Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
File: m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft (raw, json)
Hash identifier: UvAqX/SoI1CW9iJqkk2s8mrDyDypHhnCxwAnwQysd78=
Subject key identifier: 76:69:84:78:95:1A:91:16:40:88:6C:7C:A9:A5:6D:D0:D4:02:71:B0
Authority key identifier: 9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
Certificate issuer: /CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Certificate serial: 01A0E2F578B6D1FCC1C284AE6D9EFCD3A2F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
Manifest number: 0EBA
Signing time: Sun 27 Sep 2026 13:02:13 +0000
Manifest this update: Sun 27 Sep 2026 13:02:13 +0000
Manifest next update: Mon 28 Sep 2026 13:02:13 +0000
Files and hashes: 1: YNGfrZvagg4O4FGkVhnBiiruLx0.roa (hash: /ltwcx7I+h2VdXqUCtGZD3WsmcEgqxtyYnfei2/3ZlQ=)
2: kVcl-lsZR6xyXsxO8aWh944dJv8.roa (hash: wO+8xB9lCvBU2gIRiYR9ejf9p/0a0RGT/tmuLIRs2LY=)
3: m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl (hash: afjrCJmlTmxmfEZCQAGfnBRUnrTEEqevrUCHWlmLvS4=)
4: oK8DgClRz_oA4VjYTOJycO25RE8.roa (hash: HL0prlO8v1UmrZWNdBDiYE7Jz5klWeZulY7cNTFYDKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:78:b6:d1:fc:c1:c2:84:ae:6d:9e:fc:d3:a2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b86bd882e476e4698318f370712f71c2bf50dfc
Validity
Not Before: Sep 27 13:02:13 2026 GMT
Not After : Sep 28 13:02:13 2026 GMT
Subject: CN=76698478951a911640886c7ca9a56dd0d40271b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:22:bb:11:46:dd:8a:7e:bb:60:fb:39:19:
2f:dc:be:60:e6:12:44:45:9c:3b:2b:ec:5f:82:cf:
c5:67:7e:ee:09:b4:d6:2e:74:67:c0:d6:65:03:8f:
e1:56:3c:44:b2:63:c3:20:1e:fa:a2:90:24:35:f3:
a3:08:eb:d8:a3:76:87:d4:7c:f1:ff:42:4d:4e:1b:
73:6b:78:0f:95:c5:f1:be:03:30:4f:4a:36:f8:cf:
ec:c7:b4:98:6f:71:ff:de:fc:c8:21:a0:7a:5f:3e:
34:25:19:cd:32:5b:4d:ed:c4:d3:6a:06:91:87:bb:
95:f6:23:38:0d:49:f0:f3:2b:d2:6b:16:7a:94:23:
0c:38:17:5c:bf:e6:a5:b1:49:a7:fb:db:26:24:18:
3d:1c:31:b9:c4:4c:1f:37:4c:f0:5f:57:6a:3c:8d:
68:40:df:0a:32:12:f1:dc:80:9a:0b:46:86:ad:7f:
d2:a6:61:33:f4:b7:fa:df:4e:2b:49:3b:64:9d:73:
a9:02:fe:4d:b2:3d:2b:44:d5:8a:a4:1f:fc:0e:28:
8d:43:41:7f:0f:de:09:5b:ae:45:ab:4f:c9:81:61:
3e:8a:d4:c9:7f:23:37:87:b1:a7:b5:f7:4e:77:24:
d3:c5:31:72:f6:f4:c2:5e:37:3c:07:d7:56:d1:75:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:69:84:78:95:1A:91:16:40:88:6C:7C:A9:A5:6D:D0:D4:02:71:B0
X509v3 Authority Key Identifier:
