Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: N7do68zVFUP1syEQOq4uE8gJIHmHZodxn1/FNZJjUy4=
Subject key identifier: 9E:B6:C8:2C:12:25:72:E9:B4:AD:08:AF:48:F5:A4:AE:10:21:0B:05
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 01A0F1C388E8834B881B9F069BB78925A36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1669
Signing time: Wed 30 Sep 2026 10:01:58 +0000
Manifest this update: Wed 30 Sep 2026 10:01:58 +0000
Manifest next update: Thu 01 Oct 2026 10:01:58 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 7n7ik3BLQQ2bjuVGu+Un7uP1RdaTlo6qODHLxfOPFYE=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 10:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:88:e8:83:4b:88:1b:9f:06:9b:b7:89:25:a3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Sep 30 10:01:58 2026 GMT
Not After : Oct 1 10:01:58 2026 GMT
Subject: CN=9eb6c82c122572e9b4ad08af48f5a4ae10210b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:a2:db:a9:01:44:12:04:dd:5f:32:13:55:
3c:0e:de:49:d1:7e:2c:97:06:bb:28:6b:14:5a:8f:
f9:20:de:cc:b5:b1:a6:32:ca:66:87:1b:a7:5d:24:
d9:4a:78:87:64:4f:dc:51:3c:42:bd:37:57:5e:92:
5c:26:fe:65:39:2c:2c:d2:3b:d8:2d:8c:6d:84:29:
14:ad:4c:21:fa:44:79:80:80:66:8f:47:4b:ac:97:
ee:d4:b8:10:ff:47:19:fa:0e:56:16:01:c7:6f:68:
f8:7c:33:cd:4b:6b:48:c3:ee:84:0e:7c:89:a5:46:
7a:6f:00:f3:a9:87:d6:8a:bf:86:8f:30:b1:6c:26:
7c:07:79:62:b7:7f:9b:af:c2:48:48:44:65:34:c6:
ab:5f:01:a2:76:aa:4c:c3:0b:87:51:32:4a:9c:ac:
64:ed:ef:eb:01:9c:91:e1:54:8d:de:d2:f2:ba:0e:
58:8f:ba:4d:50:e2:91:7b:a3:a0:a9:a8:0d:a6:39:
79:36:76:24:30:52:dd:59:47:63:fc:4d:2c:73:4d:
b4:4e:75:70:7c:fb:1c:5f:1d:4e:8b:c8:2b:a0:a1:
f1:68:f7:11:7a:fe:3c:43:f5:2a:cd:49:e9:5f:4b:
6a:55:e4:70:c1:c1:bb:35:03:03:31:28:dc:8f:85:
84:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:C8:2C:12:25:72:E9:B4:AD:08:AF:48:F5:A4:AE:10:21:0B:05
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:ab:fa:b2:1a:19:5f:1d:93:a5:9b:61:ac:0e:3c:19:74:3e:
3c:23:d2:10:aa:00:35:c0:10:12:c7:55:e8:34:da:92:f5:4c:
af:5f:29:36:73:24:3c:86:31:0a:df:f6:a9:67:2a:a1:e8:27:
9e:be:9f:08:2c:e2:a6:82:54:95:2b:de:17:30:f2:3e:ee:e6:
d5:83:10:df:e3:5f:f1:7b:9f:8b:8a:32:3f:76:3b:17:7f:0e:
be:73:db:ae:6b:8b:39:39:6d:d5:73:ec:5e:1e:2d:e4:16:2e:
00:bd:75:55:cd:5b:8f:79:04:07:8d:c1:80:79:ea:5f:c4:f2:
c4:9d:ce:8f:68:75:d0:2a:74:69:10:80:d7:27:f3:a8:1c:b6:
ba:31:51:06:05:a1:27:a9:3a:93:ba:79:9a:2f:f4:a4:7c:a2:
eb:5e:1f:54:cb:e4:79:0b:00:88:e0:c0:f5:d6:8b:3c:d0:66:
e2:50:bd:e6:a2:78:0b:c7:f5:48:be:ec:f2:92:57:bb:9b:71:
83:fe:36:ee:bc:e1:49:c7:d8:a5:c2:43:a5:c7:08:f1:f3:2b:
0a:4e:d6:70:0f:a8:66:bb:eb:39:06:27:52:13:96:2a:11:96:
1c:25:be:77:11:1e:0e:07:8a:39:42:2b:bc:9f:fe:75:b9:c6:
5c:c0:c4:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxw4jog0uIG58Gm7eJJaNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjYwOTMwMTAwMTU4WhcNMjYxMDAxMTAwMTU4WjAzMTEwLwYDVQQD
Eyg5ZWI2YzgyYzEyMjU3MmU5YjRhZDA4YWY0OGY1YTRhZTEwMjEwYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkCi26kBRBIE3V8yE1U8Dt5J0X4s
lwa7KGsUWo/5IN7MtbGmMspmhxunXSTZSniHZE/cUTxCvTdXXpJcJv5lOSws0jvY
LYxthCkUrUwh+kR5gIBmj0dLrJfu1LgQ/0cZ+g5WFgHHb2j4fDPNS2tIw+6EDnyJ
pUZ6bwDzqYfWir+GjzCxbCZ8B3lit3+br8JISERlNMarXwGidqpMwwuHUTJKnKxk
7e/rAZyR4VSN3tLyug5Yj7pNUOKRe6OgqagNpjl5NnYkMFLdWUdj/E0sc020TnVw
fPscXx1Oi8groKHxaPcRev48Q/UqzUnpX0tqVeRwwcG7NQMDMSjcj4WErQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ62yCwSJXLptK0Ir0j1pK4QIQsFMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6v6shoZ
Xx2TpZthrA48GXQ+PCPSEKoANcAQEsdV6DTakvVMr18pNnMkPIYxCt/2qWcqoegn
nr6fCCzipoJUlSveFzDyPu7m1YMQ3+Nf8Xufi4oyP3Y7F38OvnPbrmuLOTlt1XPs
Xh4t5BYuAL11Vc1bj3kEB43BgHnqX8TyxJ3Oj2h10Cp0aRCA1yfzqBy2ujFRBgWh
J6k6k7p5mi/0pHyi614fVMvkeQsAiODA9daLPNBm4lC95qJ4C8f1SL7s8pJXu5tx
g/427rzhScfYpcJDpccI8fMrCk7WcA+oZrvrOQYnUhOWKhGWHCW+dxEeDgeKOUIr
vJ/+dbnGXMDE5g==
-----END CERTIFICATE-----
Generated at Wed Sep 30 20:13:12 2026 by rpki-client