Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: HZrS/xXZ0NIPfQhaBlQy5YYp4CsW9AWw+bpIzq65TJM=
Subject key identifier: E5:9A:EA:A5:3F:EC:C9:01:C9:68:35:CB:98:C8:F6:60:B0:1F:F9:B1
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 01A13590FAA39562B79B66775C5DD4ED5453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 14:00:56 +0000
Manifest this update: Tue 13 Oct 2026 14:00:56 +0000
Manifest next update: Wed 14 Oct 2026 14:00:56 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: OLfgyzuZN+7rPeBq8uKj7SlaqlybDMSrvwRiawHJr6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:fa:a3:95:62:b7:9b:66:77:5c:5d:d4:ed:54:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Oct 13 14:00:56 2026 GMT
Not After : Oct 14 14:00:56 2026 GMT
Subject: CN=e59aeaa53fecc901c96835cb98c8f660b01ff9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:5b:f5:95:13:3a:97:47:a6:10:6f:e9:b0:
f7:b0:65:c0:59:3a:3f:be:58:02:93:4c:92:e7:9a:
ec:fe:bd:96:2b:f6:be:bc:3a:4f:6c:25:a6:98:d4:
68:62:2e:c5:e6:68:f7:73:3b:1b:c4:87:0e:f7:41:
1f:04:c7:c7:e9:cd:b2:a7:bd:34:67:43:ee:b0:93:
4e:38:4e:0c:92:7c:d7:c2:ba:8e:68:dc:0f:16:6f:
54:67:c8:d3:db:5e:ee:41:59:8f:09:bf:4d:88:44:
31:25:c2:48:47:6c:87:75:c8:e7:40:9c:c3:26:c7:
06:62:8c:93:85:65:c2:b7:40:ad:33:35:ab:26:79:
4b:19:13:ef:8d:28:db:21:d4:fe:15:92:8f:5f:18:
53:51:b9:01:88:1d:98:dd:43:c4:e2:8c:47:77:69:
39:c8:aa:29:18:76:ea:6c:3c:ab:89:eb:53:ae:25:
b3:23:10:4b:29:7f:23:4c:b5:5f:71:c0:1f:21:76:
54:76:54:6d:40:de:9f:36:4b:ab:c7:a6:fe:e6:01:
21:c5:dd:4e:b9:d1:29:58:23:38:ae:3b:fb:ef:63:
0c:1f:da:e6:ab:dc:9d:2d:a9:26:28:a3:c1:91:63:
1d:70:b4:50:df:89:58:de:45:06:ca:8b:3b:c0:8d:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9A:EA:A5:3F:EC:C9:01:C9:68:35:CB:98:C8:F6:60:B0:1F:F9:B1
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:15:2b:be:4f:d1:0d:0d:5b:78:33:f8:ec:23:34:ee:88:e5:
8f:c0:dc:67:46:62:5f:f9:2c:f1:a2:af:9d:ab:4e:ed:26:3b:
32:0c:3c:db:f7:94:e2:26:c6:b8:e8:df:5c:17:6e:6d:57:d1:
85:60:35:c3:61:30:89:ed:92:9e:a3:04:64:c1:e4:b0:2b:ca:
ea:ce:c0:46:79:7a:cb:6c:3b:c3:c0:00:72:3f:83:ed:33:3f:
9f:74:af:8a:64:cf:50:b0:fc:e0:61:36:92:80:5a:10:61:bd:
09:a4:79:41:bd:ab:a6:cc:70:57:92:a3:2f:09:4f:14:c2:86:
6f:4f:02:4c:b2:e6:1f:f5:90:2d:77:4f:f2:41:25:d9:87:38:
47:2b:15:b1:f0:a3:ee:8c:49:38:62:11:7d:bc:17:f4:ab:6e:
ea:63:2d:bb:47:45:5a:f3:84:99:cd:59:e9:59:1c:25:a9:0f:
a6:a6:bd:eb:2c:ee:1e:cf:cd:54:88:aa:21:1d:b5:bc:49:c5:
4a:83:6d:9a:ae:e3:7d:8b:23:9a:3f:9e:84:0a:b0:21:94:72:
aa:8c:9e:92:e5:dc:96:83:83:14:c8:f4:40:dc:e4:eb:f7:d4:
bf:f4:33:98:df:32:03:89:4e:6c:e2:0a:b4:c7:97:68:20:02:
7c:ec:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 00:45:08 2026 by rpki-client