keyid:9B:86:BD:88:2E:47:6E:46:98:31:8F:37:07:12:F7:1C:2B:F5:0D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4a9iC5HbkaYMY83BxL3HCv1Dfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7290d5-1ed5-4ca1-96fd-bfc73dd0bbb6/1/m4a9iC5HbkaYMY83BxL3HCv1Dfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c7:78:b3:c9:49:e5:23:c6:89:c6:ba:7d:8a:3f:cb:a7:fc:
8d:ec:1f:d4:fc:d6:e5:00:31:d4:1e:f9:e9:8b:86:d5:c0:a4:
59:41:8f:bd:c8:af:b2:3b:02:7f:15:e5:47:a2:68:a5:e3:66:
72:f7:30:d5:e6:4e:c2:02:17:27:a1:16:ef:9b:70:1f:2b:a9:
a8:09:bf:dc:ec:44:ba:a9:ed:13:e0:89:77:23:30:f7:29:27:
ff:38:23:9c:1b:6c:bb:94:73:f1:55:e8:33:b7:29:90:c0:5f:
35:a8:ac:4b:5c:e6:cd:50:03:ae:14:25:d5:78:5d:25:22:e2:
01:f0:c0:ec:a4:9a:f2:0b:8b:94:d2:f8:eb:41:cf:c6:fa:90:
a8:ac:5c:97:97:64:14:00:c6:58:b6:ed:06:45:4c:38:c0:8a:
98:fd:93:ec:8b:b0:df:39:62:bd:28:e6:ce:01:37:ab:13:c1:
06:72:8c:98:fd:24:4a:e1:5b:55:55:7d:fb:88:fa:78:69:eb:
d0:16:d1:f8:4e:ea:b6:7f:85:65:b7:89:39:93:e3:6b:ea:b5:
0a:84:a9:54:77:ec:0c:ac:98:6f:6a:bf:e5:30:82:b2:f1:eb:
09:3b:eb:48:32:7c:7e:4e:e2:fb:a2:bb:6a:31:c0:06:93:1d:
ab:10:59:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDi9Xi20fzBwoSubZ7806L1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODZiZDg4MmU0NzZlNDY5ODMxOGYzNzA3MTJmNzFjMmJm
NTBkZmMwHhcNMjYwOTI3MTMwMjEzWhcNMjYwOTI4MTMwMjEzWjAzMTEwLwYDVQQD
Eyg3NjY5ODQ3ODk1MWE5MTE2NDA4ODZjN2NhOWE1NmRkMGQ0MDI3MWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0AiuxFG3Yp+u2D7ORkv3L5g5hJE
RZw7K+xfgs/FZ37uCbTWLnRnwNZlA4/hVjxEsmPDIB76opAkNfOjCOvYo3aH1Hzx
/0JNThtza3gPlcXxvgMwT0o2+M/sx7SYb3H/3vzIIaB6Xz40JRnNMltN7cTTagaR
h7uV9iM4DUnw8yvSaxZ6lCMMOBdcv+alsUmn+9smJBg9HDG5xEwfN0zwX1dqPI1o
QN8KMhLx3ICaC0aGrX/SpmEz9Lf6304rSTtknXOpAv5Nsj0rRNWKpB/8DiiNQ0F/
D94JW65Fq0/JgWE+itTJfyM3h7GntfdOdyTTxTFy9vTCXjc8B9dW0XVbqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZphHiVGpEWQIhsfKmlbdDUAnGwMB8GA1UdIwQY
MBaAFJuGvYguR25GmDGPNwcS9xwr9Q38MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQt
YmZjNzNkZDBiYmI2LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni83MjkwZDUtMWVkNS00Y2ExLTk2ZmQtYmZjNzNkZDBiYmI2
LzEvbTRhOWlDNUhia2FZTVk4M0J4TDNIQ3YxRGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMd4s8lJ
5SPGica6fYo/y6f8jewf1PzW5QAx1B756YuG1cCkWUGPvcivsjsCfxXlR6JopeNm
cvcw1eZOwgIXJ6EW75twHyupqAm/3OxEuqntE+CJdyMw9ykn/zgjnBtsu5Rz8VXo
M7cpkMBfNaisS1zmzVADrhQl1XhdJSLiAfDA7KSa8guLlNL460HPxvqQqKxcl5dk
FADGWLbtBkVMOMCKmP2T7Iuw3zlivSjmzgE3qxPBBnKMmP0kSuFbVVV9+4j6eGnr
0BbR+E7qtn+FZbeJOZPja+q1CoSpVHfsDKyYb2q/5TCCsvHrCTvrSDJ8fk7i+6K7
ajHABpMdqxBZgA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:50:11 2026 by rpki-client