Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File: cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier: RFVeTtLgAD+caoBe1wNVqs91vFLMrjaMqoDUtR3rr1g=
Subject key identifier: 12:73:64:BF:59:98:25:B7:1A:65:B5:43:EC:4C:FC:7E:C5:32:3B:46
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 01A1789D6C56F3DFAC3D6AE92FCF013FCF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number: 1292
Signing time: Mon 26 Oct 2026 14:29:05 +0000
Manifest this update: Mon 26 Oct 2026 14:29:05 +0000
Manifest next update: Tue 27 Oct 2026 14:29:05 +0000
Files and hashes: 1: 9UFCjwvnlJJjG68JGethucPJGLw.roa (hash: vdtUoC1PPT+CDy9qYM2cqMsseZadFfvPSe7mqhYFl4U=)
2: UFbjBTsIq_Jh6cTKxAGjZJHsdWY.roa (hash: G2BFc4ULBStlGzEFBPIqV+Zix6zfMY/aRgxI8WKNu+w=)
3: VOjaP0vPiACD0uS-bICx9WGuZeI.roa (hash: 9j4hZQlNE98hodvZ6eidQ8K7TvDH7tzFrNjO5UbEpFU=)
4: aFk6_h4fj1-Wl6JpMidePR2r0PI.roa (hash: gEyuYQpJXkfOWVOGndFMHYmw63GBb0nDwvJT9xd/CYs=)
5: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: 66t8ihg9Vc0hd0NioJ2KPfsVFd6SuDs3x37W4S/+OqI=)
6: jFpXUQdW_8WooLIc_r8NHAOFq5I.roa (hash: QNhPW7mwEoqlv0FVLXTOe8Hyk9HQZ4btsFGqykx+UXs=)
7: mp-VpswUBjza82Vpf1GOWZIhrlQ.roa (hash: ae9rTRwpHTYdLNVU2WmOKxDNxm6rN9lNU5zvZm8mMAI=)
8: uhHeHXNeCyzmj1k6kMiJskketXc.roa (hash: EELczVceDY0fkVLK0a/I+9PonFXjhdu2dOYRHw98c2c=)
9: ztSs7zmKYYrvh6ddsY39F_uOKEk.roa (hash: /k/b9/O5jpdDOIMSaJIPt2QCSI1+oOFC4DFoJBolsYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9d:6c:56:f3:df:ac:3d:6a:e9:2f:cf:01:3f:cf:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Oct 26 14:29:05 2026 GMT
Not After : Oct 27 14:29:05 2026 GMT
Subject: CN=127364bf599825b71a65b543ec4cfc7ec5323b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a9:57:c0:22:71:9c:89:04:d1:31:13:82:6b:
bb:1c:e4:43:52:2e:7f:e3:59:84:f8:a2:90:da:80:
14:6e:62:23:be:6d:cc:f7:67:89:8b:0e:9f:4e:95:
e8:03:af:eb:c4:cf:9c:ac:e3:22:95:fc:69:7d:4e:
41:74:c6:e6:92:3a:c9:e0:f6:d9:3c:40:f1:7e:80:
08:bc:b9:2b:f6:f0:e2:69:eb:d1:a3:d3:49:52:7b:
20:5f:a2:a8:bc:57:e1:d6:51:68:a2:bc:fb:5e:60:
55:d5:d2:03:8f:bb:54:6f:21:04:43:3b:33:a8:b7:
e3:62:63:99:ef:0e:34:cd:d5:91:d7:b0:7a:24:2a:
ef:5d:ab:58:ff:d4:8a:ee:7a:85:63:c2:96:9b:a2:
27:05:1f:a7:f8:f8:ea:ef:f7:27:a1:8a:8c:2e:5b:
5f:92:e6:f2:91:be:82:7f:49:85:80:2a:0e:a2:7c:
e7:2f:c9:25:e8:4b:f1:06:a2:b9:f9:8a:a2:2e:dd:
