Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
File: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft (raw, json)
Hash identifier: AsmMNOVafMxxCqWq+Jo8hRi+NVv1SFf/oqalb251BH0=
Subject key identifier: FD:3A:01:5E:4E:F7:1B:2E:B6:C7:F6:6F:C7:36:FD:C2:2E:F8:17:2C
Authority key identifier: 57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
Certificate issuer: /CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Certificate serial: 01A0D049531A6ACE605B590118E5876289A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
Manifest number: 13A1
Signing time: Wed 23 Sep 2026 22:01:01 +0000
Manifest this update: Wed 23 Sep 2026 22:01:01 +0000
Manifest next update: Thu 24 Sep 2026 22:01:01 +0000
Files and hashes: 1: 1-_jpSCMph4YEFnDVZXKeinAa4rs.roa (hash: koPlDtTY0MG8fOQfuLdRSQ8TOcKCr1znZMqSXkyLo5c=)
2: 1AjCxB6TkTjdHZOvofHm6NOOWfo.roa (hash: d4r+30BMgqiFQp0F8pzgKQ5i8LeY9r3mXEVd6tCLHak=)
3: 4iLxM73eLW6tqIqIEVi5DZshAX8.roa (hash: 5ekQWavsM+QKT46VPj3wV4euAzrbD/nttRzyJzRT1UQ=)
4: KHpN6RsIT8Yzm-xw6bcYpCXAZOw.roa (hash: Gk34if2dhZULdLD9MtyJCGYKzpai4oG9h76wWHnC34Y=)
5: V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl (hash: fhMipcSBloV3V7RroPlfZeJD9uABX9e6d48UuC0fPxI=)
6: oc6e_YKg8912v6VDvH8ngDmsWfM.roa (hash: 41DdsXilU15WJYeBRPmAhAA7JB/24PpGTu8+VCcE5nM=)
7: s_Ocb5RzyDecMqmMmwcXEkDS5kY.roa (hash: zD3icNxMD7rBY0nFB8uq8qwc1AnBefPqnwojqYvDvKo=)
8: xi1lzXnyUQddIBg_g1qFVgVU2YQ.roa (hash: DDQgV9tAfdW2zCM78ncjHvng/XT4BDa4M2SGgGiDpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:53:1a:6a:ce:60:5b:59:01:18:e5:87:62:89:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577021dcdf44b6afdd3810547c55a79bd1a9fa3b
Validity
Not Before: Sep 23 22:01:01 2026 GMT
Not After : Sep 24 22:01:01 2026 GMT
Subject: CN=fd3a015e4ef71b2eb6c7f66fc736fdc22ef8172c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:8f:3d:67:97:2b:0b:e6:e8:82:e3:e3:be:
56:53:c8:eb:cd:5c:95:dd:04:66:7f:b3:04:6c:ff:
c0:d0:ef:fd:e5:4c:5e:32:ad:f1:48:fb:99:68:06:
1e:8c:63:d1:1c:6f:e0:22:28:5f:a1:88:69:0a:0b:
d6:5d:57:4f:94:f6:d0:e8:9b:1d:59:57:fe:bc:cc:
25:b1:df:9a:5b:5f:56:2c:09:a0:13:5d:92:1f:97:
d0:47:92:4c:b6:f6:fd:9f:1f:fa:21:d9:08:c2:91:
62:2c:03:64:50:a2:f4:5b:d8:ef:55:16:ef:c9:91:
fc:3c:04:29:d7:ce:1c:81:ee:6e:d7:63:b2:e1:89:
2e:1f:14:12:6a:28:2b:42:6d:57:9f:a1:c7:e8:ee:
ed:94:b4:65:df:4a:f5:af:49:59:ab:cf:d3:79:18:
04:d1:fe:f5:b5:9a:9e:c3:e1:4e:b2:03:75:5a:cc:
04:4e:42:3f:19:73:18:e3:90:98:08:fb:cd:e7:75:
bc:27:7c:98:78:86:cb:00:19:c7:4d:fb:72:76:01:
e2:cd:d4:f8:ab:b9:03:24:3e:70:12:f3:aa:ff:55:
bb:31:ff:99:fd:5e:b9:9c:65:88:0a:c3:a4:68:6a:
