Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: fuWuA+krX/bYmio1E0DGufepdTtg/QAWUwvFqDuZQpw=
Subject key identifier: 7B:BF:93:CA:F9:D0:B3:2A:28:BD:94:2A:2C:01:22:3F:5F:72:E4:36
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 01A0C6335F0CED6560162029E7C5CC278391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 23:00:50 +0000
Manifest this update: Mon 21 Sep 2026 23:00:50 +0000
Manifest next update: Tue 22 Sep 2026 23:00:50 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: PqDr4YVBJ6GEMklNvyU+VUXw7J6rEwPMt9bhluN/tTg=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:5f:0c:ed:65:60:16:20:29:e7:c5:cc:27:83:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Sep 21 23:00:50 2026 GMT
Not After : Sep 22 23:00:50 2026 GMT
Subject: CN=7bbf93caf9d0b32a28bd942a2c01223f5f72e436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:04:f5:c2:81:f5:1f:bf:76:14:ac:0c:31:
50:f4:81:ad:eb:ac:fd:2b:a8:8e:50:d1:b6:b5:e6:
3e:a9:00:5c:a6:e1:0d:8d:57:29:11:a8:c0:6c:73:
98:23:61:88:b7:b4:65:e8:7e:b6:70:8e:02:f2:29:
38:35:54:db:3c:66:7b:70:44:cf:bb:61:af:0b:4a:
d6:44:67:ff:ac:c1:2b:e9:22:8e:84:04:4c:08:43:
de:0e:d0:da:ab:27:f3:47:57:4c:49:19:58:93:18:
c1:74:8f:c4:c6:40:0c:3e:54:d1:8b:6a:93:ab:76:
4e:d8:14:43:65:26:d3:9d:2f:26:ff:01:3d:81:59:
32:bb:bb:b6:7f:30:39:8a:90:4e:58:e2:06:de:52:
28:cd:0e:0b:e4:2f:69:d3:81:d3:c4:a3:eb:89:fa:
da:55:ff:56:de:84:0f:94:ee:81:9b:79:dd:5d:27:
29:17:11:4d:dd:1e:7b:55:95:35:db:ae:62:d3:81:
46:0b:9b:7c:dc:99:9a:bf:12:74:8c:de:53:0b:7c:
1e:ae:c8:05:72:aa:85:cc:ad:f5:0c:72:e6:c9:79:
df:03:b6:78:97:a5:cf:a8:0b:3d:85:1d:56:b1:1c:
96:b9:a2:0f:38:c5:47:b9:62:c0:d2:b4:1f:ed:eb:
11:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BF:93:CA:F9:D0:B3:2A:28:BD:94:2A:2C:01:22:3F:5F:72:E4:36
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:da:1e:81:fc:84:29:2e:3c:15:c4:0e:3c:71:76:64:f5:a8:
b2:34:44:b2:44:7b:fb:c2:4f:c8:1a:67:5f:12:7e:13:a5:9f:
cc:fe:73:f1:1a:2e:21:74:13:53:61:61:c8:25:61:9b:9d:b5:
17:e6:3c:19:a7:4e:02:ac:15:15:2e:65:8a:1a:fc:58:db:96:
9b:05:2d:a5:15:ff:6b:be:b0:a9:f8:e5:50:72:01:c2:0c:d1:
c6:10:23:41:4c:7d:57:77:ab:73:cd:ce:8a:ed:6f:0a:42:62:
33:b1:21:71:4f:ed:f9:95:50:91:6c:fd:53:1b:6b:4a:07:0c:
a2:68:eb:9d:09:b7:f7:32:1c:81:0c:0e:e4:17:3c:ce:98:43:
99:7d:92:2f:d8:75:63:3e:1a:c1:be:01:09:44:f0:bd:1a:6e:
c7:d2:be:fa:98:40:83:c6:6c:2b:88:5b:68:b4:57:8c:cb:57:
56:f0:ee:94:59:ed:4a:12:e1:82:8d:9d:60:7d:30:9c:58:c1:
6b:b3:9e:43:94:45:91:7b:af:ad:d6:93:46:50:fa:e1:12:42:
5e:59:87:70:78:de:88:45:22:8c:87:48:d3:f6:d1:8b:8b:48:
50:d9:9b:31:3a:39:19:63:b8:3e:22:95:ca:e0:b9:20:9b:fd:
4c:a4:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:33:35 2026 by rpki-client