Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: zwVr1PK7XdGNLK6+sivjvaiEbf+a5PxH2m6ChOMdI3Q=
Subject key identifier: A8:3E:AD:2A:31:EA:76:D4:68:CB:F4:F7:58:9B:D4:37:E9:F3:BE:9B
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 01A0EA77E332C235D8561CDE9A7A77C9FA69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1AA1
Signing time: Tue 29 Sep 2026 00:02:00 +0000
Manifest this update: Tue 29 Sep 2026 00:02:00 +0000
Manifest next update: Wed 30 Sep 2026 00:02:00 +0000
Files and hashes: 1: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (hash: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=)
2: aXqn4kbdTiISCg3qjch21kWiAS0.roa (hash: fWTEPBg8GhRwpF6veTh6PUPLm3Q1obhdo3c/16/83Z4=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: Q5HF5cXCmZDK8KDgTfCfJkQZHhLP0uZIB9fm4EdHgMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:77:e3:32:c2:35:d8:56:1c:de:9a:7a:77:c9:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Sep 29 00:02:00 2026 GMT
Not After : Sep 30 00:02:00 2026 GMT
Subject: CN=a83ead2a31ea76d468cbf4f7589bd437e9f3be9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:65:c1:c7:64:dc:60:0f:21:86:e8:b3:c7:
65:9e:fb:5b:b2:cd:0f:d7:46:9d:92:6f:e3:d2:4f:
61:d5:83:8c:50:1d:d6:e3:3e:10:01:bc:75:1c:02:
f5:3c:f4:f1:87:e1:74:70:30:79:ca:0e:41:c4:5e:
e5:6f:63:4c:51:9d:7a:e4:3d:0b:68:61:07:ca:00:
a0:0f:d4:c6:e7:dc:e3:7d:6e:db:09:2b:4d:84:e8:
75:b2:29:ac:4e:05:f0:5d:bc:2c:b0:86:d5:7b:c6:
ca:86:0d:70:9e:d8:cd:45:df:00:d0:3a:3f:de:16:
6f:f8:2b:9a:62:dc:df:28:6c:00:e6:fa:de:77:94:
48:5c:db:d1:ee:a3:ad:03:f2:68:60:ab:68:41:a3:
6f:da:82:68:96:dd:01:b2:f2:d0:a9:14:6e:56:0f:
6d:7d:68:5c:48:95:58:4a:b5:a7:7c:2d:6f:30:94:
0c:c0:12:d9:e4:79:2f:de:87:ed:c6:9a:21:f2:7d:
a5:41:36:fb:c4:d2:82:51:10:35:ec:7b:43:31:05:
03:92:65:17:e4:3d:06:5e:12:d0:13:20:64:41:2a:
28:58:51:2f:c5:4b:f5:b2:cb:70:34:fc:9b:2c:f5:
c8:87:fd:7f:d1:89:08:79:95:49:6e:34:e8:cd:d7:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3E:AD:2A:31:EA:76:D4:68:CB:F4:F7:58:9B:D4:37:E9:F3:BE:9B
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:65:18:49:fc:8e:71:a8:22:fc:43:df:f0:28:b1:db:24:18:
e4:46:c4:f2:11:8d:8d:bd:3a:8a:ba:62:33:97:2d:41:c7:b6:
e0:c2:3b:90:97:87:42:7c:bc:d0:85:17:59:f0:61:44:a0:6d:
b5:6f:d0:c0:95:82:56:7f:88:fb:b3:3e:61:ca:fb:d7:2c:2f:
80:af:4e:4c:4b:12:45:38:3b:ab:90:bf:fe:0a:98:25:b8:f2:
3c:01:d2:68:ae:6f:84:d4:71:60:11:a0:0e:75:e5:b4:06:b0:
56:e6:54:54:8a:3a:ae:18:9b:28:a3:2c:4a:ba:e9:b6:e8:fb:
9d:08:4d:08:97:e3:39:d3:69:5c:d3:73:8b:9f:5f:a2:db:5e:
92:c1:da:e2:de:a4:5a:7d:0e:77:63:68:e1:1f:b8:9d:b1:75:
58:fc:29:e3:95:c9:bd:65:67:e0:a1:0b:11:68:0f:92:2e:4b:
8d:c1:b9:66:46:0b:34:56:6b:ce:78:64:69:69:24:ae:2c:56:
ad:0c:76:92:3b:75:3d:02:bc:ac:3e:ef:33:d1:2b:9a:8b:51:
36:3d:71:37:9e:4f:b5:09:71:19:9d:e0:91:27:22:93:dd:c9:
91:83:e6:fd:17:c5:6e:cb:6d:be:c4:d1:cb:f5:b4:6d:b8:99:
e5:a9:b2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqd+MywjXYVhzemnp3yfppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjYwOTI5MDAwMjAwWhcNMjYwOTMwMDAwMjAwWjAzMTEwLwYDVQQD
EyhhODNlYWQyYTMxZWE3NmQ0NjhjYmY0Zjc1ODliZDQzN2U5ZjNiZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKFlwcdk3GAPIYbos8dlnvtbss0P
10adkm/j0k9h1YOMUB3W4z4QAbx1HAL1PPTxh+F0cDB5yg5BxF7lb2NMUZ165D0L
aGEHygCgD9TG59zjfW7bCStNhOh1simsTgXwXbwssIbVe8bKhg1wntjNRd8A0Do/
3hZv+CuaYtzfKGwA5vred5RIXNvR7qOtA/JoYKtoQaNv2oJolt0BsvLQqRRuVg9t
fWhcSJVYSrWnfC1vMJQMwBLZ5Hkv3oftxpoh8n2lQTb7xNKCURA17HtDMQUDkmUX
5D0GXhLQEyBkQSooWFEvxUv1sstwNPybLPXIh/1/0YkIeZVJbjTozddGpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg+rSox6nbUaMv091ib1Dfp876bMB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmUYSfyO
cagi/EPf8Cix2yQY5EbE8hGNjb06irpiM5ctQce24MI7kJeHQny80IUXWfBhRKBt
tW/QwJWCVn+I+7M+Ycr71ywvgK9OTEsSRTg7q5C//gqYJbjyPAHSaK5vhNRxYBGg
DnXltAawVuZUVIo6rhibKKMsSrrptuj7nQhNCJfjOdNpXNNzi59fotteksHa4t6k
Wn0Od2No4R+4nbF1WPwp45XJvWVn4KELEWgPki5LjcG5ZkYLNFZrznhkaWkkrixW
rQx2kjt1PQK8rD7vM9ErmotRNj1xN55PtQlxGZ3gkScik93JkYPm/RfFbsttvsTR
y/W0bbiZ5amyqg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 03:50:23 2026 by rpki-client