Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
File: k19T9eQH5VojMNnVI6gEwHIspWU.mft (raw, json)
Hash identifier: IUCNbX0m0IYpiH6OtzzAM0ytJN80fewKtyzrVQP9ZY4=
Subject key identifier: 09:97:FB:E4:9B:83:4C:E5:52:7A:E9:13:8A:11:EE:39:30:9F:E0:4D
Authority key identifier: 93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
Certificate issuer: /CN=935f53f5e407e55a2330d9d523a804c0722ca565
Certificate serial: 01A129C3912F40F381CBAE48466F2E14C948
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 07:00:44 +0000
Manifest this update: Sun 11 Oct 2026 07:00:44 +0000
Manifest next update: Mon 12 Oct 2026 07:00:44 +0000
Files and hashes: 1: GsOQ3vHLALBSt2vVQO29hA2BDVs.roa (hash: aWsUfnYc/JWm4k92bPXDyfEmKfbouMQNVW8ooA99juw=)
2: gN_Aa7qhIr8AwNwNkVB5BOV65iA.roa (hash: 8UqEhKXsnSJXNjsmPY0ghzVvMiK8gZZNf/NDxzYBX1Y=)
3: k19T9eQH5VojMNnVI6gEwHIspWU.crl (hash: /KYR1XCa/RH9TljpJ5y+j4vJrGS58cp1EXBSpXOX+NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:91:2f:40:f3:81:cb:ae:48:46:6f:2e:14:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935f53f5e407e55a2330d9d523a804c0722ca565
Validity
Not Before: Oct 11 07:00:44 2026 GMT
Not After : Oct 12 07:00:44 2026 GMT
Subject: CN=0997fbe49b834ce5527ae9138a11ee39309fe04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:09:c7:f4:e1:69:f0:d9:5c:38:24:a8:08:
49:b8:bd:a1:a2:d2:48:44:7a:57:7d:66:5c:c1:be:
6b:05:c8:90:20:c8:b6:5d:b0:6e:0f:dc:86:59:36:
85:b7:65:f4:e1:fb:44:d7:f6:7a:a6:c0:c6:de:63:
e4:eb:c7:d4:1c:ab:fc:0b:37:65:a5:e5:1c:0e:d5:
b5:a9:7e:9f:d8:a9:6a:05:06:fd:2f:1a:30:d4:d2:
d6:e1:9f:84:42:3a:18:a6:37:d8:14:c7:aa:38:da:
4d:86:80:1b:03:51:e4:3b:e1:df:0d:ed:58:18:6f:
d1:06:78:d4:68:9e:d6:25:91:aa:4f:a4:d2:7a:ac:
d6:a7:ad:5e:21:75:d3:0c:45:64:6b:e2:0e:0d:26:
be:36:41:bb:64:2c:57:aa:83:8f:87:19:f9:84:b1:
92:4b:23:3e:65:9a:c7:6e:34:7a:01:d4:8f:9c:26:
85:21:b4:87:b6:42:e8:bc:a5:25:4d:b1:0c:e0:51:
93:4d:60:f3:3b:77:2d:68:4e:6a:1b:45:7f:d8:4c:
bb:3a:1b:fe:09:f8:21:b3:dc:e3:20:e9:24:e6:a0:
e5:29:ea:e9:6c:ec:d5:b8:31:50:04:ff:66:67:c4:
39:0c:af:63:45:83:e9:83:1e:8f:08:32:2d:f6:30:
af:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:FB:E4:9B:83:4C:E5:52:7A:E9:13:8A:11:EE:39:30:9F:E0:4D
X509v3 Authority Key Identifier:
keyid:93:5F:53:F5:E4:07:E5:5A:23:30:D9:D5:23:A8:04:C0:72:2C:A5:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k19T9eQH5VojMNnVI6gEwHIspWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8b554c-0cef-41b3-ba3b-2d5d6884173f/1/k19T9eQH5VojMNnVI6gEwHIspWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:76:7e:88:4d:20:41:d9:9a:e2:c8:05:cc:1e:2c:2c:64:0a:
