
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
File: ac7WLmmPOc-za-DE0cmEBfZ641A.mft (raw, json)
Hash identifier: ICDIkJreRWb2JsSjYgZpVAXV30dAZDD7Jw578OdpLnA=
Subject key identifier: 8C:D5:B8:75:AA:A9:8B:EF:3B:25:DD:D7:1F:88:C3:40:A4:F3:94:75
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Certificate issuer: /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial: 01A11597F29E33C350365767E9CF74EB9E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
Manifest number: 0109
Signing time: Wed 07 Oct 2026 09:00:41 +0000
Manifest this update: Wed 07 Oct 2026 09:00:41 +0000
Manifest next update: Thu 08 Oct 2026 09:00:41 +0000
Files and hashes: 1: 8ds30e27s4jEGttTs6YlBQM3z5s.roa (hash: fhyuHvz2U+aS6Bex74blw3zMPMfs8rwkJE+Axsibwvc=)
2: DABiD7uw5X1UDgK0KYm4pTweBTs.roa (hash: CdIof73ob606H6HEETNJAXQA/8lVWBNHp980E+YLvcU=)
3: XHiCg7-vOaMABA4CYBKSVf3rQRk.roa (hash: g1IQNPouH48EoFzQdEYNrlJEZkzgvbZrvrkCirhFzgo=)
4: ac7WLmmPOc-za-DE0cmEBfZ641A.crl (hash: d27yyrGYSEXPbSrKIH/FrxyBWs/6RoMpggyEctKOwZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 09:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:97:f2:9e:33:c3:50:36:57:67:e9:cf:74:eb:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Validity
Not Before: Oct 7 09:00:41 2026 GMT
Not After : Oct 8 09:00:41 2026 GMT
Subject: CN=8cd5b875aaa98bef3b25ddd71f88c340a4f39475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:90:c5:42:80:26:d8:ce:da:a9:be:44:bf:
70:46:54:b5:cf:03:66:46:04:f5:18:a9:58:74:bb:
d9:27:6a:53:81:fb:56:e5:bd:95:16:d9:c6:e8:53:
eb:7b:a4:ee:c2:4d:2e:06:c5:8e:33:ee:83:4c:d1:
fe:e8:a5:8e:97:b8:4c:ef:79:a2:48:15:fd:bc:f3:
6e:93:51:38:74:55:8d:4b:ed:e1:79:d5:63:49:79:
36:74:c1:47:21:3d:14:66:a2:da:ab:6c:74:d9:d9:
0c:4f:7a:53:47:7b:12:1b:3b:74:ae:29:12:63:a1:
ff:de:f4:8a:da:58:9b:22:ef:af:5f:d0:d4:28:c6:
95:3d:bf:ec:5d:75:1b:43:84:f5:46:0e:c9:c4:29:
75:32:e1:b1:77:10:b0:26:2b:39:2e:c9:d6:99:74:
76:6b:fc:6f:9b:58:06:9a:47:2e:06:c8:ba:9c:d7:
e6:df:78:ef:e8:e5:26:03:93:a7:ff:36:27:bb:ac:
06:dc:1f:60:c9:04:c3:bb:1c:e6:95:e7:e6:36:47:
03:77:95:e8:4a:e3:65:cf:19:4e:38:88:bb:72:bc:
f8:85:c0:84:72:df:b6:43:2d:14:55:2c:3b:a2:19:
8f:2f:1c:c8:8c:18:c1:e8:86:74:a2:91:41:70:36:
31:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D5:B8:75:AA:A9:8B:EF:3B:25:DD:D7:1F:88:C3:40:A4:F3:94:75
X509v3 Authority Key Identifier:
keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:df:86:c8:b3:20:9d:b3:bb:ac:63:05:82:09:ca:68:41:77:
6b:d7:c3:f8:85:56:f2:ae:a7:e2:e1:47:05:19:56:7e:1d:0c:
df:82:88:5b:4b:b4:9d:be:89:07:ba:33:44:c1:d1:9e:d2:b9:
ef:13:1a:07:21:17:6a:ba:56:e3:ef:02:77:7d:8d:49:c7:d1:
14:0a:22:24:d5:9a:1c:f6:cd:5b:7a:1f:15:c1:3f:09:0e:54:
a3:aa:f4:6e:6b:cc:f3:6d:72:ca:e8:ce:42:cb:aa:08:a8:af:
43:3c:77:f9:9d:7c:fb:c2:d3:63:f5:cf:7d:dc:7b:0e:ec:6d:
19:cc:b1:41:a7:97:6f:62:62:a6:86:66:07:37:67:0c:5a:19:
82:a1:a3:bc:e7:53:8e:15:27:90:14:1d:e2:4f:9e:9f:08:bd:
0f:90:69:af:65:8c:2e:8a:77:04:26:1d:a9:b7:4d:98:d6:58:
93:25:7a:ab:9e:cb:b7:81:5e:66:af:9d:0d:87:f2:91:ff:a8:
23:5c:f9:ff:2f:5b:38:48:cc:c8:67:0c:da:56:bd:1c:77:2c:
49:67:fc:1b:8f:d6:0f:e7:47:c8:59:b8:f8:75:1f:65:c8:50:
bf:f5:b9:6d:8f:52:72:fc:fe:04:c9:b5:cc:1f:89:1d:09:22:
68:2d:7a:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEVