Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: YPGRl2AndypJx4xPYuTJWcOgSdC2TqNZ21OdBRS0/SQ=
Subject key identifier: E7:16:12:A4:F5:DB:41:B2:15:2B:24:FE:2F:03:B4:F8:A4:31:F4:2F
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 01A0D4268C33F303F8913D538F30C9FD1C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 12D9
Signing time: Thu 24 Sep 2026 16:01:31 +0000
Manifest this update: Thu 24 Sep 2026 16:01:31 +0000
Manifest next update: Fri 25 Sep 2026 16:01:31 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: BIGGqrGsTUjEnPjUiRCjM9thEzwhteZlMkV1Zp9r1eA=)
2: H6y7FRGe2OSBbFIjaqZT3Ye0FjM.roa (hash: U6dbvSJYipDEAI96TSbJISnUyXjBkTAwoHhgv4g0uO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:8c:33:f3:03:f8:91:3d:53:8f:30:c9:fd:1c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Sep 24 16:01:31 2026 GMT
Not After : Sep 25 16:01:31 2026 GMT
Subject: CN=e71612a4f5db41b2152b24fe2f03b4f8a431f42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:b4:44:77:58:8d:d3:4e:81:7a:99:ca:aa:
ee:de:83:6c:7c:6d:90:75:7a:3b:11:1c:12:83:27:
5a:92:ec:fc:8c:d8:a2:2a:0e:9f:fe:52:19:50:11:
a5:d5:b4:f5:b5:d5:f1:79:86:03:e4:c7:6f:35:8e:
7e:e7:cc:9c:01:34:68:e9:69:03:b5:c2:e3:6f:b3:
d7:6d:e5:50:9d:47:87:06:dc:6a:01:cf:e1:89:22:
6b:9f:a6:84:35:10:86:89:b1:23:33:52:a7:25:3c:
5e:e6:ad:fe:f6:67:63:f1:e0:08:d7:d3:fb:01:16:
fa:4c:32:48:23:23:fd:7f:52:cb:1d:04:8a:ad:3f:
75:8e:b9:19:15:15:59:3b:9e:b5:16:6c:3f:dd:1b:
63:b8:36:a0:7b:ea:89:3f:d4:aa:eb:1b:22:0a:80:
b7:79:38:25:26:b1:a0:bc:9b:c0:9e:52:a9:45:bd:
a3:d6:66:91:c6:47:21:65:f7:d9:91:1f:c5:36:7d:
82:eb:7f:e6:d3:43:a4:d3:cc:6a:14:2b:88:28:f0:
4c:87:cc:8a:da:a0:51:1f:07:02:f4:78:02:92:79:
f3:12:aa:8e:21:f1:32:97:f3:7a:19:35:03:ce:aa:
fd:c3:2b:7b:3a:69:63:0e:38:a1:a7:64:e2:df:45:
6d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:16:12:A4:F5:DB:41:B2:15:2B:24:FE:2F:03:B4:F8:A4:31:F4:2F
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c6:23:14:11:91:0f:71:fa:f9:99:04:a3:b5:fe:da:07:e2:
ed:a2:94:f7:e6:6d:5a:ba:55:c6:c1:36:3d:43:a3:56:fe:07:
25:3e:6a:bf:0b:ff:5e:cf:26:85:91:cb:c2:59:b1:1a:47:f9:
de:e7:d6:4c:7d:10:55:80:a9:44:31:f8:21:8f:b9:c1:6b:9d:
84:9d:14:42:fa:6d:6b:9f:53:54:1d:56:90:b1:4f:2f:9d:a1:
59:b7:89:d8:86:a5:8d:2c:bd:38:ef:59:7e:f3:08:f3:3e:fd:
71:4b:46:00:8f:d5:c6:dd:21:75:b0:87:be:16:b1:54:82:87:
71:08:c8:a1:0d:ae:35:2c:ee:c0:50:f4:06:0f:f6:45:4d:79:
5a:d3:51:11:e2:aa:4d:35:45:ba:bd:f8:6d:56:fc:97:29:e3:
b5:5b:c4:87:57:24:0f:c6:8d:b2:ce:76:f4:2c:d7:92:ad:42:
c4:dc:df:3c:f7:76:3b:e3:b4:29:ac:c6:85:d7:3f:9a:d5:71:
5a:4c:39:0b:ed:e2:ea:75:c1:c8:5c:65:7e:b9:45:d9:85:4d:
13:ad:a5:6d:66:ae:d8:2a:d3:75:12:3a:4b:36:e2:a1:1e:6d:
2a:19:21:ab:58:46:2d:3f:ee:88:18:8e:29:c3:a4:86:9e:3f:
46:15:81:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUJowz8wP4kT1TjzDJ/RxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZGMyNmM2MjZjNTFjNWRlZjZmMjQ2NmYzOGY1NWIyNTAy
OTY0MmYwHhcNMjYwOTI0MTYwMTMxWhcNMjYwOTI1MTYwMTMxWjAzMTEwLwYDVQQD
EyhlNzE2MTJhNGY1ZGI0MWIyMTUyYjI0ZmUyZjAzYjRmOGE0MzFmNDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXm0RHdYjdNOgXqZyqru3oNsfG2Q
dXo7ERwSgydakuz8jNiiKg6f/lIZUBGl1bT1tdXxeYYD5MdvNY5+58ycATRo6WkD
tcLjb7PXbeVQnUeHBtxqAc/hiSJrn6aENRCGibEjM1KnJTxe5q3+9mdj8eAI19P7
ARb6TDJIIyP9f1LLHQSKrT91jrkZFRVZO561Fmw/3RtjuDage+qJP9Sq6xsiCoC3
eTglJrGgvJvAnlKpRb2j1maRxkchZffZkR/FNn2C63/m00Ok08xqFCuIKPBMh8yK
2qBRHwcC9HgCknnzEqqOIfEyl/N6GTUDzqr9wyt7OmljDjihp2Ti30Vt5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcWEqT120GyFSsk/i8DtPikMfQvMB8GA1UdIwQY
MBaAFPTcJsYmxRxd728kZvOPVbJQKWQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODct
MjNlMWRhZGYxMDZjLzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZj
LzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcYjFBGR
D3H6+ZkEo7X+2gfi7aKU9+ZtWrpVxsE2PUOjVv4HJT5qvwv/Xs8mhZHLwlmxGkf5
3ufWTH0QVYCpRDH4IY+5wWudhJ0UQvpta59TVB1WkLFPL52hWbeJ2IaljSy9OO9Z
fvMI8z79cUtGAI/Vxt0hdbCHvhaxVIKHcQjIoQ2uNSzuwFD0Bg/2RU15WtNREeKq
TTVFur34bVb8lynjtVvEh1ckD8aNss529CzXkq1CxNzfPPd2O+O0KazGhdc/mtVx
Wkw5C+3i6nXByFxlfrlF2YVNE62lbWau2CrTdRI6SzbioR5tKhkhq1hGLT/uiBiO
KcOkhp4/RhWBMg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:22:14 2026 by rpki-client