Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: LfR8xadic0CKqWfXYCGzvh19TmiXT/uKfLxcSwVL+vY=
Subject key identifier: 0B:FC:03:66:25:C8:D5:7C:58:B3:0E:19:D5:BC:06:03:41:E3:BC:5A
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 01A0C2FB40D068E3EA09BDD71328EC5ADC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 08:00:40 +0000
Manifest this update: Mon 21 Sep 2026 08:00:40 +0000
Manifest next update: Tue 22 Sep 2026 08:00:40 +0000
Files and hashes: 1: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: +Dti561eEozCIsudhS3kPMcO4fAj2ml5EHJKjlQ1jj4=)
2: YOETByGoQWvX1MVQbtKSNQjPq4I.roa (hash: e5Ix1WhHdMT4rCzknHHsERtns5aDH3xdPuHebqlTS6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:40:d0:68:e3:ea:09:bd:d7:13:28:ec:5a:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Sep 21 08:00:40 2026 GMT
Not After : Sep 22 08:00:40 2026 GMT
Subject: CN=0bfc036625c8d57c58b30e19d5bc060341e3bc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:43:75:34:c2:af:cd:cc:4e:ec:b6:65:e6:
0c:a8:e0:4c:ab:07:6b:ff:23:1a:65:ae:94:70:43:
cd:f7:7d:af:77:4d:70:41:cb:de:a1:f0:0c:53:fa:
e7:d7:ce:d6:dc:fb:e9:cc:04:2b:58:26:d4:9b:2d:
e1:4f:ea:db:29:33:9f:2f:97:a4:fb:da:e7:ff:9f:
a6:11:4d:89:7f:ba:5f:a1:25:4f:b5:e2:4d:df:5d:
de:68:14:01:4d:72:c8:b0:00:e3:cc:a4:10:2d:d9:
22:d1:0a:d1:e3:16:a2:2e:ca:95:ee:07:6b:05:63:
3e:82:29:10:16:39:dc:7c:31:d2:df:97:45:67:06:
7e:6d:8b:91:bd:57:86:d0:0d:74:ab:fc:f2:08:c1:
c5:74:97:7f:55:7e:37:11:d8:ff:22:ac:10:1b:96:
9c:eb:1b:ea:3b:62:b6:5f:e0:8a:c2:88:5e:e7:c3:
3e:17:f9:e2:cc:15:a2:8c:28:8e:c9:73:3d:89:de:
79:35:50:18:f4:fa:ba:00:f7:fc:16:aa:06:b5:d2:
29:63:44:b1:1c:1a:3f:67:60:3d:87:b7:cd:fb:28:
16:96:e4:fa:2e:77:03:80:9c:01:d1:6d:30:3f:28:
07:b7:a2:51:2c:2b:1a:60:4c:d2:67:c4:b8:f9:2c:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FC:03:66:25:C8:D5:7C:58:B3:0E:19:D5:BC:06:03:41:E3:BC:5A
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fa:c3:36:77:f8:20:57:fc:fe:7c:22:67:55:95:72:cd:21:
2e:50:35:08:18:df:01:48:dd:cd:08:f0:57:38:c4:7a:20:a2:
27:2d:70:3a:7d:d8:17:2c:bc:65:3a:d5:4f:14:ba:29:df:1c:
ae:24:67:d8:0d:b9:20:ee:0d:99:20:49:b8:31:91:c1:41:4e:
89:7a:8a:bb:52:0a:e2:3e:f6:68:72:d0:24:d5:88:57:fe:9f:
8f:b5:9b:c1:c8:94:1e:62:51:27:06:b4:be:75:48:12:1c:13:
f7:f7:ca:c1:6f:d5:13:95:72:c5:20:ad:a6:bc:19:93:03:d7:
f5:d1:be:e1:ff:40:74:cb:5f:f3:ba:ad:33:91:19:e1:33:51:
7f:db:53:ba:11:cf:24:d1:3e:ad:39:ed:73:8f:22:1f:e6:ee:
56:48:fb:f1:eb:f6:56:7b:0c:62:f2:2a:89:50:b0:09:09:32:
9e:6f:70:7c:98:98:cc:2a:60:c2:cf:87:f4:33:04:8b:80:42:
b7:70:14:12:8a:ee:9b:ff:dc:11:da:d2:56:10:fa:59:24:77:
a3:94:b1:aa:a2:a1:94:14:b9:69:7d:90:a5:d0:eb:43:16:89:
80:98:b3:5e:9c:d5:c0:b3:36:b1:31:9e:57:6a:93:cf:52:1a:
2d:05:7d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:48:07 2026 by rpki-client