Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
File: d9Vhc4owymkonMhFMN5d73SjqYI.mft (raw, json)
Hash identifier: MlYmFhC3rsJ9VaOLPrHqDiG8ohYj196JrPJ3CBEVWx4=
Subject key identifier: 08:DC:CA:6E:F5:13:EA:DD:2B:77:7F:1B:E1:2A:FA:6D:2C:EC:06:A1
Authority key identifier: 77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
Certificate issuer: /CN=77d561738a30ca69289cc84530de5def74a3a982
Certificate serial: 01A103C8ED028C2C5632F8ECC4F4CD15239F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
Manifest number: 025F
Signing time: Sat 03 Oct 2026 22:01:01 +0000
Manifest this update: Sat 03 Oct 2026 22:01:01 +0000
Manifest next update: Sun 04 Oct 2026 22:01:01 +0000
Files and hashes: 1: d9Vhc4owymkonMhFMN5d73SjqYI.crl (hash: gmRfVitbUHhukI91sf5Ou4fxzNERQo3gumIWS5rw8J4=)
2: wBGjgdfu_nLRR4DjOBdo0PtKJMM.roa (hash: PPK9ixZ6Q7KuFLEJo2Wk9bDSxb6ZvTbGERhmOzUiZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c8:ed:02:8c:2c:56:32:f8:ec:c4:f4:cd:15:23:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77d561738a30ca69289cc84530de5def74a3a982
Validity
Not Before: Oct 3 22:01:01 2026 GMT
Not After : Oct 4 22:01:01 2026 GMT
Subject: CN=08dcca6ef513eadd2b777f1be12afa6d2cec06a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:f9:50:8c:ca:a0:d4:bc:45:4d:2c:7e:5f:
00:c0:45:fe:45:1f:df:0f:38:5b:d8:ec:7a:c2:a1:
56:eb:c1:b7:7f:43:82:26:c0:28:0a:ef:71:62:1e:
c3:f8:04:49:e9:cf:b2:a9:4f:a9:6f:76:8c:3f:60:
54:b1:07:ec:39:d2:6d:c1:55:51:ff:4e:5f:77:48:
e9:98:f6:eb:d8:17:d4:dd:9e:a9:27:25:99:90:0e:
09:bb:0d:39:66:55:78:7c:99:b9:a6:9d:0f:64:50:
00:ba:ca:a5:5e:4f:a2:54:50:da:b6:29:ba:b4:80:
45:d9:98:7a:05:b5:7b:81:58:16:0b:d5:08:1e:dc:
4d:4a:1a:25:2b:e1:d8:5f:b0:d5:4f:44:dd:12:69:
7c:ef:fb:55:a4:12:7c:8e:20:52:97:74:3f:24:a8:
7c:19:8e:f1:7d:7d:2b:28:90:27:af:24:b7:a7:9c:
43:f4:d7:84:75:60:c5:19:c0:97:2c:4a:26:22:7f:
2f:f6:77:08:b7:15:32:17:31:30:c8:c3:c3:70:03:
c0:b3:1d:55:7f:05:4b:75:d9:ea:c5:aa:32:fc:30:
18:13:37:9c:21:15:8a:6f:ac:27:d1:ab:82:1d:12:
63:eb:a7:76:df:d0:aa:37:d5:5d:9d:25:4a:46:2f:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DC:CA:6E:F5:13:EA:DD:2B:77:7F:1B:E1:2A:FA:6D:2C:EC:06:A1
X509v3 Authority Key Identifier:
keyid:77:D5:61:73:8A:30:CA:69:28:9C:C8:45:30:DE:5D:EF:74:A3:A9:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9Vhc4owymkonMhFMN5d73SjqYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/cbebe4-afa6-4a1c-961b-4431f89384a3/1/d9Vhc4owymkonMhFMN5d73SjqYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:09:84:bd:3f:94:e4:a3:f4:8a:7b:3c:d0:ba:ed:9e:67:79:
