Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json)
Hash identifier: NXjNYoVvGiyMxTyfVCkxxu9GUIY6sWY5nBVw1oMAlKQ=
Subject key identifier: 01:DD:03:98:A2:E0:62:88:E8:0D:65:E5:DB:DE:44:28:36:9F:18:C9
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial: 01A0DA287AAA225B277B53D64A41D3F80293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
Manifest number: 1558
Signing time: Fri 25 Sep 2026 20:01:20 +0000
Manifest this update: Fri 25 Sep 2026 20:01:20 +0000
Manifest next update: Sat 26 Sep 2026 20:01:20 +0000
Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: fhqrdsenCVs/QuS5MA7qWpVmz4BlUB6vlsepSGMoaEY=)
2: ksOPh_2fTunNVDQ0M7oZsMXzMTc.roa (hash: sTuOVD56/9SfiXVEt5t0X+gpGj1raLEEP3xJmICtW0g=)
3: maqDCk5ech9njf2wRdErF2LguqA.roa (hash: Yp6aTeCGyXLJ/FumA2AwCHAE91dWUbhOkfi6Jw4CZBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:7a:aa:22:5b:27:7b:53:d6:4a:41:d3:f8:02:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
Validity
Not Before: Sep 25 20:01:20 2026 GMT
Not After : Sep 26 20:01:20 2026 GMT
Subject: CN=01dd0398a2e06288e80d65e5dbde4428369f18c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9b:74:fa:58:63:c8:c2:4e:fa:e3:6a:f7:a6:
83:59:35:9f:ab:2a:cf:9b:b5:22:8e:87:b8:e2:eb:
f2:d3:1d:d4:ae:f9:38:1c:e2:f9:62:01:fd:b8:d2:
29:b1:52:92:62:e7:b3:38:a6:1b:93:bd:ed:1e:49:
bf:7f:2f:84:70:63:3a:d6:40:83:a6:5b:be:b9:2a:
39:ee:74:6b:ae:d8:d9:d2:4c:65:1d:1c:86:35:b5:
4a:0c:eb:9f:73:f6:e6:be:ff:44:03:17:c4:e9:ff:
0c:51:b7:b2:d6:00:ce:df:dc:ed:36:63:27:2c:b1:
2e:fc:71:54:c2:85:ee:8e:44:82:77:22:3f:cb:29:
f6:70:59:35:ea:25:92:6f:23:4c:2c:12:67:a6:28:
85:9f:e7:fa:df:f1:21:70:17:a4:8d:84:3b:1a:da:
59:22:be:d3:85:ce:59:78:f7:0b:c3:0c:d1:80:bf:
36:d3:be:c9:1c:eb:bd:ca:55:9f:7e:52:3d:25:02:
3a:1a:9b:8d:be:e7:3a:2d:3f:38:27:af:a9:64:b4:
e9:73:fa:5c:4c:ed:39:48:75:0f:d5:10:cf:a5:4a:
5a:0e:af:89:97:8a:41:1e:6a:14:b0:5d:bd:e5:e8:
c2:99:f1:a8:f0:64:35:cc:12:0f:62:2a:7c:ae:a5:
51:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DD:03:98:A2:E0:62:88:E8:0D:65:E5:DB:DE:44:28:36:9F:18:C9
X509v3 Authority Key Identifier:
keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:e2:62:f7:ea:55:1e:43:d7:dc:3d:88:e1:e0:d2:00:e3:
5f:70:11:89:6f:ed:62:7d:7b:94:08:06:45:4c:b5:0d:06:65:
91:84:99:86:ef:4a:1a:73:5e:87:6b:10:11:bb:26:4a:b2:52:
46:f9:ae:ff:88:e7:27:9a:45:78:55:a6:2b:76:e1:0b:22:ce:
24:a5:80:1a:70:2c:f1:8d:99:1c:a8:3c:fc:8e:ef:ae:61:57:
c7:21:f9:50:a3:eb:ac:5f:32:22:b2:bd:22:e4:7d:1f:67:e3:
a6:81:d5:c0:1a:cd:ad:25:ad:25:67:c8:27:d2:e7:e2:58:74:
8e:2a:13:53:6d:60:ea:4a:ce:94:9b:19:a3:72:1f:2f:f7:de:
b1:9c:5a:9b:47:8e:7e:d1:d6:43:a2:53:78:9c:cf:5e:2f:1c:
1c:c2:4b:ea:e7:95:3b:51:45:e8:f9:2a:34:3f:9a:33:97:e2:
70:c1:01:40:cc:0f:83:f5:b6:35:07:c2:b7:d7:49:b5:52:3b:
f2:42:24:cc:45:93:05:cd:e9:c0:29:0d:bd:ac:e8:04:87:fd:
09:f1:f0:75:dd:c0:17:a9:36:fa:f3:7f:b1:4c:94:8e:88:f5:
84:63:07:5f:26:99:07:0b:85:74:8a:3d:a6:a0:23:48:47:e3:
55:13:cc:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKHqqIlsne1PWSkHT+AKTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODk4MjNiYTE0NzU4MDA3Y2RlODczYWY0YmY0N2ZkOWMz
OTczN2IwHhcNMjYwOTI1MjAwMTIwWhcNMjYwOTI2MjAwMTIwWjAzMTEwLwYDVQQD
EygwMWRkMDM5OGEyZTA2Mjg4ZTgwZDY1ZTVkYmRlNDQyODM2OWYxOGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpt0+lhjyMJO+uNq96aDWTWfqyrP
m7Uijoe44uvy0x3Urvk4HOL5YgH9uNIpsVKSYuezOKYbk73tHkm/fy+EcGM61kCD
plu+uSo57nRrrtjZ0kxlHRyGNbVKDOufc/bmvv9EAxfE6f8MUbey1gDO39ztNmMn
LLEu/HFUwoXujkSCdyI/yyn2cFk16iWSbyNMLBJnpiiFn+f63/EhcBekjYQ7GtpZ
Ir7Thc5ZePcLwwzRgL82077JHOu9ylWfflI9JQI6GpuNvuc6LT84J6+pZLTpc/pc
TO05SHUP1RDPpUpaDq+Jl4pBHmoUsF295ejCmfGo8GQ1zBIPYip8rqVRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHdA5ii4GKI6A1l5dveRCg2nxjJMB8GA1UdIwQY
MBaAFPWJgjuhR1gAfN6HOvS/R/2cOXN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEt
OWJhNGVjMzFjYjZiLzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEtOWJhNGVjMzFjYjZi
LzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZLiYvfq
VR5D19w9iOHg0gDjX3ARiW/tYn17lAgGRUy1DQZlkYSZhu9KGnNeh2sQEbsmSrJS
Rvmu/4jnJ5pFeFWmK3bhCyLOJKWAGnAs8Y2ZHKg8/I7vrmFXxyH5UKPrrF8yIrK9
IuR9H2fjpoHVwBrNrSWtJWfIJ9Ln4lh0jioTU21g6krOlJsZo3IfL/fesZxam0eO
ftHWQ6JTeJzPXi8cHMJL6ueVO1FF6PkqND+aM5ficMEBQMwPg/W2NQfCt9dJtVI7
8kIkzEWTBc3pwCkNvazoBIf9CfHwdd3AF6k2+vN/sUyUjoj1hGMHXyaZBwuFdIo9
pqAjSEfjVRPMTA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:37:40 2026 by rpki-client