Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: NqhM+R0y2PeWGW+78rEeYQHasZsrHnwauDX5yrSpXzo=
Subject key identifier: 49:CE:62:DF:48:1F:25:A7:B3:0C:B3:23:22:0C:DF:B1:96:EF:AE:EC
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 01A1803DB2A54C5DC44B06AE520C3E094534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 02:01:29 +0000
Manifest this update: Wed 28 Oct 2026 02:01:29 +0000
Manifest next update: Thu 29 Oct 2026 02:01:29 +0000
Files and hashes: 1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
2: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: 3dQ0xsRSl9sofJmDnje4xaJG9gqeZSchW/9byJ62UNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:b2:a5:4c:5d:c4:4b:06:ae:52:0c:3e:09:45:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Oct 28 02:01:29 2026 GMT
Not After : Oct 29 02:01:29 2026 GMT
Subject: CN=49ce62df481f25a7b30cb323220cdfb196efaeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:46:28:e8:78:3e:28:1e:6a:64:65:ee:cb:
65:e4:4c:5a:36:02:a4:d9:20:92:4c:65:96:b8:4e:
9a:cc:24:ee:ea:b2:0c:56:10:34:8c:d6:b7:97:1d:
d8:05:02:d8:0f:e3:3f:43:49:a4:20:bd:a4:97:01:
b7:83:d4:21:8c:76:5c:05:f6:00:5e:a2:82:22:be:
c2:35:ef:16:a8:5b:a6:9d:19:cc:23:71:0c:c6:da:
b6:05:3f:6e:a8:33:9e:53:9f:fa:84:67:68:a2:3a:
dd:44:58:31:4b:e5:4e:35:10:e9:a2:c1:24:b7:5d:
ea:13:3c:be:0e:03:2b:57:1e:95:54:71:21:bb:32:
d2:8c:2c:75:d7:74:c0:4d:d4:9f:8f:ed:36:48:42:
64:96:0d:e5:07:c1:3e:86:5b:c1:3a:07:70:26:f8:
06:5e:f0:35:a2:99:70:a3:6f:7d:11:5f:dd:da:e7:
94:55:16:44:90:49:8b:ae:2a:81:68:cb:a3:2b:a0:
61:47:7f:c5:80:ed:d1:5b:e0:69:d1:89:b4:3d:c6:
41:bc:40:9c:62:c4:68:fe:80:f1:1e:7a:a3:99:e1:
53:c3:2d:7a:86:f7:31:33:a2:6e:66:01:0c:99:b8:
9d:34:6d:94:9e:cd:86:04:3f:18:7b:7b:8f:0a:3d:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CE:62:DF:48:1F:25:A7:B3:0C:B3:23:22:0C:DF:B1:96:EF:AE:EC
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a2:a6:eb:88:e6:d4:f4:e8:8c:89:5e:56:51:5d:c4:e1:ab:
88:90:4d:59:90:15:38:d7:e0:93:c5:c0:90:b7:4e:38:4b:f9:
af:a7:80:73:12:a9:71:bd:08:4b:7a:6e:39:b7:80:f3:17:be:
d0:42:6e:7b:ae:5d:2e:21:de:a4:46:5a:b6:fc:67:4d:e5:bd:
94:74:14:87:b8:ff:17:f2:11:43:73:d9:4d:71:5c:37:7a:47:
64:36:ac:a0:dd:16:23:80:b4:89:65:51:e2:f5:b0:02:1c:5d:
02:31:5d:86:dc:8e:55:d5:5c:55:6f:17:68:8f:44:6b:54:b4:
20:9d:ac:1e:6c:8e:29:26:19:98:61:91:93:96:d2:21:a3:10:
06:fb:9d:c5:a9:12:e3:ac:6a:0e:f0:ff:ec:ea:f9:51:5e:8f:
27:0d:c7:c9:24:7b:8b:74:90:b6:ff:2f:1b:24:94:b1:b6:45:
7c:32:c5:a0:ef:cf:e8:f0:94:ae:da:ff:ad:80:ec:3d:b0:86:
75:66:b6:2e:f9:a4:6b:e7:55:2d:f3:eb:91:87:fd:28:6e:10:
00:51:8f:2f:35:bd:bb:d6:8e:10:d2:e7:05:0b:47:df:68:0d:
84:00:89:ad:3a:7c:e6:35:a0:e9:46:6c:20:6e:2f:5b:27:90:
86:42:3d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAPbKlTF3ESwauUgw+CUU0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjYxMDI4MDIwMTI5WhcNMjYxMDI5MDIwMTI5WjAzMTEwLwYDVQQD
Eyg0OWNlNjJkZjQ4MWYyNWE3YjMwY2IzMjMyMjBjZGZiMTk2ZWZhZWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHpGKOh4PigeamRl7stl5ExaNgKk
2SCSTGWWuE6azCTu6rIMVhA0jNa3lx3YBQLYD+M/Q0mkIL2klwG3g9QhjHZcBfYA
XqKCIr7CNe8WqFumnRnMI3EMxtq2BT9uqDOeU5/6hGdoojrdRFgxS+VONRDposEk
t13qEzy+DgMrVx6VVHEhuzLSjCx113TATdSfj+02SEJklg3lB8E+hlvBOgdwJvgG
XvA1oplwo299EV/d2ueUVRZEkEmLriqBaMujK6BhR3/FgO3RW+Bp0Ym0PcZBvECc
YsRo/oDxHnqjmeFTwy16hvcxM6JuZgEMmbidNG2Uns2GBD8Ye3uPCj2yLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnOYt9IHyWnswyzIyIM37GW767sMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaKm64jm
1PTojIleVlFdxOGriJBNWZAVONfgk8XAkLdOOEv5r6eAcxKpcb0IS3puObeA8xe+
0EJue65dLiHepEZatvxnTeW9lHQUh7j/F/IRQ3PZTXFcN3pHZDasoN0WI4C0iWVR
4vWwAhxdAjFdhtyOVdVcVW8XaI9Ea1S0IJ2sHmyOKSYZmGGRk5bSIaMQBvudxakS
46xqDvD/7Or5UV6PJw3HySR7i3SQtv8vGySUsbZFfDLFoO/P6PCUrtr/rYDsPbCG
dWa2Lvmka+dVLfPrkYf9KG4QAFGPLzW9u9aOENLnBQtH32gNhACJrTp85jWg6UZs
IG4vWyeQhkI9zQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 12:49:26 2026 by rpki-client