Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier: 1Bom6WADTsM6WzGOu7xCdSPlM0jGfpS4SyHEFKGdkQQ=
Subject key identifier: BB:E7:A5:68:1F:16:A5:AD:43:A4:F4:17:80:C9:E2:14:9E:04:5E:46
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial: 01A0C9348BDD991F345BD5C0702152C3302C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 13:00:59 +0000
Manifest this update: Tue 22 Sep 2026 13:00:59 +0000
Manifest next update: Wed 23 Sep 2026 13:00:59 +0000
Files and hashes: 1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: U6AeU1AiQbxqIMMDZ76JX2xo7vwmJC83HTa8p1Gvync=)
3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:8b:dd:99:1f:34:5b:d5:c0:70:21:52:c3:30:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Validity
Not Before: Sep 22 13:00:59 2026 GMT
Not After : Sep 23 13:00:59 2026 GMT
Subject: CN=bbe7a5681f16a5ad43a4f41780c9e2149e045e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:6a:ff:2d:9d:e0:fc:92:b4:84:3c:a5:53:
95:0b:08:84:77:ce:27:1d:93:e2:7b:57:78:88:e8:
ef:31:c5:f4:57:30:d5:e9:04:42:c5:ea:66:39:c4:
de:6c:02:6e:d0:1a:31:47:a7:4a:82:d9:fa:5a:12:
f0:c1:7e:1c:7f:f3:dd:bf:8b:7d:f6:50:b7:b5:a6:
50:cc:19:5a:a3:c5:b3:9a:81:9e:ce:0d:12:51:b4:
e8:9a:8c:4c:f2:dd:00:db:12:40:1b:d1:2a:0e:21:
fa:1c:dd:d0:0f:ab:56:b5:bf:d2:92:a9:f5:40:72:
c2:32:83:58:a4:a3:64:c2:1f:1d:a3:7b:42:f9:f3:
ca:0c:fc:ae:ed:e0:57:94:4c:1b:fa:8d:01:b4:6c:
ed:62:ee:e6:41:56:85:b9:28:49:0b:4a:a8:31:fa:
df:e0:ec:8a:f9:13:dd:4a:ca:ab:f4:c8:99:61:7b:
f3:d2:90:53:49:e9:d6:38:20:bd:18:b9:08:67:c1:
98:8c:7f:d0:7f:de:b5:b7:4a:b9:d0:94:6e:41:4d:
2d:ec:86:7a:a5:75:bb:84:07:56:17:d3:15:a7:77:
c5:cf:79:46:21:d4:ba:d6:2a:34:42:88:f9:69:1c:
16:9e:68:75:1d:52:a9:9f:a7:4b:b7:4e:63:cd:98:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:A5:68:1F:16:A5:AD:43:A4:F4:17:80:C9:E2:14:9E:04:5E:46
X509v3 Authority Key Identifier:
keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ee:da:42:72:5f:1b:a1:28:f9:2d:b2:a9:46:72:f5:07:9c:
c8:43:4f:25:f4:d7:8e:2f:65:aa:8d:a7:47:3b:94:34:81:3f:
8c:0e:1e:7d:ab:e3:0e:f3:f9:fe:09:c2:1b:82:ec:23:cc:fc:
ac:e1:44:d4:78:a8:de:43:1b:e9:75:40:4e:da:fb:a5:83:5c:
ed:05:ac:b7:a1:04:ff:fa:4c:4b:a1:45:e5:e6:41:00:37:12:
5e:2b:f1:f8:a7:fd:e3:a5:05:4c:54:ee:5d:57:9e:2b:ed:9d:
f9:5d:54:cb:fd:cb:be:90:97:95:a6:1a:b1:5f:db:10:a0:0b:
c9:24:a0:38:25:e6:47:b9:1a:a7:70:8d:67:0a:64:a5:67:7b:
0d:8e:d6:c8:4a:14:5c:cc:6d:13:1d:0d:88:16:1e:d6:79:71:
87:9f:52:4c:d2:87:07:bc:ad:a6:ad:7f:99:ec:9f:36:2b:ef:
4e:93:b2:46:2a:04:f1:92:16:67:99:88:0f:5c:64:5d:39:82:
71:5a:4d:76:84:07:cd:91:b1:6e:79:c8:f0:89:e6:91:25:5b:
ed:cc:54:62:95:96:67:aa:d4:b0:6a:03:0b:77:fd:28:6c:41:
0a:49:2f:10:9d:1e:6d:7c:65:ef:d3:46:3a:7c:c3:7e:ff:b6:
1f:62:2b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJNIvdmR80W9XAcCFSwzAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk
Y2NlZDgwHhcNMjYwOTIyMTMwMDU5WhcNMjYwOTIzMTMwMDU5WjAzMTEwLwYDVQQD
EyhiYmU3YTU2ODFmMTZhNWFkNDNhNGY0MTc4MGM5ZTIxNDllMDQ1ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzFq/y2d4PyStIQ8pVOVCwiEd84n
HZPie1d4iOjvMcX0VzDV6QRCxepmOcTebAJu0BoxR6dKgtn6WhLwwX4cf/Pdv4t9
9lC3taZQzBlao8WzmoGezg0SUbTomoxM8t0A2xJAG9EqDiH6HN3QD6tWtb/Skqn1
QHLCMoNYpKNkwh8do3tC+fPKDPyu7eBXlEwb+o0BtGztYu7mQVaFuShJC0qoMfrf
4OyK+RPdSsqr9MiZYXvz0pBTSenWOCC9GLkIZ8GYjH/Qf961t0q50JRuQU0t7IZ6
pXW7hAdWF9MVp3fFz3lGIdS61io0Qoj5aRwWnmh1HVKpn6dLt05jzZi50QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvnpWgfFqWtQ6T0F4DJ4hSeBF5GMB8GA1UdIwQY
MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt
NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm
LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu7aQnJf
G6Eo+S2yqUZy9QecyENPJfTXji9lqo2nRzuUNIE/jA4efavjDvP5/gnCG4LsI8z8
rOFE1Hio3kMb6XVATtr7pYNc7QWst6EE//pMS6FF5eZBADcSXivx+Kf946UFTFTu
XVeeK+2d+V1Uy/3LvpCXlaYasV/bEKALySSgOCXmR7kap3CNZwpkpWd7DY7WyEoU
XMxtEx0NiBYe1nlxh59STNKHB7ytpq1/meyfNivvTpOyRioE8ZIWZ5mID1xkXTmC
cVpNdoQHzZGxbnnI8InmkSVb7cxUYpWWZ6rUsGoDC3f9KGxBCkkvEJ0ebXxl79NG
OnzDfv+2H2IrYg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:27:37 2026 by rpki-client