f7:9d:ce:5f:
a4:23:cb:63:4d:07:56:d5:a1:56:b7:4e:73:7a:db:b2:f1:6b:
c7:49:0f:14:5c:a6:24:e5:45:ed:30:0c:a1:a3:be:2a:6e:db:
66:bc:62:a8:96:74:68:93:d3:5d:b8:b5:47:b3:8e:82:20:55:
d6:be:c3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:32:26 2026 by rpki-client