Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
File: d9Vhc4owymkonMhFMN5d73SjqYI.mft (raw, json)
Hash identifier: V4UH4b1Kv7n+CKb9mw7C1evqTv0De6jHS1hNphV0TT4=
Subject key identifier: 97:24:64:B6:F6:34:AE:84:CA:2B:E6:78:37:2F:A6:02:31:32:99:B0
Authority key identifier: 77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
Certificate issuer: /CN=77d561738a30ca69289cc84530de5def74a3a982
Certificate serial: 01A1133C2C9B6938F2AD71862AAAD4BD3BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
Manifest number: 0267
Signing time: Tue 06 Oct 2026 22:01:13 +0000
Manifest this update: Tue 06 Oct 2026 22:01:13 +0000
Manifest next update: Wed 07 Oct 2026 22:01:13 +0000
Files and hashes: 1: d9Vhc4owymkonMhFMN5d73SjqYI.crl (hash: l9Z5HUgGEkYsJ8jdalyISGMLeTJlqDOccrA8PmZ34zY=)
2: wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa (hash: PPK9ixZ6Q7KuFLEJo2Wk9bDSxb6ZvTbGERhmOzUiZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:2c:9b:69:38:f2:ad:71:86:2a:aa:d4:bd:3b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d561738a30ca69289cc84530de5def74a3a982
Validity
Not Before: Oct 6 22:01:13 2026 GMT
Not After : Oct 7 22:01:13 2026 GMT
Subject: CN=972464b6f634ae84ca2be678372fa602313299b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:11:49:97:f4:db:2a:49:db:3b:fb:0e:06:
c4:49:60:87:f9:da:35:db:8c:3d:f8:6c:e9:30:bd:
45:c4:7e:7e:c0:7e:38:77:92:42:0d:84:14:e3:bc:
f6:bc:f4:b7:74:67:b8:6a:f9:33:35:e2:26:14:3a:
f8:42:dd:a4:5b:68:4d:6e:f8:b7:8a:0d:fc:be:bc:
ba:05:4e:0e:b8:c7:df:38:1d:df:fb:47:c3:7e:80:
b5:e7:6d:67:5c:b8:40:af:5c:85:07:05:33:b9:91:
e2:01:9a:e7:d9:04:04:2c:b6:f6:26:e9:c6:73:9f:
83:7c:a3:5c:99:65:69:1a:cb:cb:82:a4:9c:bf:f1:
f1:2c:fc:61:a0:0e:77:f8:4e:f4:05:7b:c0:7c:db:
8f:55:cf:f5:f9:67:17:6f:8e:a4:e7:19:d8:2e:e2:
1d:ce:69:69:19:7f:ec:6a:cb:32:b3:64:65:bb:d0:
e5:4d:c4:dc:0a:fe:6e:68:28:f7:1e:98:3a:28:8b:
dc:47:f5:84:03:42:ec:df:a6:c9:e0:87:c9:bc:d0:
dc:8d:ca:a0:3b:b2:21:47:cb:9f:d0:0e:dc:a6:18:
27:c2:f9:48:7c:e3:83:f0:c4:33:8f:2c:85:ab:de:
25:8b:e7:b9:fa:ec:1f:8a:03:3f:6c:6a:0f:80:09:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:24:64:B6:F6:34:AE:84:CA:2B:E6:78:37:2F:A6:02:31:32:99:B0
X509v3 Authority Key Identifier:
keyid:77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fe:45:fb:18:f1:f5:cd:e3:39:33:65:d1:d7:0e:2f:84:b4:
b3:8c:6a:81:b9:2a:b6:b4:6e:f4:7c:b3:bd:2c:2d:c5:66:ee:
