Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File: du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier: 7xdvBD82HFtTkHxTUuWY100Vc2a8GGqJODdX5+r5FSI=
Subject key identifier: AC:38:27:08:82:EB:7A:F6:8E:60:7C:56:9D:89:BD:3C:EB:13:E0:4F
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer: /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial: 01A06D271BE798E1525AF15A1EF920E3439B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number: 09AE
Signing time: Fri 04 Sep 2026 16:01:14 +0000
Manifest this update: Fri 04 Sep 2026 16:01:14 +0000
Manifest next update: Sat 05 Sep 2026 16:01:14 +0000
Files and hashes: 1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: LiWKvgh0pnE/FHGmpYOQy0hqn151pp90rqrJfXp3zbc=)
4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:1b:e7:98:e1:52:5a:f1:5a:1e:f9:20:e3:43:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Validity
Not Before: Sep 4 16:01:14 2026 GMT
Not After : Sep 5 16:01:14 2026 GMT
Subject: CN=ac38270882eb7af68e607c569d89bd3ceb13e04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:34:dc:1e:b0:10:37:43:53:84:f5:b6:dc:4d:
fa:f3:0a:cf:09:4f:02:0a:14:71:4f:4d:30:90:23:
f7:d4:c6:46:94:3e:55:e0:c6:56:ec:fb:4f:f5:06:
a9:c0:15:57:3b:c5:b3:ba:03:10:b3:99:bb:2b:60:
cd:ac:50:e9:e8:29:ce:1d:ed:32:bd:14:1e:0c:2a:
02:78:3c:e3:86:b7:49:b2:b4:69:c9:13:62:db:9e:
18:c7:91:5f:b3:c0:7d:af:2e:d5:51:ac:d1:15:ef:
2f:97:e9:c2:3d:c0:0e:40:33:54:97:61:56:f1:08:
92:a3:02:28:c4:fb:ce:ed:68:31:b8:d1:d2:bd:47:
87:76:8d:35:1e:36:29:8e:72:be:87:50:ec:bc:fd:
fa:15:d4:67:cb:0b:b4:6d:70:70:79:00:b9:76:2d:
72:ce:e8:f6:44:28:05:37:4c:c7:4a:2b:5a:38:40:
3c:12:27:e5:04:6d:c1:c2:fb:c8:e6:29:92:5b:c0:
2a:4a:05:ad:1c:35:38:bc:18:5a:cf:15:35:6d:36:
b3:17:2d:79:b2:eb:1d:68:80:54:9e:36:21:13:1a:
a2:0a:95:fe:91:46:10:ea:3a:ff:c9:32:18:6b:37:
bf:57:e2:e1:ab:f5:33:37:0a:fc:58:99:95:a7:b2:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:27:08:82:EB:7A:F6:8E:60:7C:56:9D:89:BD:3C:EB:13:E0:4F
X509v3 Authority Key Identifier:
keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:48:6b:1e:78:c7:e1:38:5d:48:c3:91:26:79:e4:43:bc:b8:
e0:ff:65:7b:2e:e5:e6:a1:1d:eb:3c:7e:b7:c0:b2:46:a5:59:
d1:95:97:96:6d:35:5e:50:da:1c:d8:9a:d9:53:be:f4:ca:34:
56:a7:fa:dd:0b:fa:bb:36:5f:8b:69:0c:a7:9f:74:25:1e:c9:
29:e5:4b:87:91:9a:14:2f:87:ad:b8:87:e2:dd:50:8c:23:fe:
f0:d6:c5:c8:6c:c5:2c:2d:f2:ef:16:f1:a9:d2:56:21:f0:03:
dc:07:b5:4d:3e:ae:bf:41:e8:db:37:3a:a4:d8:88:d9:13:d3:
51:88:e0:67:d9:8a:3a:23:35:a1:d7:87:df:b8:77:29:a5:50:
46:96:10:bc:ef:bb:ec:a3:1f:d7:3b:72:f9:fa:21:c5:9a:60:
19:df:e2:89:73:7b:a1:b2:af:4f:4c:1f:40:92:54:f1:86:a8:
0e:4a:75:8d:4c:e6:6f:d1:78:b8:e1:96:66:6a:b0:c6:13:2b:
a9:47:b3:35:ec:d9:ff:03:28:8e:b1:8f:43:14:12:f0:39:cf:
e2:07:d1:0a:5b:c4:bb:8e:e3:42:66:4a:0d:35:ab:64:2e:4e:
17:3b:4e:c0:d2:d2:7f:5f:fb:bd:63:47:8d:49:4c:44:ca:1f:
a4:d4:53:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtJxvnmOFSWvFaHvkg40ObMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2ZWYwYTBlZThmYTE1NGQ3YWRhNDM4YWYxMjEyMjY5Y2Uw
YWNjNDEwHhcNMjYwOTA0MTYwMTE0WhcNMjYwOTA1MTYwMTE0WjAzMTEwLwYDVQQD
EyhhYzM4MjcwODgyZWI3YWY2OGU2MDdjNTY5ZDg5YmQzY2ViMTNlMDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTTcHrAQN0NThPW23E368wrPCU8C
ChRxT00wkCP31MZGlD5V4MZW7PtP9QapwBVXO8WzugMQs5m7K2DNrFDp6CnOHe0y
vRQeDCoCeDzjhrdJsrRpyRNi254Yx5Ffs8B9ry7VUazRFe8vl+nCPcAOQDNUl2FW
8QiSowIoxPvO7WgxuNHSvUeHdo01HjYpjnK+h1DsvP36FdRnywu0bXBweQC5di1y
zuj2RCgFN0zHSitaOEA8EiflBG3BwvvI5imSW8AqSgWtHDU4vBhazxU1bTazFy15
susdaIBUnjYhExqiCpX+kUYQ6jr/yTIYaze/V+Lhq/UzNwr8WJmVp7KsiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw4JwiC63r2jmB8Vp2JvTzrE+BPMB8GA1UdIwQY
MBaAFHbvCg7o+hVNetpDivEhImnOCsxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmIt
M2JlOTk1ZDJiYmRhLzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8xNjg2YzMtZGE3MC00YjU0LWFiMmItM2JlOTk1ZDJiYmRh
LzEvZHU4S0R1ajZGVTE2MmtPSzhTRWlhYzRLekVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0hrHnjH
4ThdSMORJnnkQ7y44P9ley7l5qEd6zx+t8CyRqVZ0ZWXlm01XlDaHNia2VO+9Mo0
Vqf63Qv6uzZfi2kMp590JR7JKeVLh5GaFC+HrbiH4t1QjCP+8NbFyGzFLC3y7xbx
qdJWIfAD3Ae1TT6uv0Ho2zc6pNiI2RPTUYjgZ9mKOiM1odeH37h3KaVQRpYQvO+7
7KMf1zty+fohxZpgGd/iiXN7obKvT0wfQJJU8YaoDkp1jUzmb9F4uOGWZmqwxhMr
qUezNezZ/wMojrGPQxQS8DnP4gfRClvEu47jQmZKDTWrZC5OFztOwNLSf1/7vWNH
jUlMRMofpNRT4Q==
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:18 2026 by rpki-client