Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
File: 1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft (raw, json)
Hash identifier: j7eJ5wz/d6ydTphTmTi/8Rgs4tKqOSkVxmVGPX7r0AM=
Subject key identifier: 02:70:37:D8:D0:1A:70:96:38:33:60:0A:B9:8D:A0:40:03:8E:C3:1E
Authority key identifier: D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
Certificate issuer: /CN=d66d02c2de23ecfafa1bf6e69aaf0a053ad2a937
Certificate serial: 01A03FA9E7B9766235088BBC9538CBF9A2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
Manifest number: 9B
Signing time: Wed 26 Aug 2026 20:01:34 +0000
Manifest this update: Wed 26 Aug 2026 20:01:34 +0000
Manifest next update: Thu 27 Aug 2026 20:01:34 +0000
Files and hashes: 1: 1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl (hash: CsY0AULu+/S4/O8pGDCUWN0puM21Bqy+2wXbzVVLyuc=)
2: hMarOzjNa2uxI8It-wCPwhewjWo.roa (hash: gB5bYavb7EtB4+yn9c+a+9zhOOm6c6i62Jr+VY6qKDs=)
3: yA2CQChnx3EpiN_3TuOHVzDA_Dc.roa (hash: JvGltTZCmUOve8Ou1vnPFV1Ww+E5BNMMbd0O8++rizE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:e7:b9:76:62:35:08:8b:bc:95:38:cb:f9:a2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66d02c2de23ecfafa1bf6e69aaf0a053ad2a937
Validity
Not Before: Aug 26 20:01:34 2026 GMT
Not After : Aug 27 20:01:34 2026 GMT
Subject: CN=027037d8d01a70963833600ab98da040038ec31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:7a:51:55:6d:c5:4e:c1:58:23:aa:58:bc:
28:3b:a2:a5:d2:48:86:ee:1d:60:fd:87:0f:88:3c:
0d:88:9e:cc:85:ff:1c:4e:37:d2:0e:e5:4f:49:cc:
52:a2:ee:2a:5d:21:f0:42:dd:a7:45:37:0f:ce:01:
b3:12:ee:b0:47:e1:d2:00:97:51:a2:9b:6f:fb:d4:
14:b4:16:7c:67:c2:e0:03:cd:0e:b6:1f:07:43:b9:
08:f7:0a:e4:7f:32:a4:64:b4:e1:7f:57:27:76:55:
1f:88:b3:37:42:e3:43:4e:71:31:a0:b1:9c:3d:d4:
33:60:a6:1e:51:56:ae:e0:6b:f9:d3:c9:73:51:10:
c6:64:de:6a:4e:81:03:a9:1a:b3:2d:62:ce:8f:1f:
6e:95:6c:21:1b:72:39:6a:d2:97:90:e4:cd:6e:b7:
f1:94:8f:2e:73:9c:41:d6:0d:03:98:13:2d:bd:fb:
c3:15:cb:1c:e7:d5:fb:cc:92:5f:2e:08:af:88:31:
aa:45:fb:c8:7b:05:dc:3c:c2:0a:c0:ba:57:ae:78:
47:a6:ad:12:6e:0d:7a:8e:fd:95:10:74:1f:22:57:
3c:d5:e3:44:63:19:02:8e:2f:be:93:06:fb:18:67:
b5:66:15:9a:96:9c:64:e4:43:ce:a8:f9:78:e3:bb:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:37:D8:D0:1A:70:96:38:33:60:0A:B9:8D:A0:40:03:8E:C3:1E
X509v3 Authority Key Identifier:
keyid:D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:0d:91:0e:27:b6:36:4a:80:84:be:99:46:ee:42:17:be:7c:
