Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
File: 9OobD89CmqOLUtkXHOfJI8qKrIE.mft (raw, json)
Hash identifier: vx00WsyV3WS5ZcdIa579Rdzwe5yhTjquWXncUSVjcbY=
Subject key identifier: 8C:DE:35:E9:B0:A7:B6:C6:93:18:44:A6:E8:31:DC:CC:CA:D8:6F:75
Authority key identifier: F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
Certificate issuer: /CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Certificate serial: 01A0C66A5ED0D0FBA19DB2A457CCD81B067F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:00:54 +0000
Manifest this update: Tue 22 Sep 2026 00:00:54 +0000
Manifest next update: Wed 23 Sep 2026 00:00:54 +0000
Files and hashes: 1: 1-3zjSgmPbe5tSIM8kLlfo3SeJP4.roa (hash: u4WfkbMiSbJkmrL6GA8qH3vMspeYSQot+mOiu9K3y4w=)
2: 9OobD89CmqOLUtkXHOfJI8qKrIE.crl (hash: dAAB1Zf6TyaziHgszIBvWw1kvWodwT+AldkHZK7t1bY=)
3: joV_6cAQSK_je5KrB8bVTeK2szE.roa (hash: fk94vtPfOafs8CuY1ZMt1P+v4ADiKe8HjDC4WwhIxvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:5e:d0:d0:fb:a1:9d:b2:a4:57:cc:d8:1b:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ea1b0fcf429aa38b52d9171ce7c923ca8aac81
Validity
Not Before: Sep 22 00:00:54 2026 GMT
Not After : Sep 23 00:00:54 2026 GMT
Subject: CN=8cde35e9b0a7b6c6931844a6e831dccccad86f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2b:49:31:dc:87:84:cf:01:02:70:a4:7f:98:
d3:4c:5c:13:5c:78:7e:55:f9:05:5b:45:7f:5f:e5:
4f:38:a5:b7:e1:38:e4:25:c7:97:3f:e4:65:d2:e4:
b1:3f:60:56:9b:d3:37:96:09:d9:21:5c:37:2c:f3:
2c:ea:22:2d:1c:b3:3b:3d:9b:bb:68:96:4a:4e:1f:
ca:10:88:02:96:76:ed:1e:ec:ce:eb:a8:69:48:06:
c6:e3:a0:23:ee:a3:f7:ff:4b:c5:a7:f2:17:ce:ad:
9a:4b:b2:0a:de:a0:bd:bb:d8:d8:d9:d7:4a:18:39:
80:79:d9:fc:ff:52:0a:ea:9a:48:41:16:d4:4b:21:
9a:c8:fb:f6:ec:12:86:ed:1a:c1:5d:e7:0f:93:a3:
b1:23:eb:b7:56:bb:27:ee:3f:98:eb:9e:97:df:2e:
7f:50:5e:ac:56:a9:1f:2c:bd:40:93:f7:28:cf:8e:
04:7b:c9:38:15:fa:c0:93:c3:79:44:60:fb:ea:8f:
c4:df:a2:ff:82:c6:8f:da:dd:ee:10:f6:b1:82:26:
34:3b:1e:88:97:dd:a7:3e:0e:19:a3:18:e4:76:7d:
6e:f0:76:75:7a:b4:d4:66:46:04:9b:45:f7:07:6e:
d6:e4:c8:5e:16:8b:4b:10:af:5a:9a:b6:27:98:82:
3d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DE:35:E9:B0:A7:B6:C6:93:18:44:A6:E8:31:DC:CC:CA:D8:6F:75
X509v3 Authority Key Identifier:
keyid:F4:EA:1B:0F:CF:42:9A:A3:8B:52:D9:17:1C:E7:C9:23:CA:8A:AC:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OobD89CmqOLUtkXHOfJI8qKrIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/9OobD89CmqOLUtkXHOfJI8qKrIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f0:6e:4c:4a:4f:64:d3:4a:d7:08:20:1d:2f:24:92:fb:b9:
ae:3a:80:6e:68:ab:a4:c1:16:19:c7:77:56:15:dd:f8:36:02:
8a:81:b0:cb:6e:63:82:a8:90:a4:59:03:30:43:75:e5:8c:2d:
04:92:32:b4:d7:51:4d:4c:c8:7f:43:69:e4:9c:23:b9:48:bf:
13:92:eb:b1:81:e2:7f:84:3e:40:f0:dc:2c:b0:6f:f5:f6:d8:
11:04:49:04:e6:21:fb:54:a4:ac:e4:bc:6c:35:3d:9e:3b:01:
1f:63:a8:a8:3f:d0:4e:91:3b:68:20:a5:f6:71:2f:69:6f:3a:
2d:6f:30:e1:84:74:bc:6d:a5:e2:9c:48:84:c1:61:42:61:dc:
f6:2d:7f:90:48:aa:65:a8:c2:d8:07:49:f3:9d:b6:55:1e:b3:
f5:3c:d4:e8:ca:d6:1d:85:fc:90:a6:2d:61:cc:59:30:ce:8f:
83:eb:38:99:61:ed:e8:b8:68:ba:62:4b:07:6c:d7:7f:48:41:
5a:be:5c:f3:25:05:9f:f6:38:9f:c7:3d:66:31:3f:ee:77:c8:
81:c4:fd:38:76:96:49:74:35:0d:6c:ac:49:58:32:e8:a7:64:
7c:39:e9:cd:c1:9c:3e:bd:36:3a:20:a2:2f:9f:76:99:5f:fd:
91:60:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:50:25 2026 by rpki-client