85:b0:62:59:99:09:08:79:9c:1a:a2:d9:0e:50:61:e7:c5:91:
c5:a8:bd:5d:6f:8f:6d:d0:9c:b5:2c:05:59:ec:ce:d0:b9:ce:
ec:98:35:16:a5:8f:c9:12:ac:55:3b:5d:de:b1:43:c4:c0:64:
6f:e4:80:e8:d6:2a:ef:f4:b4:0e:0b:c7:d1:df:6d:4e:c0:7d:
33:ed:4a:1c:15:70:6a:93:23:a8:d6:14:a4:03:7c:8c:e1:0c:
86:6c:65:32:6d:f0:dc:12:ab:78:5b:bb:ff:24:80:3a:10:95:
f7:60:f4:26:d5:65:45:35:c6:3a:93:59:4a:f1:6e:7f:6f:24:
44:f1:2a:0a:7d:4f:d5:d4:88:5c:a6:38:c9:03:4c:3e:00:3e:
18:a1:e4:7f:e7:ed:6f:cb:46:4c:18:ce:0e:3a:85:05:58:6a:
c5:1b:f9:bc:f0:52:29:0e:c2:d4:9b:90:ea:98:63:f2:88:44:
b0:b2:19:d8:ef:15:9e:a8:2e:e8:e9:98:0c:19:70:bc:11:48:
05:ae:27:ca:92:2c:a4:45:b1:80:5b:05:22:2e:74:eb:2e:b8:
ad:09:3b:b9:b0:2d:67:ec:08:dc:b3:e0:42:c3:cd:79:0c:ef:
59:26:51:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpw5EvQPOBy65IRm8uFMlIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNWY1M2Y1ZTQwN2U1NWEyMzMwZDlkNTIzYTgwNGMwNzIy
Y2E1NjUwHhcNMjYxMDExMDcwMDQ0WhcNMjYxMDEyMDcwMDQ0WjAzMTEwLwYDVQQD
EygwOTk3ZmJlNDliODM0Y2U1NTI3YWU5MTM4YTExZWUzOTMwOWZlMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4MJx/ThafDZXDgkqAhJuL2hotJI
RHpXfWZcwb5rBciQIMi2XbBuD9yGWTaFt2X04ftE1/Z6psDG3mPk68fUHKv8Czdl
peUcDtW1qX6f2KlqBQb9Lxow1NLW4Z+EQjoYpjfYFMeqONpNhoAbA1HkO+HfDe1Y
GG/RBnjUaJ7WJZGqT6TSeqzWp61eIXXTDEVka+IODSa+NkG7ZCxXqoOPhxn5hLGS
SyM+ZZrHbjR6AdSPnCaFIbSHtkLovKUlTbEM4FGTTWDzO3ctaE5qG0V/2Ey7Ohv+
Cfghs9zjIOkk5qDlKerpbOzVuDFQBP9mZ8Q5DK9jRYPpgx6PCDIt9jCvrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmX++Sbg0zlUnrpE4oR7jkwn+BNMB8GA1UdIwQY
MBaAFJNfU/XkB+VaIzDZ1SOoBMByLKVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2It
MmQ1ZDY4ODQxNzNmLzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84YjU1NGMtMGNlZi00MWIzLWJhM2ItMmQ1ZDY4ODQxNzNm
LzEvazE5VDllUUg1Vm9qTU5uVkk2Z0V3SElzcFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHZ+iE0g
Qdma4sgFzB4sLGQKhbBiWZkJCHmcGqLZDlBh58WRxai9XW+PbdCctSwFWezO0LnO
7Jg1FqWPyRKsVTtd3rFDxMBkb+SA6NYq7/S0DgvH0d9tTsB9M+1KHBVwapMjqNYU
pAN8jOEMhmxlMm3w3BKreFu7/ySAOhCV92D0JtVlRTXGOpNZSvFuf28kRPEqCn1P
1dSIXKY4yQNMPgA+GKHkf+ftb8tGTBjODjqFBVhqxRv5vPBSKQ7C1JuQ6phj8ohE
sLIZ2O8Vnqgu6OmYDBlwvBFIBa4nypIspEWxgFsFIi506y64rQk7ubAtZ+wI3LPg
QsPNeQzvWSZRZg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 13:47:40 2026 by rpki-client