Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: dKYEN8tAPL+m47aaxqIU3CkfwNuT9buQIiYtP/WDRWY=
Subject key identifier: 5B:30:17:71:8E:BF:67:BC:23:2A:80:D5:67:30:0B:03:27:0F:D8:10
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01A0CBC77AD11FB4864772687CE812DE02DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0A0E
Signing time: Wed 23 Sep 2026 01:00:43 +0000
Manifest this update: Wed 23 Sep 2026 01:00:43 +0000
Manifest next update: Thu 24 Sep 2026 01:00:43 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: 8tSEwUH0JKaj9-b78A6P1HNWucA.roa (hash: /2i4x0ciVTUv5ry6RgoyWYRvzmYenJ7v0fQyaaOhTzk=)
6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: FxjUb7o7Yd5CheJOSZKBNuG6lThvuC/jaWsB3LGJ9es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:7a:d1:1f:b4:86:47:72:68:7c:e8:12:de:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Sep 23 01:00:43 2026 GMT
Not After : Sep 24 01:00:43 2026 GMT
Subject: CN=5b3017718ebf67bc232a80d567300b03270fd810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:ab:fc:79:79:d6:ec:95:5a:50:57:e5:e8:
e1:88:31:bc:53:68:ad:ac:93:58:5a:0e:3f:51:50:
c5:9a:17:78:71:60:ac:32:56:c4:d1:d5:42:e6:c7:
09:ad:ef:56:ca:83:b5:b5:19:93:42:87:fc:f4:71:
93:cf:c0:37:ea:66:9a:16:c9:1e:e3:fd:2d:d2:97:
fd:ce:17:49:c2:9d:13:28:93:f4:3f:b5:5a:b3:fc:
09:63:92:dc:a0:ae:38:55:f5:24:88:27:cc:0f:08:
99:c5:f4:74:06:df:e4:bb:64:8d:23:e8:02:a6:76:
86:8a:99:50:d7:c0:bf:51:13:bb:5b:41:f8:c9:a1:
70:8b:0c:38:1c:55:e8:95:14:b3:d4:18:7b:ba:01:
18:b2:b7:de:f4:c0:d3:44:40:de:b4:c0:d2:52:a9:
20:d4:85:28:04:b7:d6:46:ee:5e:99:ba:ac:8e:ad:
82:b5:a3:40:26:8a:f8:00:cc:ae:06:29:a0:7e:2e:
c3:bd:b3:14:c1:d3:05:5d:ed:41:f2:da:dc:42:51:
a6:2e:40:6f:15:54:5a:e3:8b:80:05:b0:65:5d:cb:
e4:3b:9b:49:5d:d4:9d:01:f6:3b:a0:a6:f2:70:f4:
76:89:e9:bc:aa:45:34:d9:82:00:93:80:48:d9:ce:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:30:17:71:8E:BF:67:BC:23:2A:80:D5:67:30:0B:03:27:0F:D8:10
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:a8:a2:b6:f7:be:cb:90:b4:ba:39:25:3e:a5:16:2d:8b:
6f:64:b3:10:8f:fb:c5:cb:02:2e:26:9c:21:c0:9d:00:27:84:
ca:56:1d:87:ba:34:13:2d:74:72:9f:d8:86:e9:58:24:14:8a:
31:08:b0:12:99:c8:86:a4:26:6e:1a:ba:65:61:96:06:97:5f:
88:1f:28:e9:b6:95:07:c9:89:a7:1f:7d:ff:59:c8:6d:d9:74:
2e:f2:11:3e:b7:55:54:af:7b:24:85:9c:44:be:2d:13:84:ed:
4a:15:39:2f:27:a4:52:20:13:ed:54:2f:44:3e:a0:24:92:96:
a1:5f:64:fa:93:7b:0e:0d:10:ae:63:a5:77:d8:e5:6f:46:cd:
78:72:9e:4e:78:30:46:8e:89:57:19:9b:b3:58:4b:fc:03:1f:
d4:2e:d0:38:a7:14:0d:d3:44:14:14:da:ed:b1:16:e7:49:e7:
fd:23:c0:e7:78:40:5c:de:8f:c4:1f:10:01:2a:ba:b7:1d:2e:
0b:b2:d9:7d:f1:51:4d:b4:e9:3f:25:68:38:13:fb:d9:15:d1:
d5:4f:b3:cd:81:03:59:91:40:7f:7b:f5:da:7d:7c:ff:e0:54:
d1:d1:5a:5a:9d:5c:00:86:9d:7d:2f:2c:ca:06:2e:34:29:48:
3c:d8:04:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:49 2026 by rpki-client