Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.mft
File: 9H2J1RgGy5vj1QwzuozdsyZWzyo.mft (raw, json)
Hash identifier: YwUu208N/mh4H2wIzy7svXg0b2dQZTOKlgL3YlloVVI=
Subject key identifier: 73:5C:F0:7A:E9:29:21:D1:79:1F:5D:98:D1:05:38:1E:8B:92:E5:2D
Authority key identifier: F4:7D:89:D5:18:06:CB:9B:E3:D5:0C:33:BA:8C:DD:B3:26:56:CF:2A
Certificate issuer: /CN=f47d89d51806cb9be3d50c33ba8cddb32656cf2a
Certificate serial: 01A0D2DDFE317F490CEA7238BAABB758B084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H2J1RgGy5vj1QwzuozdsyZWzyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.mft
Manifest number: 3A
Signing time: Thu 24 Sep 2026 10:02:38 +0000
Manifest this update: Thu 24 Sep 2026 10:02:38 +0000
Manifest next update: Fri 25 Sep 2026 10:02:38 +0000
Files and hashes: 1: 7aRjIzKVgauNWSon7RF4ecHHkYg.roa (hash: WTxtj/NehA+KRPYkjlagyqYnErUMawBY6gLMk6AdSMw=)
2: 9H2J1RgGy5vj1QwzuozdsyZWzyo.crl (hash: xSjxLEyAGnnGwCEKA4xhBR3n4Tth5/jLdGtORg2LIjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H2J1RgGy5vj1QwzuozdsyZWzyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:fe:31:7f:49:0c:ea:72:38:ba:ab:b7:58:b0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47d89d51806cb9be3d50c33ba8cddb32656cf2a
Validity
Not Before: Sep 24 10:02:38 2026 GMT
Not After : Sep 25 10:02:38 2026 GMT
Subject: CN=735cf07ae92921d1791f5d98d105381e8b92e52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:3a:92:18:82:b6:c2:89:39:f8:bf:9e:69:
4b:2a:df:74:a6:fb:b3:e7:09:83:47:50:51:37:14:
04:a5:e3:bb:95:ad:09:12:d4:44:9d:01:db:1c:35:
c1:f5:cc:76:0f:de:36:f2:81:b7:bf:c7:1d:0b:d8:
28:e2:7e:6f:e2:9b:f2:03:f3:2c:e2:8f:a4:85:f1:
df:0d:a8:e3:ab:10:00:7f:5e:6c:1f:ad:5b:f0:1c:
be:e4:ae:f9:38:c8:97:d8:17:41:72:75:79:7f:3a:
82:e2:c3:81:97:87:d4:50:30:d3:b5:0b:1f:3f:7a:
4c:bc:45:c4:89:52:0b:f1:da:76:aa:04:0c:8b:bf:
22:c1:63:5b:09:0d:74:cf:e1:da:a8:2d:1c:7a:42:
c6:a2:c6:19:e7:19:d3:98:b2:18:67:28:8e:b7:f4:
60:aa:f1:6f:e0:b7:53:ef:3b:85:e8:49:ac:11:62:
94:83:2a:d5:bd:4d:36:71:e6:aa:3e:f7:04:28:43:
d2:c7:09:43:d1:44:7c:c8:7d:36:ae:af:2a:c0:c1:
16:96:c8:6d:44:0b:35:8f:de:61:54:34:b1:9d:81:
9a:a0:24:e6:38:96:c5:91:8d:6d:2f:3b:df:2d:58:
97:81:49:2e:30:25:4f:70:b6:74:9f:3b:44:c1:82:
8f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:F0:7A:E9:29:21:D1:79:1F:5D:98:D1:05:38:1E:8B:92:E5:2D
X509v3 Authority Key Identifier:
keyid:F4:7D:89:D5:18:06:CB:9B:E3:D5:0C:33:BA:8C:DD:B3:26:56:CF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H2J1RgGy5vj1QwzuozdsyZWzyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5e7832-9d1d-413b-a109-3d59a99189a8/1/9H2J1RgGy5vj1QwzuozdsyZWzyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bc:32:78:8c:cc:1f:95:05:bd:ed:b6:38:27:89:b1:cb:71:
