Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: 8sts5xgkBMK/zzVBwswHFZMXcBbuJ62yzb2bYpiHcUs=
Subject key identifier: 66:41:24:AA:85:DB:BA:C4:49:93:A2:6D:86:E2:AD:32:AB:D9:B4:9C
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 01A0CE916B7CE75C292CE61E1ED33DB63B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0ACF
Signing time: Wed 23 Sep 2026 14:00:31 +0000
Manifest this update: Wed 23 Sep 2026 14:00:31 +0000
Manifest next update: Thu 24 Sep 2026 14:00:31 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: 35RuxW7U3Lkg2Q++2VClXciguJFvY2A0/RMuHFTdvIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:6b:7c:e7:5c:29:2c:e6:1e:1e:d3:3d:b6:3b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Sep 23 14:00:31 2026 GMT
Not After : Sep 24 14:00:31 2026 GMT
Subject: CN=664124aa85dbbac44993a26d86e2ad32abd9b49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:cf:35:f9:8d:bf:38:92:ad:67:6c:71:cd:
4d:87:af:c4:c7:94:c2:25:42:f9:b5:63:d4:46:fb:
4e:8d:45:8b:c4:7e:ed:6f:65:3a:98:05:d8:3d:8d:
0e:6d:2a:57:08:06:ae:62:94:7d:e0:6c:10:65:37:
d4:cf:17:0c:b1:af:fa:b6:26:c5:44:7b:51:44:fd:
aa:21:77:c2:b4:b4:48:be:36:d8:c0:10:f3:cb:cf:
92:1c:25:53:52:14:9e:3b:1c:49:a6:ce:40:f9:da:
5d:58:fb:06:9c:03:38:1a:18:95:eb:7d:e4:62:d1:
88:de:4e:93:e0:14:99:b7:89:41:ea:51:40:49:88:
b0:b3:72:f3:2e:36:7b:0f:b9:0d:e6:ac:9f:56:90:
25:3c:d9:c9:67:9c:68:61:1c:e0:9a:4a:94:fe:e3:
5b:24:2c:8f:81:09:30:6d:ce:c0:7e:48:5f:73:1c:
4e:c1:94:49:f8:c9:a2:e5:7e:30:3c:0f:8d:56:ca:
1f:93:8e:26:d2:ec:6a:07:55:66:79:81:53:00:05:
5b:ca:ec:c5:4d:67:c2:c5:de:95:9b:be:9e:58:48:
e0:96:04:cf:5a:42:fc:3b:95:ef:a5:31:fc:8a:6d:
62:7f:35:d8:7f:64:34:a8:59:7d:28:1a:10:2d:1a:
18:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:41:24:AA:85:DB:BA:C4:49:93:A2:6D:86:E2:AD:32:AB:D9:B4:9C
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:0e:80:0e:09:f9:3f:b2:ef:de:23:cd:b9:5f:f0:43:16:
13:7b:1f:f8:99:af:ab:3e:af:36:01:c6:b9:dd:9d:ff:57:75:
d4:e7:30:50:ee:63:71:9f:74:7a:7f:cc:a4:0b:25:31:5c:76:
b5:18:3f:6f:a4:61:c3:21:9f:f9:bd:e5:4f:e0:e9:c7:8e:c6:
73:5e:e6:02:53:48:9f:23:23:dc:86:46:99:60:6f:e3:7a:39:
2d:49:c7:30:fb:3f:61:e3:0b:d5:27:35:25:5b:e6:3f:73:fc:
88:76:41:62:01:c9:07:da:d5:ac:7c:c0:6c:2e:ac:02:7a:90:
08:c5:f6:2e:c1:f7:8c:db:4e:03:48:b1:cc:da:68:ab:25:80:
7b:62:a9:a8:39:39:aa:0b:6f:df:d2:bb:47:f3:22:ef:35:f7:
c1:2c:bc:17:54:c4:63:d9:61:df:2f:2d:47:03:d6:cd:22:77:
b1:b0:93:4c:1a:ef:1c:0d:6b:f7:32:14:1e:cf:85:6a:d3:7a:
28:0a:b1:16:8c:d1:53:05:5b:b2:76:5f:12:ab:9b:92:5c:a9:
07:7c:32:79:b0:34:38:56:86:50:d1:52:ca:1a:0b:bd:87:70:
ba:49:1c:3f:30:48:94:88:98:8c:e1:4d:75:9d:56:e9:60:62:
f4:af:cd:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkWt851wpLOYeHtM9tjsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjYwOTIzMTQwMDMxWhcNMjYwOTI0MTQwMDMxWjAzMTEwLwYDVQQD
Eyg2NjQxMjRhYTg1ZGJiYWM0NDk5M2EyNmQ4NmUyYWQzMmFiZDliNDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWLPNfmNvziSrWdscc1Nh6/Ex5TC
JUL5tWPURvtOjUWLxH7tb2U6mAXYPY0ObSpXCAauYpR94GwQZTfUzxcMsa/6tibF
RHtRRP2qIXfCtLRIvjbYwBDzy8+SHCVTUhSeOxxJps5A+dpdWPsGnAM4GhiV633k
YtGI3k6T4BSZt4lB6lFASYiws3LzLjZ7D7kN5qyfVpAlPNnJZ5xoYRzgmkqU/uNb
JCyPgQkwbc7AfkhfcxxOwZRJ+Mmi5X4wPA+NVsofk44m0uxqB1VmeYFTAAVbyuzF
TWfCxd6Vm76eWEjglgTPWkL8O5XvpTH8im1ifzXYf2Q0qFl9KBoQLRoYFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZBJKqF27rESZOibYbirTKr2bScMB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuMOgA4J
+T+y794jzblf8EMWE3sf+Jmvqz6vNgHGud2d/1d11OcwUO5jcZ90en/MpAslMVx2
tRg/b6RhwyGf+b3lT+Dpx47Gc17mAlNInyMj3IZGmWBv43o5LUnHMPs/YeML1Sc1
JVvmP3P8iHZBYgHJB9rVrHzAbC6sAnqQCMX2LsH3jNtOA0ixzNpoqyWAe2KpqDk5
qgtv39K7R/Mi7zX3wSy8F1TEY9lh3y8tRwPWzSJ3sbCTTBrvHA1r9zIUHs+FatN6
KAqxFozRUwVbsnZfEqubklypB3wyebA0OFaGUNFSyhoLvYdwukkcPzBIlIiYjOFN
dZ1W6WBi9K/NNA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:41:11 2026 by rpki-client