Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
File: ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft (raw, json)
Hash identifier: wHHwiFvKFP3fR4Pu/Va4soNRj8axVbXS8U18uFRrJzM=
Subject key identifier: 94:4A:1D:65:AD:EA:57:78:CA:F2:46:7D:C3:60:AD:54:25:C6:4D:A2
Authority key identifier: 8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
Certificate issuer: /CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Certificate serial: 01A0D502CEB567229DBA72CE88F1789FE812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
Manifest number: 02F4
Signing time: Thu 24 Sep 2026 20:02:06 +0000
Manifest this update: Thu 24 Sep 2026 20:02:06 +0000
Manifest next update: Fri 25 Sep 2026 20:02:06 +0000
Files and hashes: 1: Sxkhw8Fa5pO8BhRGtQeTU8fdya8.roa (hash: l1dlDAqaaU0qfv4ZGVF35Fo37aw65NRWppLOtUVD5ug=)
2: ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl (hash: 45xRuSUpUDIfU3YG7lvbVTIF/DvsNsF2rhnGYvqiqQQ=)
3: lziFHs2A2VUAzP4OBhEcFvF0OKo.asa (hash: UdHnnZIMARPO778i7Gu0UeetalCkGAD0yUjUjL33whg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:ce:b5:67:22:9d:ba:72:ce:88:f1:78:9f:e8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a9f5dc14f7076811491628ca1882150bd5f010f
Validity
Not Before: Sep 24 20:02:06 2026 GMT
Not After : Sep 25 20:02:06 2026 GMT
Subject: CN=944a1d65adea5778caf2467dc360ad5425c64da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:3b:70:c7:f7:80:37:95:2c:c6:61:1a:0c:
11:24:14:aa:88:2f:97:08:11:7c:b1:ac:15:99:fa:
1a:ad:1c:ad:80:1e:5f:6b:53:ef:64:18:8b:14:a0:
e6:0f:b0:66:99:18:82:f2:a3:bb:98:4d:d4:97:34:
24:b5:dd:c1:8b:9a:c8:aa:45:7a:af:94:3d:8a:05:
22:df:36:24:66:9c:17:5b:d3:9b:30:0a:00:90:e3:
24:cb:5a:55:2c:6d:3d:a9:3c:2d:29:f6:c1:43:6e:
90:c6:0c:09:6c:65:82:d6:ad:d5:75:26:c3:7e:2c:
d3:07:85:e0:ed:27:25:1a:00:d0:98:ec:6f:81:4e:
4a:83:0c:9f:b8:83:d0:28:52:39:3c:6c:19:f3:e6:
44:21:ac:64:60:27:63:13:84:39:23:ea:23:fb:66:
d5:c5:e6:31:65:92:33:26:83:d6:51:f3:2c:32:3b:
81:5a:a4:68:55:96:11:1b:e0:0b:9f:a6:87:ec:66:
a2:31:3e:ca:e7:c6:4b:ff:25:46:ed:73:7f:4a:d3:
a2:12:46:9e:22:9c:f3:c2:e4:21:1d:23:05:b8:fe:
2a:25:27:86:3f:8b:c3:98:7d:d3:7c:b8:02:e7:30:
f2:a7:56:e0:eb:16:21:81:04:cd:04:b4:83:61:82:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:1D:65:AD:EA:57:78:CA:F2:46:7D:C3:60:AD:54:25:C6:4D:A2
X509v3 Authority Key Identifier:
