Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File: d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier: 2wcVadKia1j3UDhrvuspqsSXnNUAl4EaXyCVAgZXYOE=
Subject key identifier: 08:7F:13:B7:33:6C:F1:83:53:57:F2:21:E4:45:18:D8:C1:5A:EA:E3
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer: /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial: 01A0CEC8BCF7202B64C2521D924A42FDCF64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number: 1791
Signing time: Wed 23 Sep 2026 15:00:57 +0000
Manifest this update: Wed 23 Sep 2026 15:00:57 +0000
Manifest next update: Thu 24 Sep 2026 15:00:57 +0000
Files and hashes: 1: WIBc-XhxOnD5f9bCQ8Jz0ZuTnGc.roa (hash: BEfaJedvpJl8LX0jJodXnPNHqf67lfg9OTd8BTanSlQ=)
2: biWMyLPxPMl5FtQJTRrTfAxg-wg.roa (hash: pNDoD30C6cU3KpMd8R/7fMFpHc25Pe1LLUHjt0eH4ZA=)
3: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: gWD3RkloX2Z6cfeNbXgoR4cML33xuxQFmsjhJYvSXAY=)
4: pInkCUNgtUwuBuyF0FBGq4Od_LA.roa (hash: 84LwnqiXuuACgBX/nkeDGPUuwEvED3Wv0F8ikRwy6Nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:bc:f7:20:2b:64:c2:52:1d:92:4a:42:fd:cf:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Validity
Not Before: Sep 23 15:00:57 2026 GMT
Not After : Sep 24 15:00:57 2026 GMT
Subject: CN=087f13b7336cf1835357f221e44518d8c15aeae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:be:b7:39:87:2c:92:48:55:cf:8b:b8:a3:
f9:00:95:b4:57:30:c5:09:f7:a5:4d:bc:4d:0d:f8:
55:49:a8:9d:63:8a:f2:30:43:68:62:57:de:0e:aa:
5a:c7:be:f9:43:be:52:d6:71:22:7d:ce:2f:6f:f4:
cc:76:db:84:35:69:72:a0:c9:05:c4:11:02:e1:d0:
3c:a0:16:ef:79:e5:65:17:ec:85:61:15:d2:d9:fd:
62:1f:55:d0:5a:fb:f0:2b:de:78:53:7a:ef:d6:ec:
19:71:76:83:3c:33:1e:24:fa:31:80:4f:21:7e:77:
8a:86:91:c1:8d:b5:60:20:3f:b7:07:aa:6b:2e:8a:
7c:fe:97:b5:d3:48:2a:70:a7:77:da:96:83:76:39:
ee:68:df:35:c3:05:47:83:bf:a2:63:c4:30:7b:f5:
fe:a8:db:c6:cc:00:ba:40:ef:a1:7d:74:d3:db:37:
47:9f:c3:5e:91:b3:c0:67:25:fa:8f:a5:46:64:f6:
19:fc:6d:c1:a1:7d:91:4c:51:51:f0:94:fa:fc:3c:
61:1a:31:59:3a:cc:cf:51:60:ad:2e:56:33:5f:4b:
c0:be:6c:26:f5:1b:1e:d7:e9:3f:02:99:cd:a7:2d:
07:6c:ce:2c:03:af:7c:60:12:df:54:d7:aa:3f:45:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:13:B7:33:6C:F1:83:53:57:F2:21:E4:45:18:D8:C1:5A:EA:E3
X509v3 Authority Key Identifier:
keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:45:06:0c:16:17:4d:70:64:d1:2f:26:9b:e2:bc:1d:84:d5:
23:b0:8a:7a:52:a7:f7:80:db:44:32:34:6d:1c:c2:ba:07:d7:
e0:08:3b:54:9f:b7:17:be:9b:87:b3:0c:18:89:95:1f:16:63:
d5:6a:1f:81:74:0a:08:26:58:16:7a:8d:8d:88:0f:e0:1f:78:
47:54:1f:26:88:2c:81:15:61:61:e8:89:d1:d9:a4:37:d2:2b:
dc:17:4d:19:20:8d:be:fb:a9:0e:8e:92:86:f4:9a:d3:94:46:
3c:da:31:70:d6:69:cf:23:c4:5e:50:e9:09:b3:0a:c2:37:2a:
51:94:ae:55:9d:df:5e:e8:44:b1:54:3b:4b:a4:65:14:40:87:
0c:b3:42:97:9f:51:e1:46:b0:b2:90:60:a9:a1:17:8d:28:c1:
49:30:2a:28:21:5a:55:e7:ab:1a:5d:ae:64:51:69:f2:c4:d6:
e1:63:f9:03:c3:c2:10:fa:44:ee:a1:64:bb:1f:c5:4c:6f:e5:
eb:4b:ca:49:cf:0f:9a:a7:94:f5:23:71:a3:a7:f6:b6:56:da:
27:1a:3f:d3:50:b1:fa:f6:fa:5e:3f:d8:f3:8c:f1:3d:d2:78:
12:f8:4e:3b:19:d5:8f:f5:b8:c3:18:34:87:36:dc:0d:b0:01:
d9:0b:a1:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyLz3ICtkwlIdkkpC/c9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NmZhZTQzZjczZGEzNWZlMWEyZTQyOTY2MmFlMGI5MTc1
MWUzZmIwHhcNMjYwOTIzMTUwMDU3WhcNMjYwOTI0MTUwMDU3WjAzMTEwLwYDVQQD
EygwODdmMTNiNzMzNmNmMTgzNTM1N2YyMjFlNDQ1MThkOGMxNWFlYWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmG+tzmHLJJIVc+LuKP5AJW0VzDF
CfelTbxNDfhVSaidY4ryMENoYlfeDqpax775Q75S1nEifc4vb/TMdtuENWlyoMkF
xBEC4dA8oBbveeVlF+yFYRXS2f1iH1XQWvvwK954U3rv1uwZcXaDPDMeJPoxgE8h
fneKhpHBjbVgID+3B6prLop8/pe100gqcKd32paDdjnuaN81wwVHg7+iY8Qwe/X+
qNvGzAC6QO+hfXTT2zdHn8NekbPAZyX6j6VGZPYZ/G3BoX2RTFFR8JT6/DxhGjFZ
OszPUWCtLlYzX0vAvmwm9Rse1+k/ApnNpy0HbM4sA698YBLfVNeqP0Uf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAh/E7czbPGDU1fyIeRFGNjBWurjMB8GA1UdIwQY
MBaAFHdvrkP3PaNf4aLkKWYq4LkXUeP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQt
NGUwY2M1ODE2M2IwLzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8wYWNmMmQtNWQ2Mi00M2YzLThkMTQtNGUwY2M1ODE2M2Iw
LzEvZDItdVFfYzlvMV9ob3VRcFppcmd1UmRSNF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEUGDBYX
TXBk0S8mm+K8HYTVI7CKelKn94DbRDI0bRzCugfX4Ag7VJ+3F76bh7MMGImVHxZj
1WofgXQKCCZYFnqNjYgP4B94R1QfJogsgRVhYeiJ0dmkN9Ir3BdNGSCNvvupDo6S
hvSa05RGPNoxcNZpzyPEXlDpCbMKwjcqUZSuVZ3fXuhEsVQ7S6RlFECHDLNCl59R
4UawspBgqaEXjSjBSTAqKCFaVeerGl2uZFFp8sTW4WP5A8PCEPpE7qFkux/FTG/l
60vKSc8PmqeU9SNxo6f2tlbaJxo/01Cx+vb6Xj/Y84zxPdJ4EvhOOxnVj/W4wxg0
hzbcDbAB2QuhTg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:03:20 2026 by rpki-client