Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
File: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft (raw, json)
Hash identifier: fx9vH7zu1+f3OA+zTlb3txByGKBQiOSP4bieCt+Wf0s=
Subject key identifier: 40:B7:1C:BB:7E:63:D5:67:34:B3:72:16:B7:D2:EC:65:01:78:0B:39
Authority key identifier: F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
Certificate issuer: /CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Certificate serial: 01A0013883081D96E7D623DE41CD59007B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
Manifest number: 06FF
Signing time: Fri 14 Aug 2026 17:01:15 +0000
Manifest this update: Fri 14 Aug 2026 17:01:15 +0000
Manifest next update: Sat 15 Aug 2026 17:01:15 +0000
Files and hashes: 1: 9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl (hash: nZUgitQgCcuZyirK1Epjy8vZf6RdMlkzQXYloq9i6Fo=)
2: JKxruJrsyQODEt0lo_2igVlEBhw.roa (hash: 2Ldq4wJQTMkIcJXiRtPhwdIrKaep4MniRxTOmuYmXUs=)
3: UrR8he9LeX1_n_grB04eKjIEfn4.roa (hash: 6VYM1BE9h3lSboPJRgPSxyvYhSPFOMNMfzzxqBF3w0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:83:08:1d:96:e7:d6:23:de:41:cd:59:00:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41c7d47718a8a4a9d8c50b26083e718525b6c1b
Validity
Not Before: Aug 14 17:01:15 2026 GMT
Not After : Aug 15 17:01:15 2026 GMT
Subject: CN=40b71cbb7e63d56734b37216b7d2ec6501780b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:10:a2:7d:55:31:cc:91:02:0c:81:8d:e5:
af:e0:31:bb:8b:9b:3f:d7:8e:27:b8:a3:7a:b6:8e:
ae:fb:c9:c7:ed:a7:7f:da:d7:4b:c5:5a:c7:ec:8a:
fd:3d:cf:96:5b:2b:2a:79:af:79:0b:49:28:a1:c6:
aa:f8:98:32:c4:51:b4:d8:6e:3a:cf:17:e3:bc:62:
c6:42:11:30:9b:3f:82:e0:63:24:3c:02:23:a9:01:
59:63:4b:3f:ed:d1:12:2f:b1:7f:c4:19:6f:99:55:
34:52:ce:7b:c9:2b:43:02:f5:a6:11:fa:23:5b:02:
73:6b:d1:b8:1e:a3:07:72:2f:45:26:81:fc:8f:f8:
93:fb:24:5a:c5:75:ec:58:19:d1:76:8a:09:ee:5c:
95:3c:bc:1d:e6:7a:33:1f:9b:db:31:93:32:35:1e:
b2:25:9d:ab:28:d5:e9:d9:19:d2:ef:5a:ed:47:71:
b2:bc:ad:4d:19:01:d8:52:fb:75:39:e3:15:04:0e:
1c:37:e7:b1:5c:56:70:14:83:e8:a2:17:22:e7:61:
f7:1c:74:e7:a7:f0:a4:f0:2e:c6:d2:59:79:93:e6:
68:a7:04:37:ae:3f:14:ed:76:27:37:87:7c:da:d1:
06:b6:a3:f0:21:71:5b:89:6a:50:a8:9e:d9:ca:02:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B7:1C:BB:7E:63:D5:67:34:B3:72:16:B7:D2:EC:65:01:78:0B:39
X509v3 Authority Key Identifier:
