Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: P9ioaoUAqyPMHXa2sPzyKRNsclvYLjs7ZF2VDrYIO2s=
Subject key identifier: 34:0F:63:92:51:9D:B6:3E:D5:20:E4:BC:A1:47:24:28:12:3A:C0:37
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 01A0976C77C7CBF762EDA71A811ED4BAE30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1A76
Signing time: Sat 12 Sep 2026 21:01:03 +0000
Manifest this update: Sat 12 Sep 2026 21:01:03 +0000
Manifest next update: Sun 13 Sep 2026 21:01:03 +0000
Files and hashes: 1: 0ihzHauFogznBZ4D95qRfmh5DWY.roa (hash: pm2OFW8n3jM91O28PWSYiZEPtxsO4IG0tuEGJsYy+tw=)
2: aXqn4kbdTiISCg3qjch21kWiAS0.roa (hash: fWTEPBg8GhRwpF6veTh6PUPLm3Q1obhdo3c/16/83Z4=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: O8doqcmb9Ij8J4x3fQ31l1sFJ762iRieiIeP/JAxe1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 13:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:97:6c:77:c7:cb:f7:62:ed:a7:1a:81:1e:d4:ba:e3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Sep 12 21:01:03 2026 GMT
Not After : Sep 13 21:01:03 2026 GMT
Subject: CN=340f6392519db63ed520e4bca1472428123ac037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:e7:0a:73:1f:e1:50:0f:bd:a9:d4:ae:44:
02:0a:d4:f8:97:3e:68:0f:6a:81:3d:e5:fa:d4:34:
f0:26:93:3e:48:fd:30:ef:d5:69:2a:76:65:5d:2c:
35:1c:85:0d:0b:5a:45:80:4b:68:15:72:8b:ca:b3:
5d:c1:f2:64:26:65:ff:03:3c:6c:a1:be:ac:7d:fa:
e2:45:fd:60:86:8b:40:81:97:46:2f:bd:c8:47:67:
97:ef:a9:ef:c8:26:97:a6:46:b7:46:18:20:e9:1b:
da:d6:af:1a:86:da:39:2d:fc:57:ae:50:cd:04:bc:
0d:53:ab:03:84:df:32:00:a6:56:48:30:90:5f:a9:
ae:65:0a:15:c1:14:48:b8:a9:35:ca:5c:08:3e:fc:
50:02:cf:3a:27:76:3e:28:8c:2c:33:95:05:75:d5:
67:91:9d:29:55:14:ca:0f:2a:cc:da:74:b9:a0:60:
89:51:ce:9c:f2:18:1e:b9:de:e1:a6:74:ed:25:d5:
b8:7d:da:b7:63:68:d0:04:13:1f:f4:83:f0:89:e3:
29:3a:8f:76:b6:bb:63:51:38:04:bc:41:01:ac:52:
ba:10:5b:f1:fa:8d:b0:3a:2b:4c:d0:02:88:94:f9:
05:45:05:8a:6f:ef:94:a0:5c:45:12:42:2b:41:c3:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:63:92:51:9D:B6:3E:D5:20:E4:BC:A1:47:24:28:12:3A:C0:37
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:95:01:bb:e7:b8:1f:b3:87:f2:36:39:d5:c6:93:08:68:14:
ee:c3:4d:ee:aa:90:0d:5d:11:ec:2b:00:bc:f5:2b:f6:c2:9a:
06:03:c3:d0:a2:66:f1:06:82:8a:4c:1a:11:f8:dc:a7:fc:4c:
89:bd:24:50:46:94:7e:70:a8:ce:68:75:5f:36:ff:ee:02:dd:
71:d5:a4:bd:a0:fd:0c:2d:63:e2:98:2f:fe:eb:2c:6d:70:6c:
11:91:df:13:78:c2:54:09:92:3e:99:ec:2a:a5:3a:be:fe:0e:
d5:d3:cd:cc:b7:b3:bd:e1:bc:eb:4a:46:4f:7b:27:ee:b9:28:
8a:4e:93:0c:98:44:9b:bf:25:22:85:d9:b0:fc:15:52:0b:a5:
1e:04:28:c0:ee:4d:8b:45:e8:56:21:cb:45:be:bc:77:3a:4c:
d3:47:3f:4c:e2:aa:c4:39:3e:23:77:5d:e0:48:af:c5:41:ce:
fb:2d:b8:e5:ee:d9:3e:e0:31:f3:0b:db:70:72:b5:69:9d:fd:
c2:d6:39:d7:75:4b:fd:fa:1a:56:26:8b:c3:d8:7a:33:30:95:
36:b4:31:e6:e5:09:f6:e6:be:78:b0:14:95:07:f3:02:0b:15:
4a:c2:80:ee:37:13:e2:cb:68:45:f1:64:b5:72:b0:30:01:62:
6e:cb:12:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCXbHfHy/di7acagR7UuuMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MmI4NjA5NWNlNTU4ZDJlOTYxODcyOGE0NDIyOGEyN2Jl
OTA5OGYwHhcNMjYwOTEyMjEwMTAzWhcNMjYwOTEzMjEwMTAzWjAzMTEwLwYDVQQD
EygzNDBmNjM5MjUxOWRiNjNlZDUyMGU0YmNhMTQ3MjQyODEyM2FjMDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym7nCnMf4VAPvanUrkQCCtT4lz5o
D2qBPeX61DTwJpM+SP0w79VpKnZlXSw1HIUNC1pFgEtoFXKLyrNdwfJkJmX/Azxs
ob6sffriRf1ghotAgZdGL73IR2eX76nvyCaXpka3Rhgg6Rva1q8ahto5LfxXrlDN
BLwNU6sDhN8yAKZWSDCQX6muZQoVwRRIuKk1ylwIPvxQAs86J3Y+KIwsM5UFddVn
kZ0pVRTKDyrM2nS5oGCJUc6c8hgeud7hpnTtJdW4fdq3Y2jQBBMf9IPwieMpOo92
trtjUTgEvEEBrFK6EFvx+o2wOitM0AKIlPkFRQWKb++UoFxFEkIrQcNLBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQPY5JRnbY+1SDkvKFHJCgSOsA3MB8GA1UdIwQY
MBaAFJkrhglc5VjS6WGHKKRCKKJ76QmPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEt
ZjA0ZmRjYzA5ZTUxLzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84ZWE5YjktM2I2ZS00ZmRmLWI1ZDEtZjA0ZmRjYzA5ZTUx
LzEvbVN1R0NWemxXTkxwWVljb3BFSW9vbnZwQ1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZUBu+e4
H7OH8jY51caTCGgU7sNN7qqQDV0R7CsAvPUr9sKaBgPD0KJm8QaCikwaEfjcp/xM
ib0kUEaUfnCozmh1Xzb/7gLdcdWkvaD9DC1j4pgv/ussbXBsEZHfE3jCVAmSPpns
KqU6vv4O1dPNzLezveG860pGT3sn7rkoik6TDJhEm78lIoXZsPwVUgulHgQowO5N
i0XoViHLRb68dzpM00c/TOKqxDk+I3dd4EivxUHO+y245e7ZPuAx8wvbcHK1aZ39
wtY513VL/foaViaLw9h6MzCVNrQx5uUJ9ua+eLAUlQfzAgsVSsKA7jcT4stoRfFk
tXKwMAFibssSnA==
-----END CERTIFICATE-----
Generated at Sat Sep 12 23:22:25 2026 by rpki-client