Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: pnqR+6UQd3N/DdMU9inHgCbKSdUSrigZwhFqqa6P5+0=
Subject key identifier: 08:ED:7B:93:4E:F8:A2:A0:C1:A5:68:FA:1C:BF:0F:CC:81:E5:91:70
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 01A0DACDB737F7B0E9A59224D451DC29CD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 07C8
Signing time: Fri 25 Sep 2026 23:01:49 +0000
Manifest this update: Fri 25 Sep 2026 23:01:49 +0000
Manifest next update: Sat 26 Sep 2026 23:01:49 +0000
Files and hashes: 1: L314PIS9EZuLIllvbYG4hWHPUco.roa (hash: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: 89u138RCW8P38FpGdL6znTj29I8/Fw6vmT0oQfdICKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cd:b7:37:f7:b0:e9:a5:92:24:d4:51:dc:29:cd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Sep 25 23:01:49 2026 GMT
Not After : Sep 26 23:01:49 2026 GMT
Subject: CN=08ed7b934ef8a2a0c1a568fa1cbf0fcc81e59170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:20:5e:c9:18:db:ee:db:a3:44:9d:9b:61:
c4:91:b5:3e:18:1d:70:c1:de:01:1b:f3:97:d9:49:
3e:29:5b:76:8a:10:a7:2d:a2:b0:71:64:17:f4:9f:
13:a8:ff:8a:a7:94:94:94:8f:bd:84:43:0e:32:29:
6e:9b:a8:96:dc:da:a4:fe:e7:ad:7c:c5:e6:e4:22:
45:66:34:8d:21:52:6c:db:0b:ec:d4:22:f4:a7:ab:
48:62:f8:08:9e:2b:6a:9d:24:c1:ae:53:86:f5:ee:
2f:53:6c:92:91:f4:ed:98:99:6a:07:15:78:23:bb:
f6:9b:eb:ad:5b:30:6a:4a:63:2d:5c:f3:1f:06:24:
8b:11:ac:51:84:cf:4a:90:6d:01:3d:4e:65:b1:aa:
c8:df:6a:5e:37:3c:86:47:fd:62:be:32:1f:eb:fb:
69:58:03:4d:24:f5:fb:33:81:51:5e:2a:fd:fe:07:
1e:ef:24:cc:ab:85:41:ba:71:fb:9b:70:ab:ad:da:
ad:7d:9b:c9:a2:99:3c:00:1a:ac:a5:db:d9:84:86:
11:61:b4:87:40:f5:ce:2f:42:59:73:53:d0:d1:02:
ef:92:09:cd:2f:0c:3b:74:63:92:f5:0a:c6:8e:7f:
fc:c8:64:0e:63:b5:a3:6a:6c:27:90:9f:91:a6:e2:
5b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:7B:93:4E:F8:A2:A0:C1:A5:68:FA:1C:BF:0F:CC:81:E5:91:70
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ae:24:93:c4:c8:34:37:76:74:8c:68:53:e6:bc:cd:99:2b:
8e:2c:a9:00:e4:35:f5:5e:fe:1e:1b:de:d7:92:07:d4:45:22:
b0:6e:88:63:8c:1d:d2:d5:a7:9e:3c:8b:4e:56:0d:76:4c:cb:
15:71:96:da:3a:0d:9d:31:24:eb:10:62:e3:cf:57:f0:65:ef:
7e:6e:f1:5e:86:a3:33:9b:12:12:1a:e1:b8:cb:d4:59:fe:f7:
20:73:62:36:30:53:42:85:3e:4a:ef:d8:3e:77:b0:a8:e4:85:
a4:cc:14:49:33:e1:d8:e5:7d:e7:c9:29:d9:b5:82:8b:32:fe:
6c:ce:b5:4a:bb:17:1b:d2:ad:d3:aa:c3:c2:02:08:a2:3f:47:
4b:cf:dd:83:be:38:a4:e9:48:70:46:cf:1a:f4:c4:4b:18:05:
4a:3b:e0:84:c2:79:b0:2d:b2:9e:8f:64:f1:e3:d5:7e:7d:39:
c3:25:aa:c3:35:9c:82:91:8e:50:81:b6:8f:67:da:e1:32:28:
85:31:19:b0:1a:6a:95:ea:89:7c:1a:a3:5a:78:78:77:e9:21:
7d:14:c4:f1:bc:56:c5:0d:e0:df:3a:94:5f:d3:56:66:52:e0:
35:9b:b5:4b:35:99:bf:95:46:7e:40:a5:81:4a:d8:e1:1f:00:
63:9b:06:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDazbc397DppZIk1FHcKc12MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWY2NDBjODIwZWViNWZiYzkyMjgxYzYxMTQ0ZjExYTdi
ZDcwN2UwHhcNMjYwOTI1MjMwMTQ5WhcNMjYwOTI2MjMwMTQ5WjAzMTEwLwYDVQQD
EygwOGVkN2I5MzRlZjhhMmEwYzFhNTY4ZmExY2JmMGZjYzgxZTU5MTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zggXskY2+7bo0Sdm2HEkbU+GB1w
wd4BG/OX2Uk+KVt2ihCnLaKwcWQX9J8TqP+Kp5SUlI+9hEMOMilum6iW3Nqk/uet
fMXm5CJFZjSNIVJs2wvs1CL0p6tIYvgInitqnSTBrlOG9e4vU2ySkfTtmJlqBxV4
I7v2m+utWzBqSmMtXPMfBiSLEaxRhM9KkG0BPU5lsarI32peNzyGR/1ivjIf6/tp
WANNJPX7M4FRXir9/gce7yTMq4VBunH7m3CrrdqtfZvJopk8ABqspdvZhIYRYbSH
QPXOL0JZc1PQ0QLvkgnNLww7dGOS9QrGjn/8yGQOY7WjamwnkJ+RpuJb1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjte5NO+KKgwaVo+hy/D8yB5ZFwMB8GA1UdIwQY
MBaAFJivZAyCDutfvJIoHGEUTxGnvXB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYt
ZWNhYjcwZWYzMmRhLzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYtZWNhYjcwZWYzMmRh
LzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAla4kk8TI
NDd2dIxoU+a8zZkrjiypAOQ19V7+Hhve15IH1EUisG6IY4wd0tWnnjyLTlYNdkzL
FXGW2joNnTEk6xBi489X8GXvfm7xXoajM5sSEhrhuMvUWf73IHNiNjBTQoU+Su/Y
PnewqOSFpMwUSTPh2OV958kp2bWCizL+bM61SrsXG9Kt06rDwgIIoj9HS8/dg744
pOlIcEbPGvTESxgFSjvghMJ5sC2yno9k8ePVfn05wyWqwzWcgpGOUIG2j2fa4TIo
hTEZsBpqleqJfBqjWnh4d+khfRTE8bxWxQ3g3zqUX9NWZlLgNZu1SzWZv5VGfkCl
gUrY4R8AY5sGsg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:28 2026 by rpki-client