keyid:8A:9F:5D:C1:4F:70:76:81:14:91:62:8C:A1:88:21:50:BD:5F:01:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ip9dwU9wdoEUkWKMoYghUL1fAQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/71015d-d0c7-4fa4-a56c-ced2e4128e85/1/ip9dwU9wdoEUkWKMoYghUL1fAQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:cc:e6:0e:24:57:f8:94:a9:31:ac:50:23:68:5c:55:30:aa:
13:94:ce:73:46:81:9c:c9:16:04:1e:8b:28:e6:19:1c:94:71:
0d:db:01:d5:94:94:82:03:87:a1:7e:2c:1a:70:f4:6a:5e:d4:
45:f7:dc:82:68:a3:82:34:36:eb:98:76:65:42:2a:02:7c:21:
a5:75:81:e6:6f:07:b6:55:dd:45:98:f9:fa:8e:20:80:c2:68:
d5:d5:67:3d:a4:dd:5c:08:6e:56:4e:61:8c:b9:a3:b3:7a:0e:
c0:9e:e0:32:44:d6:4c:fb:84:c8:dc:30:03:b9:06:e5:e1:ea:
2e:9a:6e:f8:6b:fe:73:de:14:9d:8d:19:84:e3:96:bf:45:b2:
9f:f9:cd:1f:e1:3c:27:94:97:cb:20:39:31:1f:dd:38:5b:7f:
0c:a1:4a:0a:68:c6:cd:75:6c:f5:7f:45:61:9c:23:41:c0:5f:
52:ae:86:52:a3:01:57:59:47:14:21:d3:f3:4b:53:67:5a:46:
d4:2a:56:ff:5e:82:b7:32:88:0b:ad:89:a3:8f:da:8f:b8:54:
f6:fc:de:1c:a4:81:36:70:8e:5f:8d:93:64:63:ba:fc:69:fd:
28:c1:c7:78:6f:5b:f6:93:3b:87:0f:3c:67:52:5d:1e:86:90:
22:f6:98:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVAs61ZyKdunLOiPF4n+gSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhOWY1ZGMxNGY3MDc2ODExNDkxNjI4Y2ExODgyMTUwYmQ1
ZjAxMGYwHhcNMjYwOTI0MjAwMjA2WhcNMjYwOTI1MjAwMjA2WjAzMTEwLwYDVQQD
Eyg5NDRhMWQ2NWFkZWE1Nzc4Y2FmMjQ2N2RjMzYwYWQ1NDI1YzY0ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMc7cMf3gDeVLMZhGgwRJBSqiC+X
CBF8sawVmfoarRytgB5fa1PvZBiLFKDmD7BmmRiC8qO7mE3UlzQktd3Bi5rIqkV6
r5Q9igUi3zYkZpwXW9ObMAoAkOMky1pVLG09qTwtKfbBQ26QxgwJbGWC1q3VdSbD
fizTB4Xg7SclGgDQmOxvgU5KgwyfuIPQKFI5PGwZ8+ZEIaxkYCdjE4Q5I+oj+2bV
xeYxZZIzJoPWUfMsMjuBWqRoVZYRG+ALn6aH7GaiMT7K58ZL/yVG7XN/StOiEkae
IpzzwuQhHSMFuP4qJSeGP4vDmH3TfLgC5zDyp1bg6xYhgQTNBLSDYYL3/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRKHWWt6ld4yvJGfcNgrVQlxk2iMB8GA1UdIwQY
MBaAFIqfXcFPcHaBFJFijKGIIVC9XwEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83MTAxNWQtZDBjNy00ZmE0LWE1NmMt
Y2VkMmU0MTI4ZTg1LzEvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni83MTAxNWQtZDBjNy00ZmE0LWE1NmMtY2VkMmU0MTI4ZTg1
LzEvaXA5ZHdVOXdkb0VVa1dLTW9ZZ2hVTDFmQVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMzmDiRX
+JSpMaxQI2hcVTCqE5TOc0aBnMkWBB6LKOYZHJRxDdsB1ZSUggOHoX4sGnD0al7U
RffcgmijgjQ265h2ZUIqAnwhpXWB5m8HtlXdRZj5+o4ggMJo1dVnPaTdXAhuVk5h
jLmjs3oOwJ7gMkTWTPuEyNwwA7kG5eHqLppu+Gv+c94UnY0ZhOOWv0Wyn/nNH+E8
J5SXyyA5MR/dOFt/DKFKCmjGzXVs9X9FYZwjQcBfUq6GUqMBV1lHFCHT80tTZ1pG
1CpW/16CtzKIC62Jo4/aj7hU9vzeHKSBNnCOX42TZGO6/Gn9KMHHeG9b9pM7hw88
Z1JdHoaQIvaY6w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:37:53 2026 by rpki-client