8f:68:b1:14:84:cb:c4:4a:00:09:b4:d0:72:55:01:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3A:01:5E:4E:F7:1B:2E:B6:C7:F6:6F:C7:36:FD:C2:2E:F8:17:2C
X509v3 Authority Key Identifier:
keyid:57:70:21:DC:DF:44:B6:AF:DD:38:10:54:7C:55:A7:9B:D1:A9:FA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/0ac27a-2159-48d7-8bfd-c907ae1c211e/1/V3Ah3N9Etq_dOBBUfFWnm9Gp-js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:ad:b9:24:75:51:ae:a3:ea:5e:ac:6d:57:1d:4b:6e:fd:b2:
1a:39:75:47:46:e3:70:ca:89:8e:7c:88:19:46:be:da:73:54:
dc:77:82:40:55:12:66:12:b5:f4:7d:84:d5:c0:b6:aa:0d:2f:
a7:82:34:6f:a1:67:a3:1c:d2:35:ad:e1:82:44:50:46:1c:55:
4d:d6:fc:4f:bd:52:35:6e:3f:62:46:4a:4b:15:51:d1:28:42:
40:d7:f1:b3:2c:c5:d7:ce:64:a9:55:49:61:67:df:b4:26:92:
e8:fe:07:f9:e0:2f:ca:e5:2f:7e:a5:a0:ed:b8:ad:d1:3f:7e:
51:78:98:3d:82:59:95:35:66:c2:b4:52:92:b2:29:5e:f4:f4:
32:cf:48:a3:34:90:61:b3:a0:e8:21:40:f1:17:6b:2a:68:84:
dc:9c:63:70:14:01:a3:ab:f1:ab:72:2d:67:32:89:e4:82:26:
41:45:9d:4c:87:6b:06:4d:84:c6:92:c3:1a:69:c9:4d:eb:42:
2f:04:09:4c:9b:52:88:fe:bf:a2:8d:0b:c5:ca:46:ab:49:c2:
27:8e:fd:81:55:17:8a:73:34:ea:9b:7c:74:4e:b3:db:99:ac:
63:e0:68:79:b5:e3:6a:32:dd:3a:74:31:b1:5a:00:c7:f8:9e:
68:8c:2c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQSVMaas5gW1kBGOWHYomoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NzAyMWRjZGY0NGI2YWZkZDM4MTA1NDdjNTVhNzliZDFh
OWZhM2IwHhcNMjYwOTIzMjIwMTAxWhcNMjYwOTI0MjIwMTAxWjAzMTEwLwYDVQQD
EyhmZDNhMDE1ZTRlZjcxYjJlYjZjN2Y2NmZjNzM2ZmRjMjJlZjgxNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2KPPWeXKwvm6ILj475WU8jrzVyV
3QRmf7MEbP/A0O/95UxeMq3xSPuZaAYejGPRHG/gIihfoYhpCgvWXVdPlPbQ6Jsd
WVf+vMwlsd+aW19WLAmgE12SH5fQR5JMtvb9nx/6IdkIwpFiLANkUKL0W9jvVRbv
yZH8PAQp184cge5u12Oy4YkuHxQSaigrQm1Xn6HH6O7tlLRl30r1r0lZq8/TeRgE
0f71tZqew+FOsgN1WswETkI/GXMY45CYCPvN53W8J3yYeIbLABnHTftydgHizdT4
q7kDJD5wEvOq/1W7Mf+Z/V65nGWICsOkaGqPaLEUhMvESgAJtNByVQHU5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP06AV5O9xsutsf2b8c2/cIu+BcsMB8GA1UdIwQY
MBaAFFdwIdzfRLav3TgQVHxVp5vRqfo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQt
YzkwN2FlMWMyMTFlLzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wYWMyN2EtMjE1OS00OGQ3LThiZmQtYzkwN2FlMWMyMTFl
LzEvVjNBaDNOOUV0cV9kT0JCVWZGV25tOUdwLWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvK25JHVR
rqPqXqxtVx1Lbv2yGjl1R0bjcMqJjnyIGUa+2nNU3HeCQFUSZhK19H2E1cC2qg0v
p4I0b6FnoxzSNa3hgkRQRhxVTdb8T71SNW4/YkZKSxVR0ShCQNfxsyzF185kqVVJ
YWfftCaS6P4H+eAvyuUvfqWg7bit0T9+UXiYPYJZlTVmwrRSkrIpXvT0Ms9IozSQ
YbOg6CFA8RdrKmiE3JxjcBQBo6vxq3ItZzKJ5IImQUWdTIdrBk2ExpLDGmnJTetC
LwQJTJtSiP6/oo0LxcpGq0nCJ479gVUXinM06pt8dE6z25msY+BoebXjajLdOnQx
sVoAx/ieaIwsWQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:42:21 2026 by rpki-client