Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
File: p9ha3isNTsHKCSqOJwPBkgDHLzI.mft (raw, json)
Hash identifier: nIfo9QKFhVO34IBNQCPguXiAz/3bLn6ad+jtWtO3478=
Subject key identifier: 69:5B:6F:5D:28:0C:0B:A4:EA:F1:CA:9B:2C:64:2D:F6:A2:9F:EA:29
Authority key identifier: A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
Certificate issuer: /CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Certificate serial: 01A12BB210162ECC23A5875BFBCC3897819A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
Manifest number: 1315
Signing time: Sun 11 Oct 2026 16:00:52 +0000
Manifest this update: Sun 11 Oct 2026 16:00:52 +0000
Manifest next update: Mon 12 Oct 2026 16:00:52 +0000
Files and hashes: 1: TfDpwnkDY9DTlAsJc9Iqnduzj8A.roa (hash: XbrnUGWje15/NR9HfumBox3YZkdHMNSMKy7Az9ObxUM=)
2: mijO3rBDux071bgVII2VGtelaWs.roa (hash: c57AFpXKCuOBDWXAgwOZwYrMLNV93F0DNDkv38YCADA=)
3: p9ha3isNTsHKCSqOJwPBkgDHLzI.crl (hash: 6zejHkiJZncCKcD3NrZVmcOOb7g3gK+Us+4czkQGurc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:10:16:2e:cc:23:a5:87:5b:fb:cc:38:97:81:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d85ade2b0d4ec1ca092a8e2703c19200c72f32
Validity
Not Before: Oct 11 16:00:52 2026 GMT
Not After : Oct 12 16:00:52 2026 GMT
Subject: CN=695b6f5d280c0ba4eaf1ca9b2c642df6a29fea29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d9:4b:fd:27:a3:58:00:97:5c:52:2b:87:77:
70:37:dc:be:00:09:93:de:f2:9d:5a:ea:7d:3c:20:
77:ba:e1:10:b3:e0:7f:80:7b:8f:4c:9d:1e:a5:2d:
3a:71:a7:e2:ea:34:b5:fd:6d:84:49:8c:1b:6a:1b:
a1:7a:e6:a5:8a:52:c5:b1:30:89:0c:23:73:10:f6:
22:2e:a3:a4:37:62:3a:ce:46:ab:2a:22:9b:81:28:
00:6f:57:d0:23:e0:c1:62:76:b5:b5:a7:9c:30:8e:
93:bd:80:41:b5:af:d3:1c:8b:97:94:cb:01:03:8a:
23:97:4c:31:26:60:9c:ce:15:fd:32:95:af:d5:4f:
4d:49:ef:6f:c8:a6:e2:87:8a:03:e5:84:f7:a1:e1:
62:da:5d:a6:2e:9c:16:34:af:bc:b5:ee:db:2d:3a:
80:ba:59:84:fa:cb:48:6f:cd:87:2a:d3:a4:74:60:
d5:8d:95:68:c2:4a:35:7e:2e:3e:53:fa:d3:36:e0:
23:cf:7c:df:9c:bf:cc:2c:97:b0:04:ef:ca:86:8d:
bc:ed:ae:cf:56:47:d2:67:ae:b2:e4:14:c1:83:bd:
2d:a0:53:c6:50:90:ef:84:84:e1:a7:a0:97:6c:d4:
a0:db:61:5c:44:13:9b:f3:49:d0:e1:f8:cd:31:2c:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5B:6F:5D:28:0C:0B:A4:EA:F1:CA:9B:2C:64:2D:F6:A2:9F:EA:29
X509v3 Authority Key Identifier:
