Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File: iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier: 9KB8fu/BaOLbVwv04ee0bzg8xTTTXaDOGZhnCKkD3Mo=
Subject key identifier: D2:9B:5C:F1:D2:44:50:51:28:3C:B4:AB:C6:CB:22:D9:BE:BC:F9:5C
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer: /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial: 01A0DBE05BC7531EACCED8A97B4950D0D865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number: 15A2
Signing time: Sat 26 Sep 2026 04:01:48 +0000
Manifest this update: Sat 26 Sep 2026 04:01:48 +0000
Manifest next update: Sun 27 Sep 2026 04:01:48 +0000
Files and hashes: 1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: jd03Fjr7hvi+IaaO6pl7+xJxVNBvLSWS4Wtj5aZnh58=)
2: kt-dzWz4ump9exEN1VN1o9bh0sQ.roa (hash: 3EXp+7ZKktgIDQ1+hPu50wusQGozvYQkFp906943fvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:5b:c7:53:1e:ac:ce:d8:a9:7b:49:50:d0:d8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Validity
Not Before: Sep 26 04:01:48 2026 GMT
Not After : Sep 27 04:01:48 2026 GMT
Subject: CN=d29b5cf1d2445051283cb4abc6cb22d9bebcf95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:8a:c1:57:10:a7:5f:54:dd:0f:91:17:95:
a3:d2:e1:32:74:18:d0:0f:86:53:20:dc:b6:01:0c:
25:7d:cd:ad:de:54:dc:d6:39:aa:db:72:5b:ad:a0:
26:68:0b:1d:4c:57:82:07:2b:9b:34:e7:1d:a3:28:
e9:a9:4c:95:31:9a:05:d7:4c:ad:fd:e4:fe:c3:20:
30:d5:26:22:c2:da:99:13:ba:cb:9d:1a:79:16:78:
4d:f6:e4:c5:a5:65:9c:93:12:08:cb:d2:69:2c:ad:
ad:d1:29:f1:9f:56:e3:00:b2:ff:b2:09:4c:8c:00:
79:91:ba:b8:4e:c7:e4:15:dc:0d:d1:38:c9:51:30:
85:1d:f6:17:43:8c:61:2c:8a:d6:84:c1:e1:07:9d:
68:1f:64:49:97:9b:01:e3:ae:70:66:6f:b4:d4:f6:
69:ec:74:d9:f7:63:f3:f8:63:89:b9:41:92:1e:e6:
bb:0a:ec:5e:74:52:6b:54:a5:86:73:05:d9:c6:8f:
99:8f:5e:b5:f2:93:35:a5:ca:45:64:8d:d4:a8:65:
9a:12:d2:1c:3a:0f:5f:1d:e7:76:04:fa:f9:78:c6:
b2:87:c4:3d:8c:21:b2:79:4c:73:95:64:70:c3:29:
74:1d:04:e0:0f:ad:35:85:b4:bc:c2:09:9a:e7:f1:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9B:5C:F1:D2:44:50:51:28:3C:B4:AB:C6:CB:22:D9:BE:BC:F9:5C
X509v3 Authority Key Identifier:
keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5e:33:ee:ed:91:3c:02:f9:58:46:77:52:79:29:e7:8d:d0:
57:72:4f:36:af:1c:d2:0a:5c:29:97:cd:98:c8:84:ae:4a:51:
43:8a:13:1b:fd:81:f8:04:f0:70:b6:2a:a7:ee:c6:e4:83:8e:
8d:ea:85:f3:c7:7e:ca:e1:79:6d:6a:05:2a:a0:e9:67:b8:77:
72:b6:ed:cf:37:8a:db:65:69:1c:63:d3:ae:18:78:77:f6:39:
cf:93:75:43:9b:78:a9:c0:94:80:87:28:db:1e:71:15:49:c0:
c7:85:23:28:8e:01:80:56:ce:94:a3:be:0b:de:d3:1c:10:b3:
bc:27:7a:f7:f7:6d:43:06:b0:46:f2:51:24:2d:72:2a:7f:8e:
18:d8:1d:1e:59:72:7e:9d:81:8e:66:44:d1:db:51:f5:ce:2f:
db:39:16:21:00:30:c0:27:48:6f:dd:21:e3:1d:e9:d7:d5:56:
27:57:f1:49:83:a7:e4:bf:60:ed:64:d4:f0:bf:9a:4b:c0:0a:
28:5f:b5:6c:9a:97:75:26:6a:3a:f3:2f:2a:36:fa:ea:08:f4:
08:02:d0:51:71:b7:0a:26:9c:98:35:b3:0a:e0:9f:18:f7:dc:
8d:32:37:3a:46:c1:cf:d9:e5:ba:f2:a8:15:c2:40:36:7a:08:
37:a9:ae:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb4FvHUx6sztipe0lQ0NhlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTI3Nzg3NDcyYTdjYmRkOTdkZmRiNGY1M2I3NGVmYjNi
YmJjNWIwHhcNMjYwOTI2MDQwMTQ4WhcNMjYwOTI3MDQwMTQ4WjAzMTEwLwYDVQQD
EyhkMjliNWNmMWQyNDQ1MDUxMjgzY2I0YWJjNmNiMjJkOWJlYmNmOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAWKwVcQp19U3Q+RF5Wj0uEydBjQ
D4ZTINy2AQwlfc2t3lTc1jmq23JbraAmaAsdTFeCByubNOcdoyjpqUyVMZoF10yt
/eT+wyAw1SYiwtqZE7rLnRp5FnhN9uTFpWWckxIIy9JpLK2t0Snxn1bjALL/sglM
jAB5kbq4TsfkFdwN0TjJUTCFHfYXQ4xhLIrWhMHhB51oH2RJl5sB465wZm+01PZp
7HTZ92Pz+GOJuUGSHua7CuxedFJrVKWGcwXZxo+Zj1618pM1pcpFZI3UqGWaEtIc
Og9fHed2BPr5eMayh8Q9jCGyeUxzlWRwwyl0HQTgD601hbS8wgma5/GB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKbXPHSRFBRKDy0q8bLItm+vPlcMB8GA1UdIwQY
MBaAFImSd4dHKny92X39tPU7dO+zu7xbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpKM2gwY3FmTDNaZmYyMDlUdDA3N083dkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kMjBiOGMtOWZhYy00MWY3LTllNzkt
YzQxMDA2MmQ0ZDUyLzEvaVpKM2gwY3FmTDNaZmYyMDlUdDA3N083dkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kMjBiOGMtOWZhYy00MWY3LTllNzktYzQxMDA2MmQ0ZDUy
LzEvaVpKM2gwY3FmTDNaZmYyMDlUdDA3N083dkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV4z7u2R
PAL5WEZ3Unkp543QV3JPNq8c0gpcKZfNmMiErkpRQ4oTG/2B+ATwcLYqp+7G5IOO
jeqF88d+yuF5bWoFKqDpZ7h3crbtzzeK22VpHGPTrhh4d/Y5z5N1Q5t4qcCUgIco
2x5xFUnAx4UjKI4BgFbOlKO+C97THBCzvCd69/dtQwawRvJRJC1yKn+OGNgdHlly
fp2BjmZE0dtR9c4v2zkWIQAwwCdIb90h4x3p19VWJ1fxSYOn5L9g7WTU8L+aS8AK
KF+1bJqXdSZqOvMvKjb66gj0CALQUXG3CiacmDWzCuCfGPfcjTI3OkbBz9nluvKo
FcJANnoIN6muug==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:44:20 2026 by rpki-client