Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier: i/OSRKqIENunO5qh+inzLydpG6CDWcb3I2f9B7ZhN9k=
Subject key identifier: EA:5C:4B:08:DC:FA:3F:44:CA:35:53:5E:D4:F3:CC:44:C1:29:08:7E
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 01A0D9BA8960E83B8A5EA22555F56E08D399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number: 17C1
Signing time: Fri 25 Sep 2026 18:01:15 +0000
Manifest this update: Fri 25 Sep 2026 18:01:15 +0000
Manifest next update: Sat 26 Sep 2026 18:01:15 +0000
Files and hashes: 1: 1-e3X3nnOITuhFUTt48TdT2Qw-5U.roa (hash: u9UX0jZDejI6w83BZaY3pHdg72rNaFEVz4TXqidtNXA=)
2: 4UwlYnr52PGvgrKUwZbaj95o1GA.roa (hash: +2AP9nSVJw2jCPzcUReDcj4cufxT4/ipf0cJtgIcbr0=)
3: AdVE5OlXcZj2420IBfPGuTVm1rY.roa (hash: kUUL0iWu2kMToCczE7nZmiSv6u2adUWqU7sTkCw1rJY=)
4: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
5: HUcHAL73Sfwe-OwmRifjceYRsyc.roa (hash: /2sMFxs6Y2Y4YXgzJKEXcAfuaIViiN3v3fDdI/L3mew=)
6: RSm0qGEri_euvlxfenvDorVTnKw.roa (hash: uBu5fXFf8DACYIsLAH/WatGFK4JVkAobmStF5eGh7+4=)
7: VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa (hash: nbe4oKw1dzzL8XTpfLmk2OwowG5rknPjlUlPj/nEWbw=)
8: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: X/9tgSXnpZjCA5dzIqT5hOKGUXFdTWzSNNbk3WAqPHk=)
9: z7PU2MzlVVAvlrQw6iVcszWYAXo.roa (hash: 9X6Zea/pUy8vlr4IvEYXZRJ/+mqoqTxPdepT8vjAq6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:89:60:e8:3b:8a:5e:a2:25:55:f5:6e:08:d3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Sep 25 18:01:15 2026 GMT
Not After : Sep 26 18:01:15 2026 GMT
Subject: CN=ea5c4b08dcfa3f44ca35535ed4f3cc44c129087e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:17:03:16:21:60:2a:75:07:61:af:dd:0d:
34:44:b9:68:a9:17:07:80:c8:40:c2:23:82:9a:b3:
f7:32:90:a2:e6:b7:b8:e6:8b:0f:4a:0f:59:f3:6c:
e9:b1:e2:66:6e:43:06:96:47:1e:ca:21:aa:d7:d3:
b0:f3:2b:fb:66:99:d6:8f:65:08:54:1f:75:42:1e:
9d:f3:f0:c1:a7:de:05:0c:cc:3c:9d:5e:4b:15:e7:
42:8c:2f:f5:66:71:bc:22:52:c3:df:32:a6:83:4f:
e7:e9:01:33:b6:7b:2d:7b:49:cd:05:6f:4a:bc:1c:
e7:ca:6c:4c:0b:69:c2:5d:d6:de:92:5c:38:14:bc:
06:2c:d5:3b:b4:8b:92:0d:98:b4:d1:4a:8b:4f:9f:
54:7e:ba:1f:da:bd:96:7c:40:b4:e8:23:da:f2:2f:
ec:37:a6:41:95:4b:3c:81:e2:ae:12:75:e5:b0:ff:
ed:fa:9a:76:d9:fe:db:c8:38:ce:39:b8:69:4a:c7:
04:c5:34:66:ca:cd:25:39:92:5b:ef:e3:39:bd:a8:
