Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json)
Hash identifier: BdTAJEfRMOsLfK11hig/0NqlX35epjX1G33b97ckMn4=
Subject key identifier: 8F:B5:C2:F1:E5:29:29:44:AE:AE:DE:1F:98:ED:17:D4:DD:56:FC:CB
Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208
Certificate serial: 01A0CA468885DA11B429231190DAC9FB7CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
Manifest number: 1463
Signing time: Tue 22 Sep 2026 18:00:15 +0000
Manifest this update: Tue 22 Sep 2026 18:00:15 +0000
Manifest next update: Wed 23 Sep 2026 18:00:15 +0000
Files and hashes: 1: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: mmjAMzIPYBmrGPG6o7dfIaidgRgyqFafF5y3cEWhQHI=)
2: Q4ZIJI1vYpM5qyo29zUc5N-1r8k.roa (hash: 76giCIoxYSJ7Qzdp7ynPuA05qyt7r6q9BXWslTdrOTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:88:85:da:11:b4:29:23:11:90:da:c9:fb:7c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208
Validity
Not Before: Sep 22 18:00:15 2026 GMT
Not After : Sep 23 18:00:15 2026 GMT
Subject: CN=8fb5c2f1e5292944aeaede1f98ed17d4dd56fccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:f3:c9:30:64:b9:43:18:a0:76:0d:51:e9:
b0:20:cb:d7:61:ff:a7:94:31:eb:8c:09:c5:fd:dc:
8f:2b:6b:8c:cb:c8:48:c9:3a:d1:26:cc:cd:76:8c:
e7:aa:82:fd:0b:75:2a:51:4c:5f:0a:53:7c:a4:99:
23:88:f7:ae:11:e5:1e:51:07:bc:82:eb:47:1e:8b:
e0:7f:a6:82:bf:ca:96:c5:af:24:ee:8f:e6:f6:e1:
a1:d2:cc:5c:f4:63:8c:2a:f6:07:ae:9a:4f:32:e9:
3c:ea:1f:9e:10:4b:80:2e:8c:e7:ee:62:94:cd:a1:
e7:3d:51:76:c5:b6:49:90:a6:6a:69:3e:ea:b7:0c:
94:85:45:45:db:7c:25:22:90:fb:a5:1a:fa:ab:84:
2a:9e:ad:e7:42:14:0a:18:50:83:75:bc:e5:34:00:
fb:7d:6a:9f:fc:f5:3b:76:3b:34:af:db:88:6b:c3:
65:5b:02:98:3f:e7:15:4e:69:cd:38:15:95:41:c2:
81:af:cf:55:21:22:33:d9:cc:cd:2d:1f:39:f0:80:
26:0b:69:de:cd:83:a9:b5:ec:f9:cb:d0:9d:e7:d4:
18:85:e4:3e:a2:36:a4:9a:c6:2a:55:46:c6:a3:a6:
b7:ff:ae:a2:00:c3:24:11:70:5f:cf:7e:36:56:e4:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B5:C2:F1:E5:29:29:44:AE:AE:DE:1F:98:ED:17:D4:DD:56:FC:CB
X509v3 Authority Key Identifier:
keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:23:cf:93:7e:e6:da:41:04:44:28:1c:18:96:59:53:05:3d:
d3:61:32:01:78:2f:1c:9c:86:a8:35:e1:31:fa:87:64:66:ae:
ee:29:65:dd:1b:be:ff:5a:fd:a8:1c:61:6c:77:66:91:0a:67:
10:b4:51:47:0a:11:2f:d9:82:f5:2f:f9:02:23:77:c8:2c:9c:
62:c4:8c:3f:37:c4:bc:7a:27:33:d1:24:b3:8b:8a:14:a1:b2:
61:52:50:e0:e8:31:be:25:91:6d:cd:e7:16:ba:4b:af:da:51:
8e:31:a2:a3:7e:d8:c8:4e:7e:70:65:89:67:7f:fd:f9:56:54:
a8:31:cd:cb:ce:e9:86:78:0c:09:4b:c8:08:ca:9a:79:e9:b8:
ec:63:34:77:3f:cd:b7:b6:6a:82:74:64:ea:55:fd:ea:64:f9:
95:57:eb:01:39:de:b7:98:94:7c:ae:63:1a:65:8e:ba:05:fa:
1b:8d:d8:27:da:af:ff:52:c8:57:43:c6:f9:cb:a3:f0:18:24:
6a:9d:d3:a7:ee:3a:0a:19:2f:9b:45:55:93:3d:ff:fb:c2:a6:
09:fa:38:ca:6d:25:82:90:0d:44:41:7a:7a:84:c8:65:7f:d9:
ac:0e:4a:99:d6:0f:10:cc:d4:79:fa:51:d4:d8:91:cf:e7:81:
56:f1:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:34 2026 by rpki-client