Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File: m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier: NJ8RaFgFiPilsmk7loolTZdb0Pp8LSYRkXCMC+j55ck=
Subject key identifier: FE:3A:7B:28:AE:BE:7E:5C:C9:B3:89:7E:C3:6C:7E:95:F6:96:9C:8E
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer: /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial: 01A0D64BB23D090755769238170CA635D9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 02:01:20 +0000
Manifest this update: Fri 25 Sep 2026 02:01:20 +0000
Manifest next update: Sat 26 Sep 2026 02:01:20 +0000
Files and hashes: 1: 9LnJacci_erR2cZHVgN_5AemqSk.roa (hash: Su3buYvO3+g5Oi2bVgAQYC5BfjCnL0g2ZF/RyRer+zU=)
2: B8hP3lu4x-v6AGdd-NBMTGbKn60.roa (hash: J5ElDZLvmlw9NvMlGd8Bg3jT1oh60NlhHSd2q9Cwhys=)
3: EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa (hash: 6sbRbAzpkVZnbmwGmFls1zgBgBPqZlTzKVvW2qe/0sQ=)
4: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: JDlkdZq5AKtsTcXB8CE95GUOB7RYUqAtopU75rb2T+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:b2:3d:09:07:55:76:92:38:17:0c:a6:35:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Validity
Not Before: Sep 25 02:01:20 2026 GMT
Not After : Sep 26 02:01:20 2026 GMT
Subject: CN=fe3a7b28aebe7e5cc9b3897ec36c7e95f6969c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:58:a4:5d:e4:88:d4:dd:d6:e0:a5:f4:0c:
82:5b:05:90:42:25:4d:0c:e4:14:66:2a:3e:10:ae:
9e:b4:6e:1b:ba:97:d1:2f:8e:95:79:de:07:7f:02:
99:5d:e3:97:37:f6:49:c5:b7:6e:57:47:bc:5d:64:
2a:60:7e:b5:54:07:ff:d4:66:92:b9:2e:5e:9b:60:
18:65:f8:9e:49:cb:35:ee:83:de:1d:a7:87:6e:63:
0f:8a:cd:35:ad:e5:84:eb:9b:61:9e:70:e9:14:8c:
39:0b:e7:04:7a:49:95:97:50:0a:0c:c7:ce:dc:62:
c4:26:9a:68:2c:82:a2:11:06:85:e7:f9:7a:27:fa:
6a:dc:c1:38:0b:b1:8b:df:7a:6e:f1:38:3e:92:c7:
00:04:0c:c1:77:a9:a3:33:b3:d7:88:63:e9:91:db:
19:e3:bb:b4:18:5b:ed:16:23:f9:e4:b2:63:5c:46:
10:1f:34:ec:7d:9d:81:aa:4b:bb:26:96:1f:6d:48:
f6:72:3a:f2:80:f6:98:b3:bf:ae:15:04:14:73:a7:
22:34:31:b3:59:23:dd:fd:a5:78:5b:7e:ff:31:64:
da:a5:77:e2:23:96:3f:a8:c1:62:8f:87:37:21:c5:
a4:56:41:a9:93:79:63:b3:0b:f3:86:26:20:99:1b:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3A:7B:28:AE:BE:7E:5C:C9:B3:89:7E:C3:6C:7E:95:F6:96:9C:8E
X509v3 Authority Key Identifier:
keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:8d:1e:36:ab:23:ca:d4:7c:b5:69:0f:6d:8a:f4:52:ef:32:
f4:fa:22:81:cb:48:c7:6e:aa:c9:a8:45:5e:57:5c:9e:82:58:
c6:55:68:a7:34:60:09:d3:85:a0:03:9a:5b:09:d1:3b:19:ea:
ac:9f:58:cb:4e:25:40:90:ba:57:16:ef:dc:de:93:12:f9:4e:
e5:4d:3b:9c:ed:87:23:eb:29:74:ac:f9:05:e0:35:44:47:b6:
5e:98:34:69:bb:2d:dc:49:92:ab:9c:0b:5e:6d:19:b5:06:1a:
f6:7a:7b:cd:70:86:88:b8:61:98:4f:89:b0:ba:55:29:fb:84:
ed:ed:21:62:8f:93:da:3b:3d:9d:39:10:43:fc:81:e0:ba:af:
f0:05:38:c0:64:cf:e6:0f:8e:0d:55:d2:1c:85:ac:23:9e:e1:
20:60:ab:19:5b:64:d7:f1:d3:01:d7:fd:98:9e:f6:80:82:7d:
ec:c2:7b:1f:fd:6c:8d:27:db:fc:ab:11:70:87:10:0d:fb:6d:
a7:2f:e3:0d:93:68:7b:a4:f5:e2:3f:bc:22:c8:a1:06:95:11:
01:62:fa:74:d4:b4:45:5b:ea:e2:11:ab:cf:29:43:0f:38:d0:
72:53:a7:cb:06:c8:18:10:a0:59:e4:d1:10:ef:0d:f7:16:55:
43:b4:b2:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS7I9CQdVdpI4FwymNdn1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODE1MWFlMTY0YTViNzgyYjEwM2RlN2Y3YzhhODk0ODkz
MmFlYmYwHhcNMjYwOTI1MDIwMTIwWhcNMjYwOTI2MDIwMTIwWjAzMTEwLwYDVQQD
EyhmZTNhN2IyOGFlYmU3ZTVjYzliMzg5N2VjMzZjN2U5NWY2OTY5YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnFYpF3kiNTd1uCl9AyCWwWQQiVN
DOQUZio+EK6etG4bupfRL46Ved4HfwKZXeOXN/ZJxbduV0e8XWQqYH61VAf/1GaS
uS5em2AYZfieScs17oPeHaeHbmMPis01reWE65thnnDpFIw5C+cEekmVl1AKDMfO
3GLEJppoLIKiEQaF5/l6J/pq3ME4C7GL33pu8Tg+kscABAzBd6mjM7PXiGPpkdsZ
47u0GFvtFiP55LJjXEYQHzTsfZ2Bqku7JpYfbUj2cjrygPaYs7+uFQQUc6ciNDGz
WSPd/aV4W37/MWTapXfiI5Y/qMFij4c3IcWkVkGpk3ljswvzhiYgmRslqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP46eyiuvn5cybOJfsNsfpX2lpyOMB8GA1UdIwQY
MBaAFJuBUa4WSlt4KxA95/fIqJSJMq6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWIt
ZGExZmU5ZWJlZThlLzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWItZGExZmU5ZWJlZThl
LzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy40eNqsj
ytR8tWkPbYr0Uu8y9PoigctIx26qyahFXldcnoJYxlVopzRgCdOFoAOaWwnROxnq
rJ9Yy04lQJC6Vxbv3N6TEvlO5U07nO2HI+spdKz5BeA1REe2Xpg0abst3EmSq5wL
Xm0ZtQYa9np7zXCGiLhhmE+JsLpVKfuE7e0hYo+T2js9nTkQQ/yB4Lqv8AU4wGTP
5g+ODVXSHIWsI57hIGCrGVtk1/HTAdf9mJ72gIJ97MJ7H/1sjSfb/KsRcIcQDftt
py/jDZNoe6T14j+8IsihBpURAWL6dNS0RVvq4hGrzylDDzjQclOnywbIGBCgWeTR
EO8N9xZVQ7Sy7A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:45:20 2026 by rpki-client