2b:8d:14:6d:f8:da:83:8e:f7:d1:90:52:b0:3d:a1:
d5:46:7e:eb:6a:55:bb:c2:ae:85:09:7e:be:c2:86:
1a:41:6f:5a:40:39:f1:eb:fa:7a:c3:38:77:cb:e2:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5C:4B:08:DC:FA:3F:44:CA:35:53:5E:D4:F3:CC:44:C1:29:08:7E
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:38:61:71:e8:2b:4c:90:fe:52:48:e7:29:ed:bc:70:0c:4b:
32:d0:55:1f:e4:e8:54:3e:12:cc:c2:1c:6c:5e:ee:89:82:85:
33:c3:1e:4a:8d:65:2a:b8:62:75:0f:0d:e2:32:6f:03:28:e8:
ba:95:03:c6:f1:99:a5:0b:75:bd:0e:51:ae:0e:c4:10:ff:f6:
0e:0a:3f:d6:d8:50:4c:bf:c3:97:b0:72:91:2f:5c:0c:c0:3e:
78:27:e9:df:52:24:46:5d:be:85:bf:7d:54:f5:92:d6:79:2e:
de:10:17:fe:41:82:39:82:e5:12:a0:77:05:10:04:b8:fa:9f:
ec:06:9c:2f:ce:7a:78:9d:65:20:55:32:55:13:86:6c:68:8b:
23:88:f4:76:53:7e:33:4a:57:49:5c:86:e4:0c:c3:92:5c:52:
33:b6:cb:9c:7f:32:18:d2:09:e0:ae:b9:61:18:1b:81:61:ed:
16:08:9f:71:69:1d:79:0d:68:77:db:69:18:99:09:24:e9:d1:
9c:0b:bd:39:77:ba:b6:2a:71:9d:95:35:49:cc:6c:0b:26:88:
8b:23:73:f2:b8:09:0f:2f:c7:82:75:07:fa:ba:34:98:e1:64:
c9:0f:f3:65:47:1f:d5:69:37:1b:a2:36:1e:74:f2:4b:12:af:
ae:f1:43:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuolg6DuKXqIlVfVuCNOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjYwOTI1MTgwMTE1WhcNMjYwOTI2MTgwMTE1WjAzMTEwLwYDVQQD
EyhlYTVjNGIwOGRjZmEzZjQ0Y2EzNTUzNWVkNGYzY2M0NGMxMjkwODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApygXAxYhYCp1B2Gv3Q00RLloqRcH
gMhAwiOCmrP3MpCi5re45osPSg9Z82zpseJmbkMGlkceyiGq19Ow8yv7ZpnWj2UI
VB91Qh6d8/DBp94FDMw8nV5LFedCjC/1ZnG8IlLD3zKmg0/n6QEztnste0nNBW9K
vBznymxMC2nCXdbeklw4FLwGLNU7tIuSDZi00UqLT59Ufrof2r2WfEC06CPa8i/s
N6ZBlUs8geKuEnXlsP/t+pp22f7byDjOObhpSscExTRmys0lOZJb7+M5vagrjRRt
+NqDjvfRkFKwPaHVRn7ralW7wq6FCX6+woYaQW9aQDnx6/p6wzh3y+IlEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOpcSwjc+j9EyjVTXtTzzETBKQh+MB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjhhcegr
TJD+UkjnKe28cAxLMtBVH+ToVD4SzMIcbF7uiYKFM8MeSo1lKrhidQ8N4jJvAyjo
upUDxvGZpQt1vQ5Rrg7EEP/2Dgo/1thQTL/Dl7BykS9cDMA+eCfp31IkRl2+hb99
VPWS1nku3hAX/kGCOYLlEqB3BRAEuPqf7AacL856eJ1lIFUyVROGbGiLI4j0dlN+
M0pXSVyG5AzDklxSM7bLnH8yGNIJ4K65YRgbgWHtFgifcWkdeQ1od9tpGJkJJOnR
nAu9OXe6tipxnZU1ScxsCyaIiyNz8rgJDy/HgnUH+ro0mOFkyQ/zZUcf1Wk3G6I2
HnTySxKvrvFDYA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:06:16 2026 by rpki-client