Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File: d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier: aYg/WWRWGACtGY66pn2P2MXFSmZ06rLjoBojAaY/7Bc=
Subject key identifier: AC:C9:4B:C7:49:39:70:C4:58:7C:74:60:A6:99:2F:A3:94:D2:70:D2
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer: /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial: 01A0D9837283B49E2A0F971F9AD670B6CAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number: 07E9
Signing time: Fri 25 Sep 2026 17:01:05 +0000
Manifest this update: Fri 25 Sep 2026 17:01:05 +0000
Manifest next update: Sat 26 Sep 2026 17:01:05 +0000
Files and hashes: 1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: ETPl44Galkcq/CLVHObz0Qtj4WCDaOER7ai7ni7D5U4=)
2: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (hash: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:72:83:b4:9e:2a:0f:97:1f:9a:d6:70:b6:ca:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Validity
Not Before: Sep 25 17:01:05 2026 GMT
Not After : Sep 26 17:01:05 2026 GMT
Subject: CN=acc94bc7493970c4587c7460a6992fa394d270d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:df:15:f4:e1:a8:a7:db:75:cd:87:70:c8:
86:71:75:ab:91:22:02:2e:fe:71:e7:aa:34:dd:21:
33:40:16:f6:92:be:04:02:c9:75:5d:96:7c:81:49:
15:8c:4a:f0:2c:6a:0d:2c:45:e1:39:d7:d3:d9:c4:
4a:5e:55:76:4a:a4:ec:bf:cb:44:64:3d:6b:12:1d:
75:4c:e9:eb:43:16:26:80:73:ab:25:24:6f:39:01:
ac:10:da:8b:95:a6:d2:59:c5:5d:05:5c:97:94:91:
d8:f1:bf:01:71:50:2e:d5:1c:54:63:5c:ea:5f:d9:
d9:ce:f0:27:8a:90:c7:23:99:6a:6e:0c:46:2f:37:
db:32:49:50:55:5f:20:6f:7a:4c:fd:58:8a:c9:37:
a6:ee:bf:18:ba:97:93:7b:b9:fb:8e:32:85:71:db:
2a:96:8f:04:7f:26:63:d3:80:f3:a2:79:36:f1:45:
a2:0e:d0:c7:08:be:e0:13:7a:d2:91:31:74:44:77:
a5:3a:3a:c0:07:7d:42:ea:f4:8c:0e:e7:27:20:51:
81:d8:14:e7:41:5a:4b:91:f5:17:ae:02:1c:4c:aa:
52:16:f7:ab:4d:90:06:57:c5:5c:93:6f:b2:54:36:
36:92:78:cb:4e:69:95:e1:53:b2:2a:91:50:56:7b:
6d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C9:4B:C7:49:39:70:C4:58:7C:74:60:A6:99:2F:A3:94:D2:70:D2
X509v3 Authority Key Identifier:
keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d0:42:02:4b:61:36:da:2b:e6:24:c7:db:a9:fd:24:a5:79:
7d:63:d3:2a:1d:80:fe:f8:df:d4:28:2c:92:b1:54:bd:7a:b7:
fc:7b:51:12:ab:a5:4e:b9:ee:3c:04:5b:67:61:e5:30:b8:84:
e6:08:eb:b5:a8:89:99:0b:a7:72:9f:16:dc:eb:7d:87:05:31:
0e:10:9a:09:de:5f:bf:29:72:3b:15:ad:a8:f9:41:1e:8c:84:
8c:39:5d:4a:f1:ef:b5:2f:b2:b7:e7:ba:ca:a9:41:e2:30:b8:
23:01:11:aa:33:da:e8:e1:4c:c4:1b:27:b0:2e:77:f5:a9:81:
a9:42:bc:d9:c4:dc:b8:84:a0:cd:51:19:fa:8a:4d:b6:b9:1a:
88:07:6b:bc:22:8f:ca:85:4b:57:07:50:31:18:3f:90:05:34:
7b:69:63:d3:8e:39:8f:53:bc:e0:df:72:4c:fb:a5:54:e5:8b:
c1:6f:8b:7f:0a:16:e3:45:ff:d5:02:7f:e9:b0:ec:6f:be:aa:
30:c6:b0:96:de:5a:fc:d6:eb:27:48:05:88:04:12:00:c2:ab:
57:da:64:d8:8d:0c:15:00:e3:ce:8d:77:cd:73:02:12:60:11:
c6:cc:9e:66:d0:f5:d2:e3:c4:b0:f9:4c:65:31:88:fe:44:94:
de:b1:4b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg3KDtJ4qD5cfmtZwtsrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0
ZTZkMzAwHhcNMjYwOTI1MTcwMTA1WhcNMjYwOTI2MTcwMTA1WjAzMTEwLwYDVQQD
EyhhY2M5NGJjNzQ5Mzk3MGM0NTg3Yzc0NjBhNjk5MmZhMzk0ZDI3MGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlzfFfThqKfbdc2HcMiGcXWrkSIC
Lv5x56o03SEzQBb2kr4EAsl1XZZ8gUkVjErwLGoNLEXhOdfT2cRKXlV2SqTsv8tE
ZD1rEh11TOnrQxYmgHOrJSRvOQGsENqLlabSWcVdBVyXlJHY8b8BcVAu1RxUY1zq
X9nZzvAnipDHI5lqbgxGLzfbMklQVV8gb3pM/ViKyTem7r8YupeTe7n7jjKFcdsq
lo8EfyZj04Dzonk28UWiDtDHCL7gE3rSkTF0RHelOjrAB31C6vSMDucnIFGB2BTn
QVpLkfUXrgIcTKpSFverTZAGV8Vck2+yVDY2knjLTmmV4VOyKpFQVnttfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKzJS8dJOXDEWHx0YKaZL6OU0nDSMB8GA1UdIwQY
MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt
MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw
LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtBCAkth
Ntor5iTH26n9JKV5fWPTKh2A/vjf1CgskrFUvXq3/HtREqulTrnuPARbZ2HlMLiE
5gjrtaiJmQuncp8W3Ot9hwUxDhCaCd5fvylyOxWtqPlBHoyEjDldSvHvtS+yt+e6
yqlB4jC4IwERqjPa6OFMxBsnsC539amBqUK82cTcuISgzVEZ+opNtrkaiAdrvCKP
yoVLVwdQMRg/kAU0e2lj0445j1O84N9yTPulVOWLwW+LfwoW40X/1QJ/6bDsb76q
MMawlt5a/NbrJ0gFiAQSAMKrV9pk2I0MFQDjzo13zXMCEmARxsyeZtD10uPEsPlM
ZTGI/kSU3rFLVQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:13:06 2026 by rpki-client