26:51:39:e6:d2:4e:0e:a9:a5:8e:59:d1:93:8a:5a:90:35:6f:
33:e8:60:63:fc:cb:f9:b1:77:9f:7c:be:62:7b:a6:35:9f:98:
c3:f2:be:ef:1e:50:d3:2e:93:d5:92:99:51:78:49:b2:d5:a1:
95:b8:66:e4:6c:b1:ea:2f:ef:49:e3:24:14:2b:4d:d3:a7:57:
a7:dd:8a:b1:aa:98:e8:c6:e0:50:12:b3:7c:bf:52:35:81:cf:
0e:e1:91:e7:5a:d5:5e:b1:6f:c1:42:87:47:45:fe:d1:e9:d2:
5d:6f:00:45:27:d4:05:6a:d6:e0:95:45:e5:7a:d0:81:64:78:
01:6b:7b:f6:e4:d8:91:a6:cb:d0:55:d7:55:96:ad:29:71:23:
86:ca:70:f3:f4:24:ee:f0:f2:4c:6f:a4:b0:9e:72:f3:76:92:
0c:89:1d:62:c2:d7:e0:fb:9e:5f:76:be:81:e6:b3:56:42:be:
2d:a5:fc:6a:d0:d5:5b:c3:9f:0f:af:ae:b4:c5:08:0c:50:bd:
4b:70:7f:7f:28:c6:68:03:00:cd:2b:1b:51:99:45:41:24:b8:
c3:6d:c1:84:a4:b4:5f:dc:a0:65:2e:55:85:3d:a5:24:4d:dd:
08:a5:00:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qee5dmI1CIu8lTjL+aLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmQwMmMyZGUyM2VjZmFmYTFiZjZlNjlhYWYwYTA1M2Fk
MmE5MzcwHhcNMjYwODI2MjAwMTM0WhcNMjYwODI3MjAwMTM0WjAzMTEwLwYDVQQD
EygwMjcwMzdkOGQwMWE3MDk2MzgzMzYwMGFiOThkYTA0MDAzOGVjMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptZ6UVVtxU7BWCOqWLwoO6Kl0kiG
7h1g/YcPiDwNiJ7Mhf8cTjfSDuVPScxSou4qXSHwQt2nRTcPzgGzEu6wR+HSAJdR
optv+9QUtBZ8Z8LgA80Oth8HQ7kI9wrkfzKkZLThf1cndlUfiLM3QuNDTnExoLGc
PdQzYKYeUVau4Gv508lzURDGZN5qToEDqRqzLWLOjx9ulWwhG3I5atKXkOTNbrfx
lI8uc5xB1g0DmBMtvfvDFcsc59X7zJJfLgiviDGqRfvIewXcPMIKwLpXrnhHpq0S
bg16jv2VEHQfIlc81eNEYxkCji++kwb7GGe1ZhWalpxk5EPOqPl447s3QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJwN9jQGnCWODNgCrmNoEADjsMeMB8GA1UdIwQY
MBaAFNZtAsLeI+z6+hv25pqvCgU60qk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW0wQ3d0NGo3UHI2R19ibW1xOEtCVHJTcVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQt
ZTM2OWQ2NjAyZTZmLzEvMW0wQ3d0NGo3UHI2R19ibW1xOEtCVHJTcVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQtZTM2OWQ2NjAyZTZm
LzEvMW0wQ3d0NGo3UHI2R19ibW1xOEtCVHJTcVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASg2RDie2
NkqAhL6ZRu5CF758JlE55tJODqmljlnRk4pakDVvM+hgY/zL+bF3n3y+YnumNZ+Y
w/K+7x5Q0y6T1ZKZUXhJstWhlbhm5Gyx6i/vSeMkFCtN06dXp92KsaqY6MbgUBKz
fL9SNYHPDuGR51rVXrFvwUKHR0X+0enSXW8ARSfUBWrW4JVF5XrQgWR4AWt79uTY
kabL0FXXVZatKXEjhspw8/Qk7vDyTG+ksJ5y83aSDIkdYsLX4PueX3a+geazVkK+
LaX8atDVW8OfD6+utMUIDFC9S3B/fyjGaAMAzSsbUZlFQSS4w23BhKS0X9ygZS5V
hT2lJE3dCKUAtA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:46:42 2026 by rpki-client