Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: QT4FrkIcViTD2s5vZADlaV4X3ZoR4gD9J7MZfzbeBHo=
Subject key identifier: 3B:2A:4B:7C:94:77:E1:60:5D:4B:DA:6B:C3:47:FD:57:03:34:22:F3
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 01A130338C07A14CA502E4777C4D7164E3CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: 0178
Signing time: Mon 12 Oct 2026 13:00:46 +0000
Manifest this update: Mon 12 Oct 2026 13:00:46 +0000
Manifest next update: Tue 13 Oct 2026 13:00:46 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: l9oEuq0ge6Vrs/jc8Zls+1T1MWgabTxwg+SZWds1dBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:33:8c:07:a1:4c:a5:02:e4:77:7c:4d:71:64:e3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Oct 12 13:00:46 2026 GMT
Not After : Oct 13 13:00:46 2026 GMT
Subject: CN=3b2a4b7c9477e1605d4bda6bc347fd57033422f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:65:fd:d4:95:a0:1b:47:d7:88:f7:10:91:af:
58:50:2c:fd:8c:07:63:d4:c4:da:5b:70:ea:ef:aa:
04:5d:d9:01:3e:7c:97:89:8d:94:60:59:1b:01:9f:
ae:51:ed:bf:82:6a:90:ea:8f:aa:a9:a8:74:c0:79:
e2:f9:3e:a2:bc:df:bf:ae:17:cb:44:76:37:20:d6:
36:39:e3:e5:1b:6b:a4:66:15:b3:6f:4d:5c:3d:b0:
97:da:88:ef:a3:e5:65:eb:fc:81:99:be:24:f8:d6:
cf:ad:59:c0:73:68:2e:98:63:51:ab:82:75:8e:64:
64:65:2e:76:d3:96:d8:85:35:be:40:d6:cb:93:98:
e6:4f:40:15:ff:6d:67:72:f5:90:f4:f7:36:94:93:
0b:aa:24:72:61:b2:fe:c5:a5:b5:86:77:b8:e5:94:
0d:c9:4a:cf:74:84:a6:7e:22:ed:a1:66:3a:f1:aa:
49:ad:e7:6a:9b:ab:75:2f:5b:5b:67:d8:9d:e9:3d:
8f:39:3d:ef:3e:a0:dc:92:05:64:18:ea:82:b1:00:
7f:2f:40:6e:7b:2c:59:79:d3:54:8f:97:31:77:67:
70:b9:b9:da:6f:ce:c8:8f:c2:73:5d:61:f3:af:06:
ea:d6:cf:27:3a:c7:26:81:9a:48:40:92:f4:5a:ce:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:4B:7C:94:77:E1:60:5D:4B:DA:6B:C3:47:FD:57:03:34:22:F3
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:87:dc:70:55:a5:e8:b3:08:ff:c0:a4:b1:81:63:47:34:c4:
0b:56:9e:fb:f5:bf:e8:07:be:09:01:6d:a5:c8:d3:c2:1f:d6:
49:40:ba:4a:e3:c1:77:b7:68:b2:59:d2:6c:0b:e8:2d:87:4f:
87:7b:cb:ea:02:96:6f:85:d8:26:b0:fb:40:bb:63:c6:6d:61:
b8:48:21:e0:da:cc:e1:45:6e:54:4b:2b:54:6b:86:27:0b:6e:
bf:c3:20:f6:d5:dd:b5:fb:67:e6:13:bd:25:4f:9a:a1:90:5d:
42:24:cd:77:67:8d:d3:29:2b:9b:a8:be:b7:61:e8:05:e1:57:
fb:48:3d:bb:ca:87:9b:05:6c:2c:d1:bc:63:83:a7:29:2d:cb:
16:33:9c:fd:36:fc:fb:e4:cc:44:32:f0:c7:73:8e:d1:de:2f:
a3:57:a6:08:58:24:4d:33:33:31:7e:91:81:22:e6:56:a1:54:
fb:90:06:8f:f9:fe:21:9f:c0:be:c4:c0:ae:01:9d:3b:36:bf:
c4:35:ad:03:77:50:25:ec:cd:b4:1b:f7:9f:97:c7:ac:5f:93:
54:d0:40:72:8b:c8:8f:2f:55:36:37:dc:b2:0b:16:c9:75:fc:
17:ce:db:cd:8b:b7:78:f2:a8:82:a7:64:5c:3b:34:fc:12:62:
c6:4e:f6:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEwM4wHoUylAuR3fE1xZOPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ODZmNGIyMTUwODE1ZWRhNzgzZTdmM2NmYjliN2U1M2Nl
N2Q5N2YwHhcNMjYxMDEyMTMwMDQ2WhcNMjYxMDEzMTMwMDQ2WjAzMTEwLwYDVQQD
EygzYjJhNGI3Yzk0NzdlMTYwNWQ0YmRhNmJjMzQ3ZmQ1NzAzMzQyMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WX91JWgG0fXiPcQka9YUCz9jAdj
1MTaW3Dq76oEXdkBPnyXiY2UYFkbAZ+uUe2/gmqQ6o+qqah0wHni+T6ivN+/rhfL
RHY3INY2OePlG2ukZhWzb01cPbCX2ojvo+Vl6/yBmb4k+NbPrVnAc2gumGNRq4J1
jmRkZS5205bYhTW+QNbLk5jmT0AV/21ncvWQ9Pc2lJMLqiRyYbL+xaW1hne45ZQN
yUrPdISmfiLtoWY68apJredqm6t1L1tbZ9id6T2POT3vPqDckgVkGOqCsQB/L0Bu
eyxZedNUj5cxd2dwubnab87Ij8JzXWHzrwbq1s8nOscmgZpIQJL0Ws5mmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsqS3yUd+FgXUvaa8NH/VcDNCLzMB8GA1UdIwQY
MBaAFJiG9LIVCBXtp4Pn88+5t+U859l/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81ZTRkN2UtYWMyMS00ZjAyLTk1ODEt
ZjAwZDkyZGMwN2I4LzEvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81ZTRkN2UtYWMyMS00ZjAyLTk1ODEtZjAwZDkyZGMwN2I4
LzEvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIfccFWl
6LMI/8CksYFjRzTEC1ae+/W/6Ae+CQFtpcjTwh/WSUC6SuPBd7doslnSbAvoLYdP
h3vL6gKWb4XYJrD7QLtjxm1huEgh4NrM4UVuVEsrVGuGJwtuv8Mg9tXdtftn5hO9
JU+aoZBdQiTNd2eN0ykrm6i+t2HoBeFX+0g9u8qHmwVsLNG8Y4OnKS3LFjOc/Tb8
++TMRDLwx3OO0d4vo1emCFgkTTMzMX6RgSLmVqFU+5AGj/n+IZ/AvsTArgGdOza/
xDWtA3dQJezNtBv3n5fHrF+TVNBAcovIjy9VNjfcsgsWyXX8F87bzYu3ePKogqdk
XDs0/BJixk72eg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 16:42:45 2026 by rpki-client