keyid:F4:1C:7D:47:71:8A:8A:4A:9D:8C:50:B2:60:83:E7:18:52:5B:6C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Bx9R3GKikqdjFCyYIPnGFJbbBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/536cc4-b790-41c2-a32e-60b2c9821078/1/9Bx9R3GKikqdjFCyYIPnGFJbbBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:96:d2:ff:db:c4:3a:a7:9a:52:12:7c:d2:49:94:5c:ed:91:
82:a8:2a:2c:1f:11:23:5d:56:d1:39:9a:7f:84:31:89:ba:f3:
ee:c8:5b:e6:0a:11:6a:2e:15:52:99:49:09:77:d9:e0:a1:fa:
f4:71:9c:0b:88:05:3a:eb:93:61:e8:43:a2:c5:3f:e9:1f:2c:
f7:07:2d:bd:9c:09:d2:aa:26:cb:ee:ab:25:b1:69:19:38:12:
0d:96:c3:d6:8a:3e:a1:64:ca:9c:48:bb:a4:fb:34:b6:3a:75:
eb:c2:dc:ce:8f:07:98:42:6a:84:8a:a0:bc:82:a7:f4:7c:45:
da:0a:69:cb:5c:72:3b:b7:4c:df:0b:5d:b1:85:8e:44:f7:7b:
49:ae:5e:31:84:60:9c:fd:c5:94:0f:53:43:ac:dd:9f:87:2b:
5b:5b:56:13:4f:af:6f:ed:af:c1:8a:59:04:34:09:74:3d:8e:
cd:4c:ab:7c:be:10:a2:70:fa:26:95:5b:f2:9f:bb:d5:3e:a7:
4a:f4:17:60:8f:7d:74:a6:25:66:6d:d2:4c:f3:14:63:36:98:
c5:99:ef:8e:85:b2:16:54:15:cc:02:9f:d8:19:f9:dc:ab:0b:
f1:4e:b2:69:a7:42:10:4e:e7:69:5e:6c:11:41:77:bc:3e:2e:
3c:d5:9a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOIMIHZbn1iPeQc1ZAHs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MWM3ZDQ3NzE4YThhNGE5ZDhjNTBiMjYwODNlNzE4NTI1
YjZjMWIwHhcNMjYwODE0MTcwMTE1WhcNMjYwODE1MTcwMTE1WjAzMTEwLwYDVQQD
Eyg0MGI3MWNiYjdlNjNkNTY3MzRiMzcyMTZiN2QyZWM2NTAxNzgwYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDAQon1VMcyRAgyBjeWv4DG7i5s/
144nuKN6to6u+8nH7ad/2tdLxVrH7Ir9Pc+WWysqea95C0koocaq+JgyxFG02G46
zxfjvGLGQhEwmz+C4GMkPAIjqQFZY0s/7dESL7F/xBlvmVU0Us57yStDAvWmEfoj
WwJza9G4HqMHci9FJoH8j/iT+yRaxXXsWBnRdooJ7lyVPLwd5nozH5vbMZMyNR6y
JZ2rKNXp2RnS71rtR3GyvK1NGQHYUvt1OeMVBA4cN+exXFZwFIPoohci52H3HHTn
p/Ck8C7G0ll5k+ZopwQ3rj8U7XYnN4d82tEGtqPwIXFbiWpQqJ7ZygL9kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC3HLt+Y9VnNLNyFrfS7GUBeAs5MB8GA1UdIwQY
MBaAFPQcfUdxiopKnYxQsmCD5xhSW2wbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUt
NjBiMmM5ODIxMDc4LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81MzZjYzQtYjc5MC00MWMyLWEzMmUtNjBiMmM5ODIxMDc4
LzEvOUJ4OVIzR0tpa3FkakZDeVlJUG5HRkpiYkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJbS/9vE
OqeaUhJ80kmUXO2RgqgqLB8RI11W0Tmaf4Qxibrz7shb5goRai4VUplJCXfZ4KH6
9HGcC4gFOuuTYehDosU/6R8s9wctvZwJ0qomy+6rJbFpGTgSDZbD1oo+oWTKnEi7
pPs0tjp168Lczo8HmEJqhIqgvIKn9HxF2gppy1xyO7dM3wtdsYWORPd7Sa5eMYRg
nP3FlA9TQ6zdn4crW1tWE0+vb+2vwYpZBDQJdD2OzUyrfL4QonD6JpVb8p+71T6n
SvQXYI99dKYlZm3STPMUYzaYxZnvjoWyFlQVzAKf2Bn53KsL8U6yaadCEE7naV5s
EUF3vD4uPNWarg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:47 2026 by rpki-client