
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File: 9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier: NiG2i6uMT+UnP3RnhDIkZrjBNEcOtMXdabDDYncPvU8=
Subject key identifier: 0B:52:23:87:99:97:81:8B:F0:C9:B5:8E:15:09:0C:72:E2:B9:C8:CE
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer: /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial: 01A13748CDE179F7E99DEC14160F0F124629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number: 02A1
Signing time: Tue 13 Oct 2026 22:01:20 +0000
Manifest this update: Tue 13 Oct 2026 22:01:20 +0000
Manifest next update: Wed 14 Oct 2026 22:01:20 +0000
Files and hashes: 1: 1e5gN7A5IMLAfWh5okyUEY4gzTs.roa (hash: YcxcWdqXrpjTgUSpqzxnLLj/efKoZUVfv7p5P2dPWuE=)
2: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: 1Bx3cihEUVqg4qw+M6mMpUbeigMCd0FsTOl05wn8yZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:cd:e1:79:f7:e9:9d:ec:14:16:0f:0f:12:46:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Validity
Not Before: Oct 13 22:01:20 2026 GMT
Not After : Oct 14 22:01:20 2026 GMT
Subject: CN=0b5223879997818bf0c9b58e15090c72e2b9c8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:b6:c7:c5:7d:1c:84:df:1c:c6:cd:49:e0:
a4:cd:d9:9a:87:28:f5:23:a9:36:14:50:e1:2e:5c:
84:34:f5:22:69:ac:cb:92:33:ce:ba:9f:70:c0:0d:
5e:e3:09:b6:79:d8:50:50:81:c8:f7:a0:f2:7d:56:
db:e8:f9:41:6f:96:6f:7c:e0:e2:9f:a7:b7:36:72:
d9:72:44:30:43:1d:82:04:03:a2:24:30:1e:06:89:
cf:e9:f7:fb:c2:32:f6:a4:fa:6b:f5:0e:d5:a4:e1:
29:0f:2b:53:97:5b:1b:d9:70:e5:2f:e4:e2:63:a0:
83:f1:3d:fc:71:77:a9:6c:78:71:4b:fe:54:c0:b3:
0d:15:8f:15:29:f7:b4:48:5d:6d:88:e8:a3:b8:5d:
60:b6:aa:81:d4:72:ef:1a:00:2b:ff:a8:e9:1a:3e:
6b:99:72:ad:de:08:f5:e5:d2:8f:27:e1:d4:a5:4b:
e0:92:ea:12:ee:c6:e3:a9:19:75:6c:31:09:40:04:
bb:2a:cf:95:21:15:be:15:8a:8f:74:86:0a:29:ab:
ba:10:d7:ab:cf:3e:d7:40:01:41:ee:6d:26:5c:7f:
a3:89:6e:24:af:9a:5d:40:97:f6:cc:ef:ee:10:0e:
12:85:27:d1:3a:86:16:26:57:1c:13:5f:36:cc:e1:
aa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:23:87:99:97:81:8B:F0:C9:B5:8E:15:09:0C:72:E2:B9:C8:CE
X509v3 Authority Key Identifier:
keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:36:2d:75:ec:42:18:3f:72:7c:d3:c6:e7:a4:72:d3:01:18:
7e:55:da:c5:73:35:98:a5:cd:1a:db:bc:b8:67:36:f5:99:f4:
cf:32:96:24:93:f9:c3:e3:55:d7:16:c7:6f:41:cd:d3:23:12:
c3:bb:b8:c5:a7:9e:83:93:d3:5f:4e:57:c9:51:dc:0b:7b:04:
95:c6:a0:af:f4:e6:2d:fe:6d:c8:d2:1b:20:1a:e2:6a:15:6e:
28:c1:a7:70:cd:89:d3:ff:ab:86:c4:f5:df:3d:de:4a:f8:65:
6a:48:bf:4a:2b:e0:85:58:2f:1d:28:ce:9b:85:b6:5d:fa:5d:
b7:72:a0:a9:44:88:ae:21:34:4f:32:78:df:88:2e:2a:01:ac:
fd:67:60:93:cf:0b:31:c6:56:cb:7d:02:f9:ed:d4:76:36:34:
1e:dd:28:fe:c0:30:8e:16:39:78:38:dc:2e:ea:19:39:fa:92:
ae:8e:24:26:aa:43:fd:7e:96:02:e3:50:63:15:b8:10:c0:79:
3c:60:1e:37:5e:e0:00:4c:3f:f9:0f:d3:4a:1c:aa:d2:e9:16:
0b:f1:59:f3:ba:aa:47:3f:68:5a:97:fd:de:c7:1c:36:f8:3f:
1c:c4:6b:0b:8a:0b:2b:ab:e3:c8:d1:10:59:da:f3:1c:71:ee:
80:60:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:56:51 2026 by rpki-client