21:f9:ec:0d:a1:6d:95:38:87:13:12:49:89:3f:b3:
52:61:e0:62:8b:8a:0d:5e:69:1a:d4:2b:aa:33:fc:
ba:11:64:ff:29:5b:e2:1b:cc:f2:83:aa:04:b3:b6:
f9:ca:ed:ee:ad:cc:57:a0:7a:d8:b2:4e:0b:e5:a7:
b2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:73:64:BF:59:98:25:B7:1A:65:B5:43:EC:4C:FC:7E:C5:32:3B:46
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:49:1f:eb:a3:58:7c:66:dd:57:bf:39:0d:a2:50:7d:80:01:
20:63:dd:03:18:f9:7e:98:0c:48:d8:53:f8:a1:c4:79:53:a7:
18:0c:88:c5:dd:ab:2a:52:98:ea:6f:20:71:41:03:54:15:55:
c0:60:09:eb:f1:38:dd:31:51:83:83:69:d0:e4:f3:14:da:1f:
65:8d:31:b7:d9:7a:de:5b:45:11:93:c4:5b:45:90:a9:a9:de:
f2:f3:44:3c:c2:d9:86:a5:7e:1d:b0:b8:ed:28:e8:c2:a2:c0:
2d:72:22:77:06:f9:c2:8e:ce:16:95:0f:c2:83:99:e1:44:e7:
47:64:b3:83:83:d4:d0:f8:d0:2e:6c:cf:a5:1e:2b:7d:dc:9c:
92:df:88:62:d6:6d:0e:00:8c:eb:9c:08:bd:9b:fb:87:0c:bd:
69:59:29:3d:89:b7:d3:01:be:b4:20:cb:eb:0c:40:5e:87:f0:
c2:83:2b:ba:8a:ea:ff:26:68:02:a9:28:49:bf:cb:7c:11:68:
91:94:30:32:07:9b:90:11:7b:1b:67:c0:e1:0d:94:82:f9:ce:
39:e5:1c:a3:a9:5f:1b:8c:dd:f1:9b:b1:4e:ac:d8:88:29:0f:
8e:58:ac:3d:94:68:d5:4f:77:2f:98:83:44:52:95:93:2b:4d:
45:cd:bc:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4nWxW89+sPWrpL88BP89yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYxMDI2MTQyOTA1WhcNMjYxMDI3MTQyOTA1WjAzMTEwLwYDVQQD
EygxMjczNjRiZjU5OTgyNWI3MWE2NWI1NDNlYzRjZmM3ZWM1MzIzYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6lXwCJxnIkE0TETgmu7HORDUi5/
41mE+KKQ2oAUbmIjvm3M92eJiw6fTpXoA6/rxM+crOMilfxpfU5BdMbmkjrJ4PbZ
PEDxfoAIvLkr9vDiaevRo9NJUnsgX6KovFfh1lFoorz7XmBV1dIDj7tUbyEEQzsz
qLfjYmOZ7w40zdWR17B6JCrvXatY/9SK7nqFY8KWm6InBR+n+Pjq7/cnoYqMLltf
kubykb6Cf0mFgCoOonznL8kl6EvxBqK5+YqiLt0h+ewNoW2VOIcTEkmJP7NSYeBi
i4oNXmka1CuqM/y6EWT/KVviG8zyg6oEs7b5yu3urcxXoHrYsk4L5aeywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJzZL9ZmCW3GmW1Q+xM/H7FMjtGMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkkf66NY
fGbdV785DaJQfYABIGPdAxj5fpgMSNhT+KHEeVOnGAyIxd2rKlKY6m8gcUEDVBVV
wGAJ6/E43TFRg4Np0OTzFNofZY0xt9l63ltFEZPEW0WQqane8vNEPMLZhqV+HbC4
7SjowqLALXIidwb5wo7OFpUPwoOZ4UTnR2Szg4PU0PjQLmzPpR4rfdyckt+IYtZt
DgCM65wIvZv7hwy9aVkpPYm30wG+tCDL6wxAXofwwoMruorq/yZoAqkoSb/LfBFo
kZQwMgebkBF7G2fA4Q2UgvnOOeUco6lfG4zd8ZuxTqzYiCkPjlisPZRo1U93L5iD
RFKVkytNRc28xw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:42 2026 by rpki-client