Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File: _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier: jvVAnUH2Lh9J6pv4Qyrxzz+jcRPhRnA2pzBLdxLZ45Q=
Subject key identifier: 3F:D2:31:0D:8D:37:82:60:5F:06:6D:50:34:94:DF:E8:78:B4:92:7E
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer: /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial: 01A125E738E0F9B0D4C5CA031FA56F056107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number: 1A9A
Signing time: Sat 10 Oct 2026 13:01:12 +0000
Manifest this update: Sat 10 Oct 2026 13:01:12 +0000
Manifest next update: Sun 11 Oct 2026 13:01:12 +0000
Files and hashes: 1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: iR0ejm/e9KNoQeNdZEAb+0FYY8hxGt3rqNSEGULqMZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:e7:38:e0:f9:b0:d4:c5:ca:03:1f:a5:6f:05:61:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Validity
Not Before: Oct 10 13:01:12 2026 GMT
Not After : Oct 11 13:01:12 2026 GMT
Subject: CN=3fd2310d8d3782605f066d503494dfe878b4927e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:99:66:65:ce:c5:ee:04:40:7c:37:d1:72:
83:f8:ad:58:e4:05:78:31:75:29:fc:6d:49:c2:7f:
60:b6:10:61:b3:3d:fb:a9:af:05:be:ac:f8:0b:c7:
e4:95:e8:b5:69:c5:1c:65:b9:5b:a0:af:f5:a9:2c:
38:e5:bf:14:cb:ed:d5:c4:90:7e:55:c6:78:8f:b3:
a8:c1:ab:80:3b:cc:0d:79:35:11:93:f8:ec:4c:99:
eb:c5:ac:c9:93:58:70:59:67:c0:78:f7:8b:ca:2f:
18:2a:a0:50:b6:f5:0e:df:c8:38:5c:21:74:f3:a0:
79:b2:af:6f:b4:86:3e:6b:0e:b4:bc:db:a6:42:5d:
f2:b4:a8:95:a7:b6:e9:d4:ee:bf:be:90:64:64:e8:
29:79:2c:c4:85:b5:cd:01:96:19:70:e7:fe:d0:08:
66:7b:75:f4:8e:3a:90:3c:c2:a1:c3:c5:29:11:8b:
37:2b:e4:c6:7a:94:4d:99:3d:5e:ca:7f:b2:c0:8f:
9c:0a:2d:53:99:0b:40:02:97:65:77:1d:66:72:51:
85:e7:26:78:fa:f4:66:e9:7f:9d:c6:1f:87:9b:ce:
08:d6:82:ec:42:cf:82:a1:9b:80:53:5d:8f:ff:9c:
39:74:d9:fc:c4:14:0f:04:e3:da:be:70:af:87:a3:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D2:31:0D:8D:37:82:60:5F:06:6D:50:34:94:DF:E8:78:B4:92:7E
X509v3 Authority Key Identifier:
keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:71:98:1f:1f:33:27:e8:3d:27:15:f9:89:09:71:6c:bc:59:
ab:a7:d2:9e:bb:f0:7f:e6:49:89:b1:fe:4f:5f:45:f6:42:42:
7f:96:5e:8e:8f:4b:d5:f1:e3:42:09:d8:87:a9:53:c6:4f:66:
cf:f4:d2:86:a3:03:4d:88:f4:a5:be:37:e6:a9:3f:e9:3d:c8:
a1:ab:81:d7:fd:46:dc:6d:2b:be:2c:64:4a:a9:e2:a3:92:7d:
77:bc:71:29:03:32:31:d1:93:ad:16:50:fd:26:d6:3f:a3:3f:
44:a9:8e:e0:1d:86:24:55:29:7e:ac:1c:41:3c:19:b8:26:34:
97:7a:91:ff:ce:63:6d:0e:3c:4a:12:c5:fe:ad:16:49:16:cd:
2c:ac:4e:ef:75:51:0e:0b:3e:be:2e:09:7f:89:d7:80:fb:46:
e5:82:a2:30:ba:08:3f:52:d4:09:65:28:81:02:a7:44:34:93:
f7:da:e2:02:08:fc:eb:5b:89:4d:10:b4:96:a6:33:84:0b:d7:
c0:ac:cf:f3:3b:e8:24:8e:05:31:fc:98:c4:1d:fd:96:81:ef:
58:90:b2:aa:10:52:f0:d6:4e:63:d4:32:5d:ae:cd:8d:28:14:
9b:4c:a8:41:af:fc:bb:90:97:ab:15:23:1c:8e:8d:a0:55:ba:
13:b3:f5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:20:31 2026 by rpki-client