keyid:A7:D8:5A:DE:2B:0D:4E:C1:CA:09:2A:8E:27:03:C1:92:00:C7:2F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9ha3isNTsHKCSqOJwPBkgDHLzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/403142-dcfc-4fb5-ae1f-04b0bf60b9b7/1/p9ha3isNTsHKCSqOJwPBkgDHLzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bc:75:3f:02:69:fd:4e:80:ba:23:f4:c4:fc:1a:ca:00:00:
65:c3:00:82:c5:a3:a2:77:76:90:eb:b7:c2:64:a3:3a:b6:2e:
a1:21:fe:c1:21:56:fd:cc:76:8d:55:66:91:ee:51:2f:5f:e7:
82:cc:54:e4:0a:90:0e:1b:8e:27:02:43:37:14:00:5a:f2:29:
41:34:9f:1d:28:a5:96:fe:eb:e5:75:41:07:0c:f8:cf:99:ee:
99:36:df:26:10:f5:73:7b:6e:69:30:4a:34:b0:46:64:eb:0f:
4f:c2:90:b5:02:89:1f:10:1a:df:15:8b:96:d3:ee:a9:16:77:
96:fd:97:1f:f8:54:60:ef:0e:45:3c:81:d1:39:6d:15:ef:3b:
f4:d4:d4:24:63:40:8b:30:09:f8:40:05:4c:aa:f4:cc:f6:a9:
44:53:a8:01:94:8d:df:66:b4:55:a2:a0:3d:a6:53:82:45:02:
22:a8:ca:37:7d:98:4c:84:27:10:47:7a:48:d7:53:40:d2:04:
62:a1:bc:34:31:ae:a4:30:7e:fc:a5:ad:3a:f6:5c:2a:7e:cf:
34:46:57:65:9d:4d:d0:dd:16:9e:e0:8d:97:b5:2e:c2:66:9c:
ff:eb:a8:9d:76:57:20:12:78:66:97:7d:67:4c:83:34:2a:9d:
d7:89:44:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErshAWLswjpYdb+8w4l4GaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZDg1YWRlMmIwZDRlYzFjYTA5MmE4ZTI3MDNjMTkyMDBj
NzJmMzIwHhcNMjYxMDExMTYwMDUyWhcNMjYxMDEyMTYwMDUyWjAzMTEwLwYDVQQD
Eyg2OTViNmY1ZDI4MGMwYmE0ZWFmMWNhOWIyYzY0MmRmNmEyOWZlYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNlL/SejWACXXFIrh3dwN9y+AAmT
3vKdWup9PCB3uuEQs+B/gHuPTJ0epS06cafi6jS1/W2ESYwbahuheualilLFsTCJ
DCNzEPYiLqOkN2I6zkarKiKbgSgAb1fQI+DBYna1taecMI6TvYBBta/THIuXlMsB
A4ojl0wxJmCczhX9MpWv1U9NSe9vyKbih4oD5YT3oeFi2l2mLpwWNK+8te7bLTqA
ulmE+stIb82HKtOkdGDVjZVowko1fi4+U/rTNuAjz3zfnL/MLJewBO/Kho287a7P
VkfSZ66y5BTBg70toFPGUJDvhIThp6CXbNSg22FcRBOb80nQ4fjNMSxB9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlbb10oDAuk6vHKmyxkLfain+opMB8GA1UdIwQY
MBaAFKfYWt4rDU7BygkqjicDwZIAxy8yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYt
MDRiMGJmNjBiOWI3LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80MDMxNDItZGNmYy00ZmI1LWFlMWYtMDRiMGJmNjBiOWI3
LzEvcDloYTNpc05Uc0hLQ1NxT0p3UEJrZ0RITHpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU7x1PwJp
/U6AuiP0xPwaygAAZcMAgsWjond2kOu3wmSjOrYuoSH+wSFW/cx2jVVmke5RL1/n
gsxU5AqQDhuOJwJDNxQAWvIpQTSfHSillv7r5XVBBwz4z5numTbfJhD1c3tuaTBK
NLBGZOsPT8KQtQKJHxAa3xWLltPuqRZ3lv2XH/hUYO8ORTyB0TltFe879NTUJGNA
izAJ+EAFTKr0zPapRFOoAZSN32a0VaKgPaZTgkUCIqjKN32YTIQnEEd6SNdTQNIE
YqG8NDGupDB+/KWtOvZcKn7PNEZXZZ1N0N0WnuCNl7Uuwmac/+uonXZXIBJ4Zpd9
Z0yDNCqd14lE1g==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:19:33 2026 by rpki-client