Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: zyC144zyfzxJNIdFXuL8OLDtFUNcIhB6HBjob3HVrns=
Subject key identifier: 10:88:C4:F8:12:D9:2B:49:AC:F0:11:C2:83:A0:10:67:3E:B0:46:E0
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 01A14D6266945E783793D920D7F8E40DFE65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 1A3F
Signing time: Sun 18 Oct 2026 05:00:56 +0000
Manifest this update: Sun 18 Oct 2026 05:00:56 +0000
Manifest next update: Mon 19 Oct 2026 05:00:56 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: t0YhcB/JvUzJZBbs1QjHCt/jhyX9aBLEkvt6bwIxm5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:62:66:94:5e:78:37:93:d9:20:d7:f8:e4:0d:fe:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Oct 18 05:00:56 2026 GMT
Not After : Oct 19 05:00:56 2026 GMT
Subject: CN=1088c4f812d92b49acf011c283a010673eb046e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2d:50:41:22:66:59:bf:7d:7b:5c:45:d3:f0:
d8:27:87:5a:c4:29:15:9b:69:8a:0d:8f:79:d5:09:
c3:2a:53:eb:33:e5:4e:c9:25:56:39:08:da:52:62:
fb:dc:4d:03:fa:7d:e2:a1:88:34:30:00:47:7e:76:
c1:1e:2c:c0:63:73:fc:44:d3:3c:bf:13:f2:cc:66:
1b:b2:17:62:aa:3c:ed:e8:38:55:13:1f:a2:8b:54:
13:84:c1:dd:23:57:4d:a6:00:3a:67:e4:10:f2:fa:
9e:55:1c:26:b9:a4:61:35:9f:39:64:ea:5d:e9:40:
45:6d:0f:b8:aa:09:28:c9:4e:3f:06:8e:c9:c7:74:
f3:1d:04:16:88:62:e6:ee:fd:91:6f:14:eb:4f:e3:
ad:5a:88:04:20:d6:38:4d:63:ec:8a:66:72:d2:61:
30:2a:3c:63:0b:26:f0:1e:3c:46:d7:d6:70:d1:bd:
4a:65:51:68:8c:76:c6:49:f8:04:46:34:b8:ed:b8:
71:05:d8:37:62:68:cf:97:14:fd:53:fe:19:a2:c8:
ca:3b:9b:e3:67:56:c7:ff:33:7c:52:1c:ad:ac:34:
59:eb:5c:a6:d7:bb:5c:62:a6:e4:ba:da:67:b0:96:
20:b8:ea:44:27:6d:91:ab:12:db:17:5d:9c:21:f1:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:88:C4:F8:12:D9:2B:49:AC:F0:11:C2:83:A0:10:67:3E:B0:46:E0
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:90:44:10:46:e3:93:99:d5:ab:49:0c:20:dc:9b:94:b2:ca:
8c:d7:f3:dd:99:b7:f1:42:f3:bc:2c:a1:eb:b7:a7:59:93:ac:
0e:ee:e6:05:f4:54:11:e7:0b:ce:c0:87:aa:fa:4f:4f:ee:12:
f0:82:cf:53:c5:b3:02:50:0a:b1:e8:97:fd:b1:f5:85:ae:f5:
66:0c:87:d7:66:a4:3a:09:98:ee:c4:e4:aa:74:a2:e3:20:36:
c4:e1:7d:f9:9f:cc:39:a3:c8:96:58:5f:c8:3d:bd:aa:92:df:
68:41:80:3d:4b:00:fc:08:b6:06:e6:14:0e:77:3f:0f:c8:55:
7e:5d:51:aa:59:45:07:6b:71:3f:21:2b:92:d8:60:d6:b9:d6:
8e:fc:24:4b:33:6c:c1:41:4a:fd:80:ae:c1:0f:0e:4c:03:22:
d5:25:04:a9:c8:d5:9b:f5:b7:fe:03:23:a9:5b:69:3c:7e:f5:
52:89:2d:92:71:ed:60:1a:d8:af:08:dc:d9:dd:5b:6c:ba:a7:
a7:ff:40:49:6a:7f:e9:c8:94:74:9b:26:10:d1:f3:67:e8:6e:
7f:38:e9:1f:f8:09:b3:09:e3:10:31:80:82:00:68:9b:b6:93:
ba:1e:4c:35:13:16:90:39:de:44:9f:c2:9c:ba:94:37:3e:04:
b6:11:81:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFNYmaUXng3k9kg1/jkDf5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4
YWFkYWUwHhcNMjYxMDE4MDUwMDU2WhcNMjYxMDE5MDUwMDU2WjAzMTEwLwYDVQQD
EygxMDg4YzRmODEyZDkyYjQ5YWNmMDExYzI4M2EwMTA2NzNlYjA0NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS1QQSJmWb99e1xF0/DYJ4daxCkV
m2mKDY951QnDKlPrM+VOySVWOQjaUmL73E0D+n3ioYg0MABHfnbBHizAY3P8RNM8
vxPyzGYbshdiqjzt6DhVEx+ii1QThMHdI1dNpgA6Z+QQ8vqeVRwmuaRhNZ85ZOpd
6UBFbQ+4qgkoyU4/Bo7Jx3TzHQQWiGLm7v2RbxTrT+OtWogEINY4TWPsimZy0mEw
KjxjCybwHjxG19Zw0b1KZVFojHbGSfgERjS47bhxBdg3YmjPlxT9U/4ZosjKO5vj
Z1bH/zN8UhytrDRZ61ym17tcYqbkutpnsJYguOpEJ22RqxLbF12cIfFYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCIxPgS2StJrPARwoOgEGc+sEbgMB8GA1UdIwQY
MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt
YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk
LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpBEEEbj
k5nVq0kMINyblLLKjNfz3Zm38ULzvCyh67enWZOsDu7mBfRUEecLzsCHqvpPT+4S
8ILPU8WzAlAKseiX/bH1ha71ZgyH12akOgmY7sTkqnSi4yA2xOF9+Z/MOaPIllhf
yD29qpLfaEGAPUsA/Ai2BuYUDnc/D8hVfl1RqllFB2txPyErkthg1rnWjvwkSzNs
wUFK/YCuwQ8OTAMi1SUEqcjVm/W3/gMjqVtpPH71UoktknHtYBrYrwjc2d1bbLqn
p/9ASWp/6ciUdJsmENHzZ+hufzjpH/gJswnjEDGAggBom7aTuh5MNRMWkDneRJ/C
nLqUNz4EthGBkA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:12 2026 by rpki-client