Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: xG5Rf0kzvxxU04iCkeou8GITAHMu5AmKEFD2/ZDfIJw=
Subject key identifier: 18:E9:97:B9:84:43:16:46:8C:B0:10:F3:62:1F:76:3F:F9:73:A4:59
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 01A15666358DFC33D0DE5F5D5D14FBD653D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 0808
Signing time: Mon 19 Oct 2026 23:01:41 +0000
Manifest this update: Mon 19 Oct 2026 23:01:41 +0000
Manifest next update: Tue 20 Oct 2026 23:01:41 +0000
Files and hashes: 1: L314PIS9EZuLIllvbYG4hWHPUco.roa (hash: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: 9YhfMvptgFn8YB/77lLNWBVNH8lwYcUQVg0qa0IOwzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:66:35:8d:fc:33:d0:de:5f:5d:5d:14:fb:d6:53:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Oct 19 23:01:41 2026 GMT
Not After : Oct 20 23:01:41 2026 GMT
Subject: CN=18e997b9844316468cb010f3621f763ff973a459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:83:bf:62:86:b9:bc:97:3b:89:dc:ff:53:fb:
a1:bf:dc:12:4e:5c:a9:6c:84:38:30:62:ef:6d:49:
2a:f4:f2:d5:38:b1:dd:f2:45:b4:02:9c:19:8c:d9:
11:5f:ae:78:a0:77:b7:9b:fe:2f:03:cb:15:f6:f9:
7d:52:99:ba:37:54:89:06:06:fc:5f:66:cc:b8:33:
ea:bb:68:37:ac:13:8b:ee:77:76:b4:92:aa:30:9e:
e9:7b:9a:80:8f:b1:52:74:b4:80:19:94:88:2a:a9:
23:44:ef:e6:a2:6a:11:61:62:f1:99:ab:e1:9e:41:
18:5e:b3:34:16:e7:6f:66:0f:bd:f0:3e:c7:df:83:
d6:08:41:05:83:3b:97:29:99:ff:b0:bd:06:ed:1b:
6a:12:12:09:0b:22:5a:b8:76:8a:01:ab:f0:cb:fd:
66:5b:a6:73:b0:07:6d:83:8b:0e:68:c1:8b:19:82:
e7:2c:94:4d:94:7d:28:86:6b:6b:f9:37:22:93:52:
21:94:6d:53:69:07:38:f8:70:48:e5:c9:3d:de:6f:
f7:cc:e8:82:92:88:fc:db:df:c2:c7:f0:5e:65:52:
7f:5c:55:f9:8a:c8:36:1e:2c:3b:38:79:8e:ad:e6:
5e:df:30:26:21:6f:30:3f:46:20:91:b2:44:3e:77:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E9:97:B9:84:43:16:46:8C:B0:10:F3:62:1F:76:3F:F9:73:A4:59
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:83:f3:ee:d1:c2:b6:a7:8c:01:c2:2c:8c:de:37:e8:d7:0b:
51:be:66:72:f5:1c:80:b9:ba:f9:d0:25:46:7f:dd:f6:94:54:
19:17:44:4a:4c:db:b4:93:eb:8d:e3:b3:34:6b:09:7a:64:f6:
a6:40:be:59:f8:b3:aa:44:bc:03:3c:0b:e1:e4:58:54:bc:b4:
58:f1:43:71:25:16:9d:d3:46:1a:14:97:42:89:5c:7d:3d:b4:
09:fb:2c:67:b8:c9:27:4b:da:35:23:58:ba:aa:15:6c:83:fc:
49:0e:b7:24:9a:1c:ad:bb:c7:42:71:db:5a:7b:64:a3:75:f0:
58:41:0b:e7:e2:1e:92:be:25:6f:dc:82:09:8b:e5:88:b3:ca:
21:ff:fa:2c:1b:3f:00:3d:98:35:4f:4e:51:7a:8f:e9:75:f0:
8e:22:78:29:59:95:bd:27:5d:cb:48:6b:87:bd:c3:0f:79:89:
56:94:8c:5b:19:84:55:b8:70:78:a6:3c:4a:e2:81:43:d0:aa:
31:8f:0a:af:af:ad:d8:e4:c2:5d:b2:d1:e0:25:44:68:66:34:
51:61:07:ac:29:06:14:20:73:77:a6:fe:40:52:ad:2a:45:75:
83:4e:2c:0e:e1:40:63:89:12:ea:44:54:b0:08:24:65:20:51:
1b:3f:6d:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFWZjWN/DPQ3l9dXRT71lPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YWY2NDBjODIwZWViNWZiYzkyMjgxYzYxMTQ0ZjExYTdi
ZDcwN2UwHhcNMjYxMDE5MjMwMTQxWhcNMjYxMDIwMjMwMTQxWjAzMTEwLwYDVQQD
EygxOGU5OTdiOTg0NDMxNjQ2OGNiMDEwZjM2MjFmNzYzZmY5NzNhNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YO/Yoa5vJc7idz/U/uhv9wSTlyp
bIQ4MGLvbUkq9PLVOLHd8kW0ApwZjNkRX654oHe3m/4vA8sV9vl9Upm6N1SJBgb8
X2bMuDPqu2g3rBOL7nd2tJKqMJ7pe5qAj7FSdLSAGZSIKqkjRO/momoRYWLxmavh
nkEYXrM0FudvZg+98D7H34PWCEEFgzuXKZn/sL0G7RtqEhIJCyJauHaKAavwy/1m
W6ZzsAdtg4sOaMGLGYLnLJRNlH0ohmtr+Tcik1IhlG1TaQc4+HBI5ck93m/3zOiC
koj829/Cx/BeZVJ/XFX5isg2Hiw7OHmOreZe3zAmIW8wP0YgkbJEPncPewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjpl7mEQxZGjLAQ82Ifdj/5c6RZMB8GA1UdIwQY
MBaAFJivZAyCDutfvJIoHGEUTxGnvXB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYt
ZWNhYjcwZWYzMmRhLzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8xMjJmZjQtYzRhNy00Njk4LTg3OWYtZWNhYjcwZWYzMmRh
LzEvbUs5a0RJSU82MS04a2lnY1lSUlBFYWU5Y0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEoPz7tHC
tqeMAcIsjN436NcLUb5mcvUcgLm6+dAlRn/d9pRUGRdESkzbtJPrjeOzNGsJemT2
pkC+WfizqkS8AzwL4eRYVLy0WPFDcSUWndNGGhSXQolcfT20CfssZ7jJJ0vaNSNY
uqoVbIP8SQ63JJocrbvHQnHbWntko3XwWEEL5+Iekr4lb9yCCYvliLPKIf/6LBs/
AD2YNU9OUXqP6XXwjiJ4KVmVvSddy0hrh73DD3mJVpSMWxmEVbhweKY8SuKBQ9Cq
MY8Kr6+t2OTCXbLR4CVEaGY0UWEHrCkGFCBzd6b+QFKtKkV1g04sDuFAY4kS6kRU
sAgkZSBRGz9tsQ==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:22:45 2026 by rpki-client