Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: YUYS//q/3JW8UpCDbt9iJcFQS8RpYxAAfYiGyfl3fcQ=
Subject key identifier: 45:27:DF:E0:C8:AB:74:C4:B8:3B:72:A5:5A:34:C4:EF:AC:ED:DF:C3
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01A14B744F84DDE179DF3CA602CF03C1173B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1A3E
Signing time: Sat 17 Oct 2026 20:01:16 +0000
Manifest this update: Sat 17 Oct 2026 20:01:16 +0000
Manifest next update: Sun 18 Oct 2026 20:01:16 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: /296RAXwz1a4Jk87f+8aISXjIjxLqXdOM3su1zsJNNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:74:4f:84:dd:e1:79:df:3c:a6:02:cf:03:c1:17:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Oct 17 20:01:16 2026 GMT
Not After : Oct 18 20:01:16 2026 GMT
Subject: CN=4527dfe0c8ab74c4b83b72a55a34c4efaceddfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:74:5f:c6:d9:d2:08:b0:90:7e:36:c4:bf:08:
4f:eb:74:d0:1f:46:0b:bd:03:69:91:87:80:4f:06:
38:95:da:dd:cc:9c:df:48:48:6e:11:04:a9:e7:ce:
2a:3c:9d:55:7b:a2:ad:af:db:f3:e9:1d:74:b2:f4:
4d:58:4b:4b:2f:a9:6f:21:f4:06:c7:92:ff:52:4d:
b5:5b:de:ee:c7:9d:e1:8b:7b:ac:0d:04:b7:16:9e:
a9:38:be:f2:c7:93:9b:3c:0b:a9:72:0c:82:07:14:
45:dd:ad:86:e8:a2:0e:5b:90:72:e4:c8:23:71:d1:
46:cf:08:89:6c:99:7e:95:c7:8c:e3:fd:72:75:fe:
b2:01:00:c2:92:d7:7c:f4:1e:9e:67:a3:a2:fb:11:
b8:82:32:a2:ab:00:c2:e5:21:8b:80:8b:12:7e:ad:
40:a0:31:95:6e:45:02:2d:e1:57:1c:b2:b6:a2:8e:
9f:e4:62:1d:fd:6e:2b:c1:5e:fb:e4:55:e8:62:d7:
b8:3c:65:1b:21:9b:0d:15:02:5e:50:d4:94:18:c8:
e4:01:50:d0:41:75:15:25:77:f2:47:9c:5d:ef:82:
fc:4d:49:93:e4:dd:64:31:23:de:a0:c9:1d:a7:fb:
cf:01:62:b6:4b:c2:d2:7f:4c:3c:6b:27:99:e0:f8:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:27:DF:E0:C8:AB:74:C4:B8:3B:72:A5:5A:34:C4:EF:AC:ED:DF:C3
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c2:a3:bc:c1:17:d3:ee:63:09:56:ba:5b:f6:80:e5:4c:24:
d1:25:16:84:4a:f9:ef:2f:5c:6a:ad:cc:c2:ca:76:e7:fe:a6:
a2:49:73:0e:15:33:8c:de:7d:b2:51:d4:15:96:b9:3f:0a:c0:
43:17:81:9a:6a:8f:93:b2:ac:01:f3:61:75:59:cb:19:13:7e:
d8:f9:af:1f:02:66:ca:3f:da:43:c4:1c:e7:f7:60:46:d8:54:
fc:52:25:c3:81:32:f0:95:36:dc:0f:94:78:7e:03:c1:2d:f1:
5b:51:42:87:a0:12:37:3e:c2:09:6d:19:82:ac:4a:60:16:80:
96:0b:ff:69:dd:af:90:ed:ea:17:eb:12:e6:6e:18:b0:aa:d2:
08:d6:44:9a:63:b9:3d:26:32:7b:23:60:b4:81:1a:79:40:06:
16:2f:66:2b:8d:d1:e5:a5:f4:09:a1:c4:8a:91:36:c6:ac:d4:
76:37:5e:2d:53:13:72:58:ea:20:51:18:fc:57:96:ad:1c:40:
3a:c8:11:aa:86:b2:41:c7:10:53:75:ac:c5:63:d2:82:53:a4:
a1:c3:2a:81:87:0a:a9:b6:a0:a0:98:ee:de:c8:88:26:1e:96:
35:9e:13:af:70:3b:01:38:b8:80:03:f9:2c:02:51:f9:69:75:
83:3c:29:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLdE+E3eF53zymAs8DwRc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4
YWFkYWUwHhcNMjYxMDE3MjAwMTE2WhcNMjYxMDE4MjAwMTE2WjAzMTEwLwYDVQQD
Eyg0NTI3ZGZlMGM4YWI3NGM0YjgzYjcyYTU1YTM0YzRlZmFjZWRkZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XRfxtnSCLCQfjbEvwhP63TQH0YL
vQNpkYeATwY4ldrdzJzfSEhuEQSp584qPJ1Ve6Ktr9vz6R10svRNWEtLL6lvIfQG
x5L/Uk21W97ux53hi3usDQS3Fp6pOL7yx5ObPAupcgyCBxRF3a2G6KIOW5By5Mgj
cdFGzwiJbJl+lceM4/1ydf6yAQDCktd89B6eZ6Oi+xG4gjKiqwDC5SGLgIsSfq1A
oDGVbkUCLeFXHLK2oo6f5GId/W4rwV775FXoYte4PGUbIZsNFQJeUNSUGMjkAVDQ
QXUVJXfyR5xd74L8TUmT5N1kMSPeoMkdp/vPAWK2S8LSf0w8ayeZ4Pj6hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUn3+DIq3TEuDtypVo0xO+s7d/DMB8GA1UdIwQY
MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt
YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk
LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMKjvMEX
0+5jCVa6W/aA5Uwk0SUWhEr57y9caq3Mwsp25/6moklzDhUzjN59slHUFZa5PwrA
QxeBmmqPk7KsAfNhdVnLGRN+2PmvHwJmyj/aQ8Qc5/dgRthU/FIlw4Ey8JU23A+U
eH4DwS3xW1FCh6ASNz7CCW0ZgqxKYBaAlgv/ad2vkO3qF+sS5m4YsKrSCNZEmmO5
PSYyeyNgtIEaeUAGFi9mK43R5aX0CaHEipE2xqzUdjdeLVMTcljqIFEY/FeWrRxA
OsgRqoayQccQU3WsxWPSglOkocMqgYcKqbagoJju3siIJh6WNZ4Tr3A7ATi4gAP5
LAJR+Wl1gzwpIg==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:07:59 2026 by rpki-client