Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
File: 9oXcPBRGS4xAgXUl2aJUtO06ijo.mft (raw, json)
Hash identifier: /nLNLjWoT8BapvjnNz59lm1G+NN1EfquYhR74BCV7ek=
Subject key identifier: 82:4D:54:80:C3:A2:12:17:3D:A2:ED:54:68:D5:9D:9C:83:64:B8:F0
Authority key identifier: F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
Certificate issuer: /CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Certificate serial: 01A0C66AFA8CEF32E1656FDBA053D574B66F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
Manifest number: 04C2
Signing time: Tue 22 Sep 2026 00:01:34 +0000
Manifest this update: Tue 22 Sep 2026 00:01:34 +0000
Manifest next update: Wed 23 Sep 2026 00:01:34 +0000
Files and hashes: 1: 9oXcPBRGS4xAgXUl2aJUtO06ijo.crl (hash: rquEWu8aCfjCaSEtwXA2uyBp8EGN6KB28BjXqYb7dD8=)
2: HSRkhqaXY-J-szKJGb322CNozlI.roa (hash: AvBoZFMkLxLlkN5UUWxsTcEYLDw2vSTiZXKpkSzpzYg=)
3: _KbUElUf-kiJtWzmpDSNHdJCbc0.roa (hash: uVsgENyH2wJmt2BQoXK1ivNHMgsy0rMlEbl/JQCYCdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:fa:8c:ef:32:e1:65:6f:db:a0:53:d5:74:b6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f685dc3c14464b8c40817525d9a254b4ed3a8a3a
Validity
Not Before: Sep 22 00:01:34 2026 GMT
Not After : Sep 23 00:01:34 2026 GMT
Subject: CN=824d5480c3a212173da2ed5468d59d9c8364b8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ff:9d:d6:13:0b:c3:4e:dc:3c:78:04:2a:6c:
b7:19:bf:49:02:50:65:1e:98:58:1a:e2:c6:1e:06:
d2:24:7d:e4:53:6c:61:40:76:27:77:37:40:1b:2e:
1d:f8:85:53:ec:93:1f:20:be:de:41:e8:72:99:9c:
a7:c4:34:63:59:16:4f:45:07:15:b0:ce:7d:15:b2:
ae:48:e6:74:ec:9c:b9:3a:a5:ca:b0:0a:58:38:4d:
db:25:43:ab:20:39:be:ce:8d:ea:7a:4f:ce:66:97:
ce:00:44:d5:e4:8d:14:04:57:c3:44:5a:36:d2:ad:
a4:58:2e:af:c4:5a:42:2e:ce:51:09:87:89:88:1e:
fb:6c:63:7e:71:29:ac:fe:ae:b8:ef:2a:6f:2c:ab:
e5:05:3f:ac:6f:b2:a3:25:d7:3f:26:48:9d:77:44:
6e:8c:1f:e9:d3:d7:f8:e1:65:d2:7d:5f:f9:0e:18:
75:d6:2b:4b:31:8c:05:01:fe:df:4b:8d:61:8e:98:
0d:c4:5b:39:a3:90:36:fe:19:93:92:e0:81:36:53:
17:87:2e:da:55:ad:99:90:62:ed:d9:f9:eb:10:be:
e3:08:d5:01:c0:96:2c:10:d7:f0:21:02:3e:52:64:
71:21:18:d6:89:62:c6:67:5a:d0:75:80:f4:d0:01:
e9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:54:80:C3:A2:12:17:3D:A2:ED:54:68:D5:9D:9C:83:64:B8:F0
X509v3 Authority Key Identifier:
keyid:F6:85:DC:3C:14:46:4B:8C:40:81:75:25:D9:A2:54:B4:ED:3A:8A:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9oXcPBRGS4xAgXUl2aJUtO06ijo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/204275-a368-431b-8ff6-eb67f8e632b8/1/9oXcPBRGS4xAgXUl2aJUtO06ijo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:80:62:65:75:a9:c3:a8:0f:6c:ce:96:f5:3d:97:08:c8:2f:
ca:7b:f6:cb:2f:19:31:29:f2:44:db:b6:0e:9f:ff:c6:6c:e8:
21:74:18:91:46:4c:28:ca:7a:ce:70:cf:0f:ca:a0:68:a9:da:
86:75:47:37:d4:49:a4:98:51:3e:dd:92:28:a6:f8:df:e4:3f:
b2:19:64:54:4e:2c:ac:97:68:07:61:c1:34:f1:1d:7b:0d:66:
5f:87:c6:b4:1c:12:25:cd:1c:ab:47:b7:31:ff:05:12:2d:66:
cc:ef:c8:76:a0:e4:eb:05:78:cc:50:82:42:bf:c6:38:89:61:
9b:a3:3e:fe:74:2b:dc:a9:2e:5f:7f:8d:24:40:01:da:a5:f3:
15:da:fa:98:62:cf:b4:42:70:bd:9f:e3:e7:9a:ba:95:6d:82:
ba:88:3e:a0:bc:a9:cb:1a:d9:b3:8d:4f:9c:e8:f5:7b:77:1e:
27:45:6e:d4:c8:04:b0:98:f2:e8:5e:8e:9a:16:f1:28:e4:e4:
51:d9:09:84:77:51:ba:48:40:fc:53:e1:05:67:da:82:f4:3f:
48:e3:d3:ae:61:e6:a8:59:cc:2c:3c:97:43:f2:b1:ec:d9:72:
5c:19:da:d2:c8:45:d7:49:01:3a:c4:10:47:be:8d:fd:73:3b:
84:5e:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:21:14 2026 by rpki-client