d4:41:0c:d3:0e:11:d0:a5:21:93:ad:c3:46:95:bf:cd:27:df:
45:e1:73:78:da:55:7c:8c:1d:9b:63:db:fa:fd:e8:1d:3f:eb:
f3:98:5f:83:1b:f8:e2:34:07:21:36:68:67:27:6f:7e:dc:93:
85:a9:a2:ea:da:b8:06:c6:38:7e:b1:35:ca:97:ad:35:87:65:
08:55:36:fa:8d:c5:ab:b0:5f:04:5f:63:9a:26:eb:3b:2f:09:
03:80:bc:32:74:63:4d:1f:66:6c:18:51:10:b3:46:40:70:88:
59:78:e0:98:88:77:8d:20:2a:11:7e:db:b0:22:9a:07:ad:e7:
ab:36:84:3c:9d:c5:f2:f0:c7:59:7f:51:40:71:b6:da:cd:5a:
1b:52:11:48:15:0f:78:57:e7:8a:d0:2b:85:07:dc:01:c5:e1:
fd:e7:c9:1e:e0:c5:ed:cd:ea:a5:e8:db:3a:94:2b:11:e3:74:
b5:07:7d:f6:6a:3c:f8:d2:44:22:d3:3a:74:f4:fc:14:4b:14:
a5:e4:1c:1b:9e:1f:43:50:99:9b:35:d8:28:c7:bd:9f:93:da:
c2:db:3d:24:65:88:03:50:7e:e2:15:84:24:d3:5c:31:1b:66:
10:9c:aa:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEDyO0CjCxWMvjsxPTNFSOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZDU2MTczOGEzMGNhNjkyODljYzg0NTMwZGU1ZGVmNzRh
M2E5ODIwHhcNMjYxMDAzMjIwMTAxWhcNMjYxMDA0MjIwMTAxWjAzMTEwLwYDVQQD
EygwOGRjY2E2ZWY1MTNlYWRkMmI3NzdmMWJlMTJhZmE2ZDJjZWMwNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUH5UIzKoNS8RU0sfl8AwEX+RR/f
Dzhb2Ox6wqFW68G3f0OCJsAoCu9xYh7D+ARJ6c+yqU+pb3aMP2BUsQfsOdJtwVVR
/05fd0jpmPbr2BfU3Z6pJyWZkA4Juw05ZlV4fJm5pp0PZFAAusqlXk+iVFDatim6
tIBF2Zh6BbV7gVgWC9UIHtxNSholK+HYX7DVT0TdEml87/tVpBJ8jiBSl3Q/JKh8
GY7xfX0rKJAnryS3p5xD9NeEdWDFGcCXLEomIn8v9ncItxUyFzEwyMPDcAPAsx1V
fwVLddnqxaoy/DAYEzecIRWKb6wn0auCHRJj66d239CqN9VdnSVKRi/cLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjcym71E+rdK3d/G+Eq+m0s7AahMB8GA1UdIwQY
MBaAFHfVYXOKMMppKJzIRTDeXe90o6mCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDlWaGM0b3d5bWtvbk1oRk1ONWQ3M1NqcVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jYmViZTQtYWZhNi00YTFjLTk2MWIt
NDQzMWY4OTM4NGEzLzEvZDlWaGM0b3d5bWtvbk1oRk1ONWQ3M1NqcVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jYmViZTQtYWZhNi00YTFjLTk2MWItNDQzMWY4OTM4NGEz
LzEvZDlWaGM0b3d5bWtvbk1oRk1ONWQ3M1NqcVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAmEvT+U
5KP0ins80Lrtnmd51EEM0w4R0KUhk63DRpW/zSffReFzeNpVfIwdm2Pb+v3oHT/r
85hfgxv44jQHITZoZydvftyThami6tq4BsY4frE1ypetNYdlCFU2+o3Fq7BfBF9j
mibrOy8JA4C8MnRjTR9mbBhRELNGQHCIWXjgmIh3jSAqEX7bsCKaB63nqzaEPJ3F
8vDHWX9RQHG22s1aG1IRSBUPeFfnitArhQfcAcXh/efJHuDF7c3qpejbOpQrEeN0
tQd99mo8+NJEItM6dPT8FEsUpeQcG54fQ1CZmzXYKMe9n5Pawts9JGWIA1B+4hWE
JNNcMRtmEJyqkw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 07:04:35 2026 by rpki-client