Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json)
Hash identifier: KEVeqYcHgzSNghpXVA13+aeMJ/mbTwP/QOVA1810WJE=
Subject key identifier: B0:5D:74:4B:00:04:3B:A4:58:B8:D1:0F:1D:57:CF:04:FA:4A:88:E8
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01A08A1F0A693481F94D0DF1477439D4D7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 07:01:25 +0000
Manifest this update: Thu 10 Sep 2026 07:01:25 +0000
Manifest next update: Fri 11 Sep 2026 07:01:25 +0000
Files and hashes: 1: Yo_sQDnlWVAHdBUjfYUlBGrEGAk.roa (hash: UtSlgr8dKlU2oiUU/YuYyiNrWIQBlqU7VjuzqeMr5iU=)
2: Yohrn8HNTtjhGA9URKUO2_Mby_U.roa (hash: /XhETKRi5W1obuv4QEHTmdciLbp0sxJedBeaO8RsKsM=)
3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: Z2l0cRlxs1pnjI7MQVuIOfAshYbxbms0AAZdvo9MNj0=)
4: pqiBFTplBLtHWoMHzRforQTq8dI.roa (hash: wl+v61veOlULrNd8VjKMUyPIgjxBb6XbU3q/woMIXVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:0a:69:34:81:f9:4d:0d:f1:47:74:39:d4:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Sep 10 07:01:25 2026 GMT
Not After : Sep 11 07:01:25 2026 GMT
Subject: CN=b05d744b00043ba458b8d10f1d57cf04fa4a88e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:8f:06:3d:7f:95:b9:bb:df:28:e8:32:d8:
a9:d9:4d:be:61:0e:a0:fb:6c:dd:f8:24:ac:63:ee:
06:53:ef:6a:48:a8:b5:cc:a3:57:1e:af:bd:4c:e2:
d6:dd:84:dc:0f:95:de:7e:0a:1c:21:20:5c:15:d5:
91:e6:e9:38:9a:a5:dd:13:d6:67:40:a5:86:07:8d:
4b:19:7b:47:27:3f:b6:45:92:4e:21:31:c4:a6:33:
ef:86:a2:a4:08:eb:42:8e:41:82:44:d6:c2:7c:14:
ee:76:91:e9:92:9e:89:dd:c2:96:c8:10:33:f2:68:
35:fc:6b:9b:2f:a7:16:01:c7:b5:90:9e:97:79:2d:
bc:50:25:36:ec:25:8e:55:6e:cc:b3:d0:3a:cf:a9:
ea:d6:ed:8f:87:75:70:35:26:cd:3f:2b:1f:bf:47:
06:2f:a5:1c:53:08:54:bc:f0:4c:df:6d:04:26:6d:
1f:71:57:7b:84:3e:9c:06:aa:58:dd:a4:a5:f1:93:
01:2f:1f:8b:fb:a4:d6:6a:78:66:5d:54:d3:02:54:
89:51:c9:a1:c8:af:87:08:04:35:40:22:ac:d1:cc:
00:f5:cd:89:ed:0e:d8:9e:4c:0e:e6:ca:73:2b:8b:
9d:16:81:a4:76:94:48:74:e5:ba:e4:02:65:69:77:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5D:74:4B:00:04:3B:A4:58:B8:D1:0F:1D:57:CF:04:FA:4A:88:E8
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e8:40:6a:4d:d3:4d:06:00:3e:28:f1:57:9c:d9:7a:4e:fd:
55:59:e1:b8:74:20:97:e2:45:e3:46:94:55:6c:f5:a9:e3:6b:
cb:59:0e:11:ff:64:52:09:bb:05:f9:2b:58:8e:f6:17:b5:d4:
8e:dc:01:e7:89:59:69:05:2e:49:e0:0f:2c:12:4c:1e:a2:e2:
4b:71:d0:c4:11:5a:12:45:3d:e2:8d:da:9c:3e:5a:2b:79:9b:
48:e4:9c:37:8a:c1:fa:bb:c7:6e:d2:ee:c9:68:1d:43:81:78:
23:de:ab:45:be:0d:ae:57:09:7f:75:28:e0:10:45:ad:f7:6a:
28:ad:b3:40:99:85:73:66:be:c6:01:40:75:a7:8c:2e:df:c6:
91:db:3b:36:38:0e:5c:9a:13:a4:9f:a5:2b:6a:73:e3:95:5d:
9d:0d:59:ac:c4:38:0d:27:40:28:06:1e:e9:ee:ee:94:c4:ed:
29:4e:ad:33:fc:66:0f:7a:96:5d:6c:b0:77:9d:09:a9:22:ce:
c4:bf:77:4e:60:b9:d4:aa:09:cf:0b:ba:15:42:82:ff:ee:96:
0d:99:5a:01:38:53:14:88:84:18:b7:53:7f:9b:1d:b9:a8:86:
71:1f:17:e3:eb:94:6a:52:7c:05:48:36:11:7e:9e:56:c8:43:
d7:89:33:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKHwppNIH5TQ3xR3Q51NfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3
NmRhOTUwHhcNMjYwOTEwMDcwMTI1WhcNMjYwOTExMDcwMTI1WjAzMTEwLwYDVQQD
EyhiMDVkNzQ0YjAwMDQzYmE0NThiOGQxMGYxZDU3Y2YwNGZhNGE4OGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG2PBj1/lbm73yjoMtip2U2+YQ6g
+2zd+CSsY+4GU+9qSKi1zKNXHq+9TOLW3YTcD5XefgocISBcFdWR5uk4mqXdE9Zn
QKWGB41LGXtHJz+2RZJOITHEpjPvhqKkCOtCjkGCRNbCfBTudpHpkp6J3cKWyBAz
8mg1/GubL6cWAce1kJ6XeS28UCU27CWOVW7Ms9A6z6nq1u2Ph3VwNSbNPysfv0cG
L6UcUwhUvPBM320EJm0fcVd7hD6cBqpY3aSl8ZMBLx+L+6TWanhmXVTTAlSJUcmh
yK+HCAQ1QCKs0cwA9c2J7Q7YnkwO5spzK4udFoGkdpRIdOW65AJlaXcHEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBddEsABDukWLjRDx1XzwT6SojoMB8GA1UdIwQY
MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt
NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh
LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxuhAak3T
TQYAPijxV5zZek79VVnhuHQgl+JF40aUVWz1qeNry1kOEf9kUgm7BfkrWI72F7XU
jtwB54lZaQUuSeAPLBJMHqLiS3HQxBFaEkU94o3anD5aK3mbSOScN4rB+rvHbtLu
yWgdQ4F4I96rRb4NrlcJf3Uo4BBFrfdqKK2zQJmFc2a+xgFAdaeMLt/Gkds7NjgO
XJoTpJ+lK2pz45VdnQ1ZrMQ4DSdAKAYe6e7ulMTtKU6tM/xmD3qWXWywd50JqSLO
xL93TmC51KoJzwu6FUKC/+6WDZlaAThTFIiEGLdTf5sduaiGcR8X4+uUalJ8BUg2
EX6eVshD14kz6Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:13:40 2026 by rpki-client