Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
File: S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft (raw, json)
Hash identifier: sf9J1bhYS4oajhvqtKRlw7cb+6KBfeQH6IRX6G0akaA=
Subject key identifier: 89:AB:C5:18:8C:DC:01:8F:31:E9:B0:56:38:2E:56:1D:9F:F7:8B:2D
Authority key identifier: 4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
Certificate issuer: /CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Certificate serial: 01A17BF2AF557E130F14DD53092FFB6F6CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
Manifest number: 013E
Signing time: Tue 27 Oct 2026 06:01:04 +0000
Manifest this update: Tue 27 Oct 2026 06:01:04 +0000
Manifest next update: Wed 28 Oct 2026 06:01:04 +0000
Files and hashes: 1: 2g3g_d2cbfXZVdPZvllR7ko9tq4.roa (hash: qrpCT5b4Pl5PHRJkUsaii3h3DkJ//XJSoI+D6opqI3Y=)
2: DZRRAdctSa4CVUBsnqANHKo8DbA.roa (hash: dNAFaUwzL63hmLrib+niPT9WNwhu3ti4JBM4gbkcCtk=)
3: S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl (hash: Rja+H3hFq/lQ1mKpFLThygGf9l4D/Bn8rZhgw9RgZ40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:af:55:7e:13:0f:14:dd:53:09:2f:fb:6f:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Validity
Not Before: Oct 27 06:01:04 2026 GMT
Not After : Oct 28 06:01:04 2026 GMT
Subject: CN=89abc5188cdc018f31e9b056382e561d9ff78b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:1d:7d:22:40:04:5a:d1:8e:b5:51:a1:d6:
cb:bd:8d:66:c5:c7:db:c4:04:77:69:ee:8c:d3:98:
7c:47:58:40:55:40:06:0d:43:7a:47:60:75:fb:a6:
bb:90:bc:dd:9a:43:27:b4:e8:f7:a1:df:1c:3e:c1:
95:86:b9:55:b6:f8:a8:3a:0f:eb:40:0e:ce:54:81:
6e:d8:58:98:17:ab:22:3a:6d:ea:19:f8:24:6d:0c:
b2:85:e4:e0:c6:45:dc:17:07:76:a3:fe:0f:09:51:
0c:d0:bb:02:2e:7d:d9:72:75:83:79:f7:a5:18:fd:
f0:3c:b6:ac:16:06:df:fd:d5:7e:fe:8d:b2:70:ba:
3c:97:9d:cf:a3:6a:21:e2:15:62:27:3f:35:78:53:
4c:64:91:d7:8f:b5:0f:f7:d6:eb:0b:fa:a5:47:9a:
26:27:0a:dd:b5:b0:55:77:5d:f9:3b:b7:a5:78:2d:
62:bf:6b:ad:34:96:32:08:bd:51:df:65:2c:b0:17:
b5:52:63:ea:fd:60:d2:6e:fa:ca:11:14:42:2a:b0:
f3:04:20:d2:71:be:fb:78:78:1f:08:04:fd:34:d8:
84:1a:77:fa:6f:5b:5f:de:cf:9f:8d:d7:38:56:d0:
28:2b:7e:6f:61:00:a1:33:87:2a:a3:e5:40:6e:2e:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AB:C5:18:8C:DC:01:8F:31:E9:B0:56:38:2E:56:1D:9F:F7:8B:2D
X509v3 Authority Key Identifier:
keyid:4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:29:1d:a5:8f:23:72:21:fe:a9:c6:b8:48:b7:f3:ba:a2:30:
1f:ad:3f:a9:59:ec:87:71:83:16:01:06:7c:1c:53:ed:29:bb:
4b:d1:48:5c:0d:6c:15:d7:5d:8c:e5:de:cd:b2:55:22:53:88:
d9:be:55:04:76:29:2e:8f:d4:3a:70:d8:5f:1e:53:2c:39:66:
2e:8e:ef:5b:d5:ca:f7:1b:da:7d:bf:68:c4:8f:74:6c:a6:c6:
5d:ac:af:7f:88:66:e6:16:61:66:39:51:c6:6f:94:a8:e2:e0:
f0:e8:75:7a:8a:3a:2d:89:83:ce:76:fc:c1:28:4c:59:6c:7f:
d3:a8:fb:e7:02:55:8e:f4:e1:f7:0f:1a:56:c4:9a:31:67:b0:
22:ec:67:18:c9:bd:32:91:fb:76:87:02:7f:1c:89:8f:69:69:
b2:ad:8a:80:b5:8a:09:86:ba:a5:c0:ff:8d:85:97:aa:83:fc:
cc:23:52:ff:ac:19:a3:6d:9d:61:8a:b2:6f:b8:5b:a2:39:65:
4d:60:c3:81:6d:9a:a0:3c:b2:87:e6:52:04:e8:23:4d:39:37:
07:db:0f:46:1e:51:40:f1:bf:4e:42:84:03:44:2a:3d:ec:72:
aa:3f:38:0a:69:77:73:e1:07:fb:2c:54:0d:53:5b:f0:60:6f:
d5:8a:b7:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78q9VfhMPFN1TCS/7b2zvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDE5ZDU0YjgxN2FlNzNjODg4NWUxY2Y0OWU5ZTZlMDQx
MzU3MzkwHhcNMjYxMDI3MDYwMTA0WhcNMjYxMDI4MDYwMTA0WjAzMTEwLwYDVQQD
Eyg4OWFiYzUxODhjZGMwMThmMzFlOWIwNTYzODJlNTYxZDlmZjc4YjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4odfSJABFrRjrVRodbLvY1mxcfb
xAR3ae6M05h8R1hAVUAGDUN6R2B1+6a7kLzdmkMntOj3od8cPsGVhrlVtvioOg/r
QA7OVIFu2FiYF6siOm3qGfgkbQyyheTgxkXcFwd2o/4PCVEM0LsCLn3ZcnWDefel
GP3wPLasFgbf/dV+/o2ycLo8l53Po2oh4hViJz81eFNMZJHXj7UP99brC/qlR5om
JwrdtbBVd135O7eleC1iv2utNJYyCL1R32UssBe1UmPq/WDSbvrKERRCKrDzBCDS
cb77eHgfCAT9NNiEGnf6b1tf3s+fjdc4VtAoK35vYQChM4cqo+VAbi4GVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImrxRiM3AGPMemwVjguVh2f94stMB8GA1UdIwQY
MBaAFEvRnVS4F65zyIheHPSenm4EE1c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlHZFZMZ1hyblBJaUY0YzlKNmViZ1FUVnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2Et
MmFlNDQwYTVjY2IwLzEvUzlHZFZMZ1hyblBJaUY0YzlKNmViZ1FUVnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2EtMmFlNDQwYTVjY2Iw
LzEvUzlHZFZMZ1hyblBJaUY0YzlKNmViZ1FUVnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCkdpY8j
ciH+qca4SLfzuqIwH60/qVnsh3GDFgEGfBxT7Sm7S9FIXA1sFdddjOXezbJVIlOI
2b5VBHYpLo/UOnDYXx5TLDlmLo7vW9XK9xvafb9oxI90bKbGXayvf4hm5hZhZjlR
xm+UqOLg8Oh1eoo6LYmDznb8wShMWWx/06j75wJVjvTh9w8aVsSaMWewIuxnGMm9
MpH7docCfxyJj2lpsq2KgLWKCYa6pcD/jYWXqoP8zCNS/6wZo22dYYqyb7hbojll
TWDDgW2aoDyyh+ZSBOgjTTk3B9sPRh5RQPG/TkKEA0QqPexyqj84Cml3c+EH+yxU
DVNb8GBv1Yq3gw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:57 2026 by rpki-client