Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: lgvgaO10xuOSoEqrwy4pclTZXi6Yjsu/BCezEhfSjL8=
Subject key identifier: 40:0C:56:E7:D9:77:0A:BD:9B:9F:C1:92:A5:A3:B9:AB:B7:C3:95:D0
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 01A0D315E8CE25297899958F2DFEFB4F772B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 02F3
Signing time: Thu 24 Sep 2026 11:03:43 +0000
Manifest this update: Thu 24 Sep 2026 11:03:43 +0000
Manifest next update: Fri 25 Sep 2026 11:03:43 +0000
Files and hashes: 1: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
2: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: WBKVrdKA0c14xyho2/aKWf+rF0/iFMAgxrtlzMVP/9M=)
3: lziFHs2A2VUAzP4OBhEcFvF0OKo.asa (hash: UdHnnZIMARPO778i7Gu0UeetalCkGAD0yUjUjL33whg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:e8:ce:25:29:78:99:95:8f:2d:fe:fb:4f:77:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Sep 24 11:03:43 2026 GMT
Not After : Sep 25 11:03:43 2026 GMT
Subject: CN=400c56e7d9770abd9b9fc192a5a3b9abb7c395d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:04:3b:dc:36:0c:3f:4b:aa:77:cd:f5:cc:
1f:76:5e:39:d8:2e:46:66:ef:37:fa:9f:a0:16:fd:
0b:ba:d6:14:a7:f0:52:8a:d6:42:0b:9d:6f:8b:bb:
b9:05:6b:41:67:c5:2b:fa:22:78:0e:c5:08:98:31:
a9:83:56:45:8b:14:cd:17:fa:3e:00:fe:f3:cb:e0:
89:6e:22:ca:33:dd:e2:64:1b:4f:f8:07:ce:c4:4f:
a8:eb:b4:ec:9a:4a:48:0a:d6:ad:97:c9:b3:c6:f3:
03:0a:23:a7:22:35:01:50:55:7c:ed:20:1b:63:e3:
7d:25:a6:74:93:ae:c3:d7:7e:73:2f:aa:d7:a9:72:
ec:1c:63:23:f6:67:e6:d9:79:d1:3d:03:79:b9:98:
05:3a:40:fa:21:d7:f4:46:8e:ac:dc:c1:32:b4:7b:
53:46:f1:18:b7:34:ed:5f:b3:4d:8d:fa:4f:bb:49:
a6:2a:4c:8e:6a:08:75:1b:40:e0:89:87:01:90:5b:
76:f3:1e:54:2d:d4:33:4a:a3:55:0a:d5:77:2a:a1:
e8:53:a9:c6:a5:d0:52:99:4a:00:74:29:78:52:f4:
47:26:fb:c7:eb:70:5f:76:d1:1c:88:8f:b8:a2:60:
c1:25:0b:9e:ee:f7:f4:10:bf:c9:f3:ba:8c:4b:76:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:56:E7:D9:77:0A:BD:9B:9F:C1:92:A5:A3:B9:AB:B7:C3:95:D0
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c4:5e:50:dd:6f:4e:a8:ed:82:8f:d2:4c:af:98:04:0c:69:
c3:11:03:16:13:ce:9c:57:ec:0d:33:44:f8:da:02:65:e8:6b:
38:0c:c3:57:d0:ee:b2:b0:2d:da:ea:3b:c4:2c:a9:c9:a2:c7:
32:8b:35:c2:54:39:1a:ef:21:5f:db:30:f9:fc:ff:3c:54:fe:
34:eb:21:79:eb:42:9d:2b:74:0d:be:6c:cb:ca:c8:f9:c8:89:
42:7d:ee:f8:3f:c0:2a:7b:e4:35:9c:7c:64:d1:38:86:cc:ec:
c8:28:eb:90:ac:bc:57:05:1f:3c:c0:f7:8a:08:ee:70:9c:26:
5f:53:95:42:43:af:33:c5:68:8a:56:78:c3:2b:6b:8a:6b:16:
b6:b8:c8:c1:ea:69:e9:b9:7f:7a:21:c7:20:87:a7:aa:8a:53:
04:8b:d4:35:2e:00:69:88:a3:82:ea:96:e1:b1:6a:78:68:f5:
2d:f9:cf:3c:be:c9:63:a2:96:ed:94:a6:58:0e:52:d4:b9:c2:
78:eb:fb:e5:59:4a:58:41:0b:d6:10:a7:52:06:02:d8:98:35:
4c:2b:a1:50:87:23:37:49:c8:a1:d9:50:69:fb:04:6f:29:73:
1b:80:14:04:0f:6f:83:19:f7:db:e5:85:8a:87:a9:5a:67:f1:
e9:f0:65:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFejOJSl4mZWPLf77T3crMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOWY1ZGMxNGY3MDc2ODExNDkxNjI4Y2ExODgyMTUwYmQ1
ZjAxMGYwHhcNMjYwOTI0MTEwMzQzWhcNMjYwOTI1MTEwMzQzWjAzMTEwLwYDVQQD
Eyg0MDBjNTZlN2Q5NzcwYWJkOWI5ZmMxOTJhNWEzYjlhYmI3YzM5NWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2cEO9w2DD9LqnfN9cwfdl452C5G
Zu83+p+gFv0LutYUp/BSitZCC51vi7u5BWtBZ8Ur+iJ4DsUImDGpg1ZFixTNF/o+
AP7zy+CJbiLKM93iZBtP+AfOxE+o67TsmkpICtatl8mzxvMDCiOnIjUBUFV87SAb
Y+N9JaZ0k67D135zL6rXqXLsHGMj9mfm2XnRPQN5uZgFOkD6Idf0Ro6s3MEytHtT
RvEYtzTtX7NNjfpPu0mmKkyOagh1G0DgiYcBkFt28x5ULdQzSqNVCtV3KqHoU6nG
pdBSmUoAdCl4UvRHJvvH63BfdtEciI+4omDBJQue7vf0EL/J87qMS3ZyIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAMVufZdwq9m5/BkqWjuau3w5XQMB8GA1UdIwQY
MBaAFIqfXcFPcHaBFJFijKGIIVC9XwEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83MTAxNWQtZDBjNy00ZmE0LWE1NmMt
Y2VkMmU0MTI4ZTg1LzEvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83MTAxNWQtZDBjNy00ZmE0LWE1NmMtY2VkMmU0MTI4ZTg1
LzEvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8ReUN1v
Tqjtgo/STK+YBAxpwxEDFhPOnFfsDTNE+NoCZehrOAzDV9DusrAt2uo7xCypyaLH
Mos1wlQ5Gu8hX9sw+fz/PFT+NOsheetCnSt0Db5sy8rI+ciJQn3u+D/AKnvkNZx8
ZNE4hszsyCjrkKy8VwUfPMD3igjucJwmX1OVQkOvM8VoilZ4wytrimsWtrjIwepp
6bl/eiHHIIenqopTBIvUNS4AaYijguqW4bFqeGj1LfnPPL7JY6KW7ZSmWA5S1LnC
eOv75VlKWEEL1hCnUgYC2Jg1TCuhUIcjN0nIodlQafsEbylzG4AUBA9vgxn32+WF
ioepWmfx6fBlZw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:51:46 2026 by rpki-client