Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: BlCnoGj1Jwllm/saKhwNbLZvvgG2qDup6W/F3DCdF9Q=
Subject key identifier: 03:E5:25:04:74:47:DF:64:EF:09:51:6F:98:6A:C9:2A:05:8E:79:08
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 01A0DBA97C1E6719F9BB7E34067D882BED0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0FA4
Signing time: Sat 26 Sep 2026 03:01:52 +0000
Manifest this update: Sat 26 Sep 2026 03:01:52 +0000
Manifest next update: Sun 27 Sep 2026 03:01:52 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: azrXAn1W9YEMD9mJEKEkJ3oN/kHqS+hLAS65DB21Vz0=)
2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 03:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:7c:1e:67:19:f9:bb:7e:34:06:7d:88:2b:ed:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Sep 26 03:01:52 2026 GMT
Not After : Sep 27 03:01:52 2026 GMT
Subject: CN=03e525047447df64ef09516f986ac92a058e7908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:0e:3c:91:a9:a7:d9:f8:97:bd:6c:34:3f:
7a:5b:fc:96:0e:9c:60:61:77:a9:1e:a4:d7:79:a6:
8d:4b:9c:e3:9a:4b:89:08:9c:96:95:8d:1e:0b:4d:
b3:aa:f0:3f:d1:30:15:83:05:a5:04:77:8b:79:1b:
80:f1:2f:b5:de:b2:eb:73:db:7b:34:7f:08:2b:07:
b9:a0:db:65:17:81:ab:ee:cd:4a:e7:b8:8a:70:ef:
f3:22:bc:f9:18:41:74:ce:39:0b:4e:92:0c:64:44:
9f:d8:c6:61:85:f0:31:56:e6:be:4c:1c:d5:ea:36:
54:86:a2:47:4b:39:70:b0:ce:14:15:e3:ca:1b:7e:
7c:79:dc:31:f4:60:8b:cd:8b:c5:ff:04:0a:bf:32:
bb:a1:c4:b5:c8:91:9a:65:6f:4d:eb:4a:29:77:03:
48:31:61:4f:a3:08:af:49:83:39:8b:cf:bc:0c:51:
78:27:3f:c5:f7:45:d8:78:1c:1c:8c:d8:15:d0:fe:
99:60:49:d8:3d:cc:6f:29:0d:79:24:3e:08:ac:36:
42:57:40:a5:30:57:ab:dd:68:e0:5f:a4:ca:c3:31:
44:fa:f3:5b:be:0e:72:c1:c6:19:32:48:a1:a7:ff:
e1:54:06:44:a2:14:b6:1a:c6:c7:6b:3f:fa:f5:a9:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E5:25:04:74:47:DF:64:EF:09:51:6F:98:6A:C9:2A:05:8E:79:08
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:5c:df:38:ea:1a:04:2c:2f:48:54:27:f2:36:43:3c:6d:
43:59:49:78:46:bd:a9:d2:35:27:4d:98:43:9c:7c:3c:96:fb:
eb:32:a8:37:4a:d8:00:2c:66:ec:54:cb:ed:96:bd:22:b1:27:
5a:a5:6f:9a:1e:c2:25:d8:32:c0:53:50:99:c6:d0:d5:fc:61:
9b:6a:a9:f1:f7:00:7f:39:65:dd:92:99:02:57:79:51:8b:d5:
78:28:e8:97:c6:a3:02:a2:6c:fe:f1:ee:c9:33:10:c7:08:c0:
97:04:6e:13:7e:2f:26:65:1c:38:e5:ad:d4:5d:40:fa:5e:9c:
86:3c:89:ad:b9:31:74:a9:17:02:74:20:cb:30:60:ac:fd:d8:
cb:fa:c3:6f:03:17:41:df:2a:d9:4a:63:3b:7e:e9:b1:34:a4:
0d:2e:b4:1f:3d:87:db:a7:94:02:63:bc:da:c0:28:f3:eb:0b:
d7:eb:c2:96:2b:d7:db:77:b3:68:7c:fe:47:f0:eb:b9:c6:aa:
fd:19:0f:df:f5:8b:21:11:e3:bc:c0:94:c2:15:7f:55:28:9f:
de:49:3b:62:96:db:ce:e2:95:b6:43:c6:b7:98:f8:78:aa:7a:
21:97:5d:f0:82:c4:b2:62:2a:58:1d:b9:b7:eb:23:da:cf:50:
41:4a:7a:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqXweZxn5u340Bn2IK+0NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky
NzkyNGIwHhcNMjYwOTI2MDMwMTUyWhcNMjYwOTI3MDMwMTUyWjAzMTEwLwYDVQQD
EygwM2U1MjUwNDc0NDdkZjY0ZWYwOTUxNmY5ODZhYzkyYTA1OGU3OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7wOPJGpp9n4l71sND96W/yWDpxg
YXepHqTXeaaNS5zjmkuJCJyWlY0eC02zqvA/0TAVgwWlBHeLeRuA8S+13rLrc9t7
NH8IKwe5oNtlF4Gr7s1K57iKcO/zIrz5GEF0zjkLTpIMZESf2MZhhfAxVua+TBzV
6jZUhqJHSzlwsM4UFePKG358edwx9GCLzYvF/wQKvzK7ocS1yJGaZW9N60opdwNI
MWFPowivSYM5i8+8DFF4Jz/F90XYeBwcjNgV0P6ZYEnYPcxvKQ15JD4IrDZCV0Cl
MFer3WjgX6TKwzFE+vNbvg5ywcYZMkihp//hVAZEohS2GsbHaz/69ak/WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPlJQR0R99k7wlRb5hqySoFjnkIMB8GA1UdIwQY
MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt
OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2
LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCFc3zjq
GgQsL0hUJ/I2QzxtQ1lJeEa9qdI1J02YQ5x8PJb76zKoN0rYACxm7FTL7Za9IrEn
WqVvmh7CJdgywFNQmcbQ1fxhm2qp8fcAfzll3ZKZAld5UYvVeCjol8ajAqJs/vHu
yTMQxwjAlwRuE34vJmUcOOWt1F1A+l6chjyJrbkxdKkXAnQgyzBgrP3Yy/rDbwMX
Qd8q2UpjO37psTSkDS60Hz2H26eUAmO82sAo8+sL1+vClivX23ezaHz+R/Drucaq
/RkP3/WLIRHjvMCUwhV/VSif3kk7YpbbzuKVtkPGt5j4eKp6IZdd8ILEsmIqWB25
t+sj2s9QQUp65A==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:57:22 2026 by rpki-client