Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: 3hJn3mI6FjsStEOjc/vFo6lMYbOqWhXQvRPpDHN4hKw=
Subject key identifier: BE:57:2C:3B:BF:81:9B:82:87:7B:78:16:CA:C5:29:69:E8:56:37:F0
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 01A1220A0CB3A85F6730D02BD292DC7023CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1A27
Signing time: Fri 09 Oct 2026 19:00:46 +0000
Manifest this update: Fri 09 Oct 2026 19:00:46 +0000
Manifest next update: Sat 10 Oct 2026 19:00:46 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: sREBK6Qf/dQ1awYt1jxRMeLD/KuXGCekNDU2VPKItJ4=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:0c:b3:a8:5f:67:30:d0:2b:d2:92:dc:70:23:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Oct 9 19:00:46 2026 GMT
Not After : Oct 10 19:00:46 2026 GMT
Subject: CN=be572c3bbf819b82877b7816cac52969e85637f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:cd:0b:70:56:e5:ae:e4:40:fb:36:5b:1d:b4:
d0:04:fd:16:5f:5d:bd:d9:33:72:5c:b4:74:29:fc:
58:08:49:c5:13:6a:3e:1a:46:35:85:b4:71:e8:8b:
40:5e:cd:8b:0f:87:80:df:ff:9d:84:5f:9b:33:db:
5b:3e:84:5f:fc:fb:87:e4:e4:ad:8f:ae:c9:b2:b6:
04:7a:53:27:06:e8:4e:47:66:4c:9b:78:da:65:5b:
0d:b7:7c:e3:18:b6:7d:a6:0d:1f:26:15:6d:0f:c3:
ec:8f:30:55:7a:7d:c4:36:8a:d4:84:f6:a3:d3:d6:
c1:8d:27:a1:70:1f:4d:27:c3:2e:6b:1b:82:08:1e:
ed:13:c7:7b:b5:75:e2:fd:f7:3c:5d:cb:66:26:0c:
a6:24:3d:a9:78:f3:28:4a:a8:9e:87:96:60:4a:6f:
20:ee:0f:20:91:a6:af:88:8f:6f:cc:80:81:35:c3:
d8:4f:0c:73:12:4e:f9:c5:c3:cd:66:ce:da:cf:90:
88:7c:e5:13:e3:80:b8:96:cb:f6:a8:e8:08:fe:e9:
56:03:de:ba:1e:96:52:25:3e:91:75:47:de:56:ad:
72:48:ec:08:64:d2:db:92:0d:30:99:88:3c:5e:f7:
fd:b4:68:15:4d:3a:c7:50:3e:ab:31:02:d0:6f:e5:
42:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:2C:3B:BF:81:9B:82:87:7B:78:16:CA:C5:29:69:E8:56:37:F0
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1b:19:36:de:18:3c:7c:a7:6d:8a:33:30:fe:1d:c7:3d:15:
ec:ca:93:99:4f:fb:e2:c1:87:d8:15:96:ab:08:8d:f6:0e:e7:
76:02:6c:b9:3d:cf:d3:06:43:e5:32:a9:7a:d1:17:d5:44:5a:
ee:20:27:b5:7a:42:03:5d:17:b9:e1:eb:e4:f2:a8:80:bb:3b:
2d:71:e8:68:75:f2:9a:de:8e:ad:c2:70:05:82:ef:fb:37:e9:
60:54:ff:0d:01:b7:19:1e:22:11:a2:b9:3c:0a:31:37:3f:6f:
2a:7f:23:a9:c6:1b:9a:08:60:a0:78:c7:56:4c:69:9d:47:43:
f8:b0:32:8d:10:8c:d1:ae:05:12:e7:5f:8e:28:d0:41:d5:94:
dd:fd:46:9f:29:e3:00:db:69:ff:78:46:a5:28:6b:50:a8:16:
2f:b7:bf:71:47:bd:a9:ea:d4:fd:47:23:ed:a3:c8:b9:8c:42:
43:d7:f8:a2:42:86:c8:a8:cb:10:91:60:2e:30:d9:3a:b9:c5:
7a:e6:67:18:bf:6d:07:ff:fc:81:fe:89:75:cd:5f:86:41:04:
33:32:d8:3f:f9:9d:bb:2f:72:b6:97:38:d0:d4:7f:f3:8a:82:
d9:b2:d7:a8:7d:9c:6c:55:61:94:f3:92:ff:8f:3f:6e:a2:fb:
cf:67:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:48:01 2026 by rpki-client