Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: xH3I576I+18jniK07BFV8zuHKXrz7CnC7JXkun5hbpQ=
Subject key identifier: 7B:AA:24:02:AA:DE:DD:24:E7:02:E4:57:2B:7E:8B:28:A5:A1:26:4B
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01A0F29E8A0D21E268D2624243CAA46A47D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1A10
Signing time: Wed 30 Sep 2026 14:01:11 +0000
Manifest this update: Wed 30 Sep 2026 14:01:11 +0000
Manifest next update: Thu 01 Oct 2026 14:01:11 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: 7zgL6TvCS6r4dlhLlb/r/DcOEnTE0X37pnfgCvYW/5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:8a:0d:21:e2:68:d2:62:42:43:ca:a4:6a:47:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Sep 30 14:01:11 2026 GMT
Not After : Oct 1 14:01:11 2026 GMT
Subject: CN=7baa2402aadedd24e702e4572b7e8b28a5a1264b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:81:70:fa:ed:d6:65:c1:64:a9:04:c3:5c:4c:
00:9a:99:c6:8d:3d:d9:50:5b:e6:15:72:32:a6:09:
43:b3:43:ad:49:fe:a9:b7:a5:91:e9:f9:bb:0b:2e:
ba:bf:fd:71:1d:bc:5a:c5:d2:b6:e3:aa:19:8c:f4:
b4:39:b6:f3:65:61:14:db:58:15:4d:4a:28:11:c5:
4d:81:8d:b5:6a:2e:37:1d:50:fd:70:40:10:79:91:
87:fa:78:b2:c0:48:25:e2:ba:4a:16:d4:06:20:34:
c6:a8:ec:e3:97:94:21:1b:db:69:dd:a0:ae:36:ca:
2f:7f:18:56:11:80:ac:ef:eb:07:47:60:f7:87:7e:
40:43:6b:12:85:43:07:9e:40:d7:4b:1c:c0:06:d8:
81:39:cb:1f:8e:8b:86:50:ab:5a:59:1d:a6:6e:12:
e9:ec:84:56:5c:13:2d:4a:6b:6f:c5:75:aa:c9:33:
dc:a8:a7:54:24:7e:65:9b:ef:66:86:5e:4f:bc:1f:
33:a1:84:f8:6b:60:58:b4:9b:3c:12:f4:04:46:8a:
e9:12:e5:ae:2a:6d:b9:39:97:8a:3a:74:93:a7:f5:
3c:d1:91:c9:42:3a:bc:b1:95:2b:24:fe:cb:fa:d7:
5f:46:56:35:d7:ef:ca:d8:bd:7f:30:d8:40:5c:22:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AA:24:02:AA:DE:DD:24:E7:02:E4:57:2B:7E:8B:28:A5:A1:26:4B
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:68:0b:58:8c:d0:b0:1b:fb:5e:9e:d7:8e:df:1c:f9:66:57:
60:25:9d:91:63:7b:0d:46:95:44:3d:2d:50:f8:3f:51:4f:36:
5f:5b:fa:af:70:f3:cf:df:1d:7f:ac:05:5c:d6:98:c6:85:fd:
5f:26:cd:e9:d8:41:ae:f6:39:02:d3:90:bc:3d:a6:42:ff:68:
be:98:f0:41:26:c7:05:0a:a1:09:15:86:a1:56:c8:ab:d1:0b:
f9:8a:4e:51:6e:e6:26:54:09:ba:7e:10:86:a2:5c:1e:31:29:
a2:af:3e:e9:dd:0b:1a:7e:10:1a:3f:1e:16:c4:12:17:b4:e6:
2f:d4:df:e7:e7:e9:c2:1f:5d:a3:45:f2:e9:d0:b4:e6:0b:67:
32:bf:f7:44:be:f6:3e:0c:a5:4b:f2:05:6a:7b:1b:41:c2:b0:
64:a9:8b:5b:ac:f3:ed:90:8d:4f:97:22:75:30:7a:ee:0d:14:
63:09:e9:93:15:6a:d9:9c:e6:56:72:09:87:1f:af:9d:32:fc:
78:10:cd:e9:eb:22:7b:13:37:77:c7:50:ec:e3:85:a1:55:03:
82:c0:9a:03:a8:d7:d0:b1:2f:b6:cc:85:e1:1f:6e:b2:d9:da:
2a:1b:4a:83:1f:a0:bd:0d:63:15:c4:2e:62:94:b7:26:28:aa:
20:1c:be:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDynooNIeJo0mJCQ8qkakfVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4
YWFkYWUwHhcNMjYwOTMwMTQwMTExWhcNMjYxMDAxMTQwMTExWjAzMTEwLwYDVQQD
Eyg3YmFhMjQwMmFhZGVkZDI0ZTcwMmU0NTcyYjdlOGIyOGE1YTEyNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oFw+u3WZcFkqQTDXEwAmpnGjT3Z
UFvmFXIypglDs0OtSf6pt6WR6fm7Cy66v/1xHbxaxdK246oZjPS0ObbzZWEU21gV
TUooEcVNgY21ai43HVD9cEAQeZGH+niywEgl4rpKFtQGIDTGqOzjl5QhG9tp3aCu
NsovfxhWEYCs7+sHR2D3h35AQ2sShUMHnkDXSxzABtiBOcsfjouGUKtaWR2mbhLp
7IRWXBMtSmtvxXWqyTPcqKdUJH5lm+9mhl5PvB8zoYT4a2BYtJs8EvQERorpEuWu
Km25OZeKOnSTp/U80ZHJQjq8sZUrJP7L+tdfRlY11+/K2L1/MNhAXCIhdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHuqJAKq3t0k5wLkVyt+iyiloSZLMB8GA1UdIwQY
MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt
YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk
LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWgLWIzQ
sBv7Xp7Xjt8c+WZXYCWdkWN7DUaVRD0tUPg/UU82X1v6r3Dzz98df6wFXNaYxoX9
XybN6dhBrvY5AtOQvD2mQv9ovpjwQSbHBQqhCRWGoVbIq9EL+YpOUW7mJlQJun4Q
hqJcHjEpoq8+6d0LGn4QGj8eFsQSF7TmL9Tf5+fpwh9do0Xy6dC05gtnMr/3RL72
PgylS/IFansbQcKwZKmLW6zz7ZCNT5cidTB67g0UYwnpkxVq2ZzmVnIJhx+vnTL8
eBDN6esiexM3d8dQ7OOFoVUDgsCaA6jX0LEvtsyF4R9ustnaKhtKgx+gvQ1jFcQu
YpS3JiiqIBy+0g==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:57:28 2026 by rpki-client