c7:04:e0:ae:87:6e:bc:df:ce:d5:39:a3:0b:78:f1:a5:91:89:
42:7b:c3:3d:16:70:78:bb:65:c9:0f:54:e9:7b:02:d8:2c:a0:
f2:29:d9:14:ad:4b:ce:18:35:97:05:82:2f:94:11:5f:d2:45:
32:96:c4:9d:a3:d9:ef:0d:2a:0e:a5:65:20:ac:32:c2:cf:43:
1d:b8:67:46:ac:d0:d6:f9:96:a6:b2:6d:e3:4c:05:67:bc:9c:
18:55:24:b5:c8:25:17:3e:b6:6b:cf:3c:cd:b0:f9:85:fa:0a:
eb:63:43:7a:3c:42:68:69:b4:c4:4d:ea:11:9c:73:cc:91:91:
0d:ae:c9:1e:85:72:00:8f:2d:2a:c0:c3:fa:32:64:43:be:cb:
2b:1c:10:5f:19:e1:8e:b1:21:39:e8:de:f1:6c:30:3c:31:63:
27:32:1c:17:71:ee:e2:c7:2f:10:2c:97:89:84:02:10:2d:d6:
62:9d:62:3c:d4:f9:74:38:b9:e9:17:08:20:98:c1:75:87:59:
fe:bd:19:42:fe:8a:b2:80:cc:94:c7:82:a4:ba:d0:36:5d:70:
4c:ff:fa:d1:ec:04:5b:78:7b:85:c6:30:13:4a:c9:43:ca:41:
4c:8a:8c:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3f4xf0kM6nI4uqu3WLCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2Q4OWQ1MTgwNmNiOWJlM2Q1MGMzM2JhOGNkZGIzMjY1
NmNmMmEwHhcNMjYwOTI0MTAwMjM4WhcNMjYwOTI1MTAwMjM4WjAzMTEwLwYDVQQD
Eyg3MzVjZjA3YWU5MjkyMWQxNzkxZjVkOThkMTA1MzgxZThiOTJlNTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtN06khiCtsKJOfi/nmlLKt90pvuz
5wmDR1BRNxQEpeO7la0JEtREnQHbHDXB9cx2D9428oG3v8cdC9go4n5v4pvyA/Ms
4o+khfHfDajjqxAAf15sH61b8By+5K75OMiX2BdBcnV5fzqC4sOBl4fUUDDTtQsf
P3pMvEXEiVIL8dp2qgQMi78iwWNbCQ10z+HaqC0cekLGosYZ5xnTmLIYZyiOt/Rg
qvFv4LdT7zuF6EmsEWKUgyrVvU02ceaqPvcEKEPSxwlD0UR8yH02rq8qwMEWlsht
RAs1j95hVDSxnYGaoCTmOJbFkY1tLzvfLViXgUkuMCVPcLZ0nztEwYKPnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNc8HrpKSHReR9dmNEFOB6LkuUtMB8GA1UdIwQY
MBaAFPR9idUYBsub49UMM7qM3bMmVs8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUgySjFSZ0d5NXZqMVF3enVvemRzeVpXenlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81ZTc4MzItOWQxZC00MTNiLWExMDkt
M2Q1OWE5OTE4OWE4LzEvOUgySjFSZ0d5NXZqMVF3enVvemRzeVpXenlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81ZTc4MzItOWQxZC00MTNiLWExMDktM2Q1OWE5OTE4OWE4
LzEvOUgySjFSZ0d5NXZqMVF3enVvemRzeVpXenlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbwyeIzM
H5UFve22OCeJsctxxwTgroduvN/O1TmjC3jxpZGJQnvDPRZweLtlyQ9U6XsC2Cyg
8inZFK1Lzhg1lwWCL5QRX9JFMpbEnaPZ7w0qDqVlIKwyws9DHbhnRqzQ1vmWprJt
40wFZ7ycGFUktcglFz62a888zbD5hfoK62NDejxCaGm0xE3qEZxzzJGRDa7JHoVy
AI8tKsDD+jJkQ77LKxwQXxnhjrEhOeje8WwwPDFjJzIcF3Hu4scvECyXiYQCEC3W
Yp1iPNT5dDi56RcIIJjBdYdZ/r0ZQv6KsoDMlMeCpLrQNl1wTP/60ewEW3h7hcYw
E0rJQ8pBTIqM7Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:16:16 2026 by rpki-client