Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: Ki5CllCuhZUANoyU/b7EuNC09CAs8oePRYJ0xMzZwQs=
Subject key identifier: 77:23:F9:78:57:A0:87:09:0D:80:95:FB:57:37:23:34:42:FE:62:02
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 01A0889F1FF7B28628935E044D99F8537B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0A09
Signing time: Thu 10 Sep 2026 00:02:04 +0000
Manifest this update: Thu 10 Sep 2026 00:02:04 +0000
Manifest next update: Fri 11 Sep 2026 00:02:04 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: LSHKMS0e3DTiCnJaNXdMCOC7zAaqwqjJU8fVzgfC6YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9f:1f:f7:b2:86:28:93:5e:04:4d:99:f8:53:7b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Sep 10 00:02:04 2026 GMT
Not After : Sep 11 00:02:04 2026 GMT
Subject: CN=7723f97857a087090d8095fb5737233442fe6202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bd:28:70:b1:76:43:1d:cc:d8:ff:6a:26:09:
87:75:74:9d:75:77:4e:87:ef:f6:15:10:ec:03:0a:
0c:8b:8d:ce:76:00:93:c7:4b:b5:8d:db:3d:42:ca:
40:63:4b:c7:13:09:82:34:af:af:83:3a:3f:91:b4:
3b:e6:f5:84:de:0f:fa:a2:fe:8b:c9:c0:58:95:e2:
39:75:0d:0d:08:22:32:a7:4c:cf:00:da:fd:52:55:
c7:6d:4f:b3:ca:ee:0c:7e:57:50:55:7b:85:0a:62:
51:49:63:b0:e5:d7:ae:cc:af:48:dd:05:2a:3e:91:
c5:c2:a7:97:0f:a1:ee:5c:a4:f3:b1:c7:71:90:35:
38:ce:96:b7:f3:7a:10:dc:41:fc:dd:37:c6:b5:b3:
c7:82:4d:68:2c:65:6f:8d:b1:8e:b7:f8:f2:b7:65:
68:d6:a5:6e:38:86:3b:2f:cc:62:d4:5e:2c:e4:aa:
e9:ec:61:be:22:07:1e:50:5e:bc:70:f2:6b:41:c5:
e4:0b:93:9b:97:74:34:b1:cb:c9:26:36:57:81:be:
58:38:dd:87:6d:1c:7e:d6:f5:32:54:26:2a:fb:5a:
a5:44:5d:44:49:fa:96:06:f2:e0:bd:91:f9:ec:a0:
46:2f:cc:4a:2e:c6:e8:80:51:42:06:29:10:89:35:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:23:F9:78:57:A0:87:09:0D:80:95:FB:57:37:23:34:42:FE:62:02
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c0:24:fe:a4:71:15:3a:6c:ce:5f:e4:92:dd:f3:65:e6:08:
fa:dc:f5:5b:a1:c6:76:10:eb:cc:ee:4d:76:d9:c6:23:1b:4a:
2b:65:12:45:dc:6d:8d:78:fc:28:d1:1b:67:2b:80:33:a6:47:
e6:f1:09:e3:14:1d:9a:be:2b:c1:9b:e0:83:8c:00:3e:c5:78:
db:33:20:7d:da:80:11:b5:62:2a:d5:e6:fa:87:35:ca:7d:e1:
5c:12:d3:93:7c:a1:2b:d8:2b:7b:c8:fd:1e:cb:f5:ed:39:65:
aa:5d:3b:6b:02:b3:48:74:12:5b:ec:40:0d:12:d8:49:f4:0e:
74:01:56:31:6b:5c:2e:0e:54:52:3e:79:92:8d:2e:bd:cc:d9:
aa:14:ec:82:d4:24:b8:18:9f:1f:43:e5:de:ca:19:5c:ea:9d:
ac:d8:d2:24:12:37:e2:1a:84:23:a4:39:2d:d1:5c:5a:88:40:
06:73:b6:43:e2:0f:0a:5f:94:2b:84:13:d9:63:30:1e:f5:19:
da:64:b3:e7:05:02:b2:40:01:53:43:36:17:70:21:ed:d7:46:
82:84:cb:78:50:68:5d:28:6c:ad:eb:48:54:f1:c1:05:8e:f6:
8a:a3:d2:16:c4:d2:c2:40:4b:87:5f:16:bc:55:d5:a1:1c:6f:
6f:7c:38:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCInx/3soYok14ETZn4U3swMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2
NTFiZjcwHhcNMjYwOTEwMDAwMjA0WhcNMjYwOTExMDAwMjA0WjAzMTEwLwYDVQQD
Eyg3NzIzZjk3ODU3YTA4NzA5MGQ4MDk1ZmI1NzM3MjMzNDQyZmU2MjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4r0ocLF2Qx3M2P9qJgmHdXSddXdO
h+/2FRDsAwoMi43OdgCTx0u1jds9QspAY0vHEwmCNK+vgzo/kbQ75vWE3g/6ov6L
ycBYleI5dQ0NCCIyp0zPANr9UlXHbU+zyu4MfldQVXuFCmJRSWOw5deuzK9I3QUq
PpHFwqeXD6HuXKTzscdxkDU4zpa383oQ3EH83TfGtbPHgk1oLGVvjbGOt/jyt2Vo
1qVuOIY7L8xi1F4s5Krp7GG+IgceUF68cPJrQcXkC5Obl3Q0scvJJjZXgb5YON2H
bRx+1vUyVCYq+1qlRF1ESfqWBvLgvZH57KBGL8xKLsbogFFCBikQiTUrOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcj+XhXoIcJDYCV+1c3IzRC/mICMB8GA1UdIwQY
MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct
OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1
LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8Ak/qRx
FTpszl/kkt3zZeYI+tz1W6HGdhDrzO5NdtnGIxtKK2USRdxtjXj8KNEbZyuAM6ZH
5vEJ4xQdmr4rwZvgg4wAPsV42zMgfdqAEbViKtXm+oc1yn3hXBLTk3yhK9gre8j9
Hsv17Tllql07awKzSHQSW+xADRLYSfQOdAFWMWtcLg5UUj55ko0uvczZqhTsgtQk
uBifH0Pl3soZXOqdrNjSJBI34hqEI6Q5LdFcWohABnO2Q+IPCl+UK4QT2WMwHvUZ
2mSz5wUCskABU0M2F3Ah7ddGgoTLeFBoXShsretIVPHBBY72iqPSFsTSwkBLh18W
vFXVoRxvb3w45Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:32:52 2026 by rpki-client