Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
File: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft (raw, json)
Hash identifier: QGdNKV/vn5IEU0NGXnUPfdObCnxjIskfmLOnjPYuOls=
Subject key identifier: E3:C2:B9:87:34:7B:40:43:96:9B:FD:9F:B2:B8:16:34:15:0C:00:48
Authority key identifier: F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
Certificate issuer: /CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Certificate serial: 01A0ECD349AF75D2AF4AE98915EFC8B472B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
Manifest number: 02EF
Signing time: Tue 29 Sep 2026 11:01:04 +0000
Manifest this update: Tue 29 Sep 2026 11:01:04 +0000
Manifest next update: Wed 30 Sep 2026 11:01:04 +0000
Files and hashes: 1: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl (hash: d4WjhMKIQ1MrrWfUxfrcnI5WkoPpf3bHDCR3FHx8lnk=)
2: y_FNVbdikbBWzs5LhqoDeRQMNlA.roa (hash: WWd5ILv5zYGPBJplTtrocqicsl6CMsf0eLm4LCFpsyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:49:af:75:d2:af:4a:e9:89:15:ef:c8:b4:72:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d
Validity
Not Before: Sep 29 11:01:04 2026 GMT
Not After : Sep 30 11:01:04 2026 GMT
Subject: CN=e3c2b987347b4043969bfd9fb2b81634150c0048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7a:0d:b8:f1:dd:34:b8:87:fb:73:07:1e:d2:
a4:c9:ef:a9:46:92:f6:3d:99:e8:c1:63:ee:fe:0c:
6a:cc:2c:05:43:e3:d5:c3:d2:24:32:53:45:9b:b5:
62:7e:8f:62:bc:c4:db:1e:91:2d:a5:8b:bb:12:d6:
f5:bc:cd:dd:bb:db:f7:35:9b:f4:96:39:71:ce:77:
c7:ea:ca:d7:a4:70:0b:75:5f:de:f0:d3:a3:37:c6:
77:92:cc:06:c1:f0:1d:b4:e4:27:f0:67:9d:4d:42:
fc:e4:58:2a:6d:2a:4d:f5:5d:64:bc:09:80:18:97:
d0:7e:3f:9a:ef:72:98:36:0a:92:1e:eb:3c:ae:92:
0b:4d:c9:d2:70:3b:58:9a:92:64:a0:76:5f:99:d7:
d0:84:62:93:59:36:98:14:2a:1f:52:98:09:1e:ee:
45:b3:e0:35:e2:0e:1f:49:f4:96:94:cd:9e:e3:4b:
20:72:ae:4a:89:3a:75:58:e1:91:6a:be:79:68:14:
e6:a3:86:08:97:4b:b7:25:4e:86:6e:70:b4:f9:e8:
5a:cc:9d:9c:82:0f:98:1d:7a:f1:20:1f:71:49:42:
a7:55:16:fd:b0:69:92:db:b4:fe:6e:c1:03:07:52:
38:b3:75:e9:df:9b:83:cc:2d:ac:6a:1b:17:db:dd:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C2:B9:87:34:7B:40:43:96:9B:FD:9F:B2:B8:16:34:15:0C:00:48
X509v3 Authority Key Identifier:
keyid:F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:41:f2:4b:93:61:72:f4:bc:72:ee:be:49:42:cc:11:f0:6f:
30:27:63:61:57:98:57:12:8a:8a:8d:e4:28:c5:26:8c:6c:8d:
82:a3:1f:27:4a:23:00:7c:75:9e:98:4a:60:bc:26:d0:ea:d2:
42:b3:7e:4b:e2:ba:32:15:6f:ec:2a:18:98:0b:3d:97:67:32:
35:72:98:39:4a:1a:71:03:24:d6:c7:fb:31:0d:e4:a7:f3:ec:
1e:f6:83:f7:23:b1:a9:a3:9b:8e:d8:48:db:e2:2f:1f:2c:5f:
f0:a5:8c:ce:ba:7b:15:66:ad:0b:90:05:a3:1e:c3:6d:1d:40:
2c:64:97:a9:1e:bb:22:6c:29:02:ae:85:10:d4:17:3d:eb:e1:
dc:bb:2f:b3:05:76:4e:93:90:55:04:27:65:3a:16:bd:86:1c:
c7:75:13:24:b9:48:16:7d:48:2d:2b:0c:dc:79:fb:b5:8a:0e:
02:6f:d4:15:60:c5:ab:02:d0:c0:3a:23:9f:73:93:30:a3:0a:
19:b7:b8:72:f4:07:55:09:d8:55:1a:d6:84:ef:7b:7c:6c:3e:
79:2d:87:84:66:d1:ef:a4:c3:eb:17:1e:3e:e6:71:8a:15:03:
c8:d6:72:64:bb:cf:39:6d:ad:75:b6:a5:09:ee:8d:0e:0a:b8:
71:60:37:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDs00mvddKvSumJFe/ItHKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0N2U1MjY0NTg0OTdjMjVkNWRjM2RjMmY0YTgzNzRkNGU0
NDk0OWQwHhcNMjYwOTI5MTEwMTA0WhcNMjYwOTMwMTEwMTA0WjAzMTEwLwYDVQQD
EyhlM2MyYjk4NzM0N2I0MDQzOTY5YmZkOWZiMmI4MTYzNDE1MGMwMDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXoNuPHdNLiH+3MHHtKkye+pRpL2
PZnowWPu/gxqzCwFQ+PVw9IkMlNFm7Vifo9ivMTbHpEtpYu7Etb1vM3du9v3NZv0
ljlxznfH6srXpHALdV/e8NOjN8Z3kswGwfAdtOQn8GedTUL85FgqbSpN9V1kvAmA
GJfQfj+a73KYNgqSHus8rpILTcnScDtYmpJkoHZfmdfQhGKTWTaYFCofUpgJHu5F
s+A14g4fSfSWlM2e40sgcq5KiTp1WOGRar55aBTmo4YIl0u3JU6GbnC0+ehazJ2c
gg+YHXrxIB9xSUKnVRb9sGmS27T+bsEDB1I4s3Xp35uDzC2sahsX29124QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPCuYc0e0BDlpv9n7K4FjQVDABIMB8GA1UdIwQY
MBaAFPR+UmRYSXwl1dw9wvSoN01ORJSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMDY2MzEtZjEyYi00MGUzLWI4MTgt
MGNjM2I5YjZmMmUwLzEvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yMDY2MzEtZjEyYi00MGUzLWI4MTgtMGNjM2I5YjZmMmUw
LzEvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1EHyS5Nh
cvS8cu6+SULMEfBvMCdjYVeYVxKKio3kKMUmjGyNgqMfJ0ojAHx1nphKYLwm0OrS
QrN+S+K6MhVv7CoYmAs9l2cyNXKYOUoacQMk1sf7MQ3kp/PsHvaD9yOxqaObjthI
2+IvHyxf8KWMzrp7FWatC5AFox7DbR1ALGSXqR67ImwpAq6FENQXPevh3LsvswV2
TpOQVQQnZToWvYYcx3UTJLlIFn1ILSsM3Hn7tYoOAm/UFWDFqwLQwDojn3OTMKMK
Gbe4cvQHVQnYVRrWhO97fGw+eS2HhGbR76TD6xcePuZxihUDyNZyZLvPOW2tdbal
Ce6NDgq4cWA3xA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:48:11 2026 by rpki-client