01:35:b5:05:bf:32:f3:2b:99:fd:84:bb:1c:90:af:ac:93:f4:
6c:19:81:8b:4f:78:ca:ac:09:60:8b:2c:05:d6:b8:cb:86:18:
48:b5:5e:44:a8:a9:f9:e5:d5:a2:9d:2e:2a:73:1b:11:71:8e:
7b:77:90:af:a7:b5:d4:34:e4:3a:8d:6b:fe:8d:00:b5:c5:b5:
a9:41:85:cd:04:2c:64:28:e1:69:1c:a1:0f:2b:5b:80:3b:96:
33:d8:0d:a2:61:d9:ad:6f:fd:5b:ac:36:72:c5:37:b1:35:73:
3c:01:18:e3:d1:30:c4:31:52:f6:80:79:0f:50:78:c6:f6:9d:
d3:67:52:a6:0f:2e:77:59:0d:2b:47:f8:db:20:8e:37:f3:55:
08:52:06:41:74:6d:c2:9c:4c:d3:f3:5f:ab:2b:95:34:22:35:
0c:62:dc:ac:3e:80:c6:55:64:24:3c:6a:20:6c:da:e8:89:60:
65:f7:f7:bd:57:24:36:1c:de:09:68:4a:38:5e:b4:ed:8f:95:
27:89:2a:d9:bd:dc:cc:a3:3e:05:11:a9:c4:3d:79:94:35:39:
b5:2a:04:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaETPCybaTjyrXGGKqrUvTvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZDU2MTczOGEzMGNhNjkyODljYzg0NTMwZGU1ZGVmNzRh
M2E5ODIwHhcNMjYxMDA2MjIwMTEzWhcNMjYxMDA3MjIwMTEzWjAzMTEwLwYDVQQD
Eyg5NzI0NjRiNmY2MzRhZTg0Y2EyYmU2NzgzNzJmYTYwMjMxMzI5OWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka4RSZf02ypJ2zv7DgbESWCH+do1
24w9+GzpML1FxH5+wH44d5JCDYQU47z2vPS3dGe4avkzNeImFDr4Qt2kW2hNbvi3
ig38vry6BU4OuMffOB3f+0fDfoC1521nXLhAr1yFBwUzuZHiAZrn2QQELLb2JunG
c5+DfKNcmWVpGsvLgqScv/HxLPxhoA53+E70BXvAfNuPVc/1+WcXb46k5xnYLuId
zmlpGX/sassys2Rlu9DlTcTcCv5uaCj3Hpg6KIvcR/WEA0Ls36bJ4IfJvNDcjcqg
O7IhR8uf0A7cphgnwvlIfOOD8MQzjyyFq94li+e5+uwfigM/bGoPgAmxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJckZLb2NK6EyivmeDcvpgIxMpmwMB8GA1UdIwQY
MBaAFHfVYXOKMMppKJzIRTDeXe90o6mCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlWaGM0b3d5bWtvbk1oRk1ONWQ3M1NqcVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYmViZTQtYWZhNi00YTFjLTk2MWIt
NDQzMWY4OTM4NGEzLzEvZDlWaGM0b3d5bWtvbk1oRk1ONWQ3M1NqcVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYmViZTQtYWZhNi00YTFjLTk2MWItNDQzMWY4OTM4NGEz
LzEvZDlWaGM0b3d5bWtvbk1oRk1ONWQ3M1NqcVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaP5F+xjx
9c3jOTNl0dcOL4S0s4xqgbkqtrRu9HyzvSwtxWbuATW1Bb8y8yuZ/YS7HJCvrJP0
bBmBi094yqwJYIssBda4y4YYSLVeRKip+eXVop0uKnMbEXGOe3eQr6e11DTkOo1r
/o0AtcW1qUGFzQQsZCjhaRyhDytbgDuWM9gNomHZrW/9W6w2csU3sTVzPAEY49Ew
xDFS9oB5D1B4xvad02dSpg8ud1kNK0f42yCON/NVCFIGQXRtwpxM0/NfqyuVNCI1
DGLcrD6AxlVkJDxqIGza6IlgZff3vVckNhzeCWhKOF607Y+VJ4kq2b3czKM+BRGp
xD15lDU5tSoE/g==
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:15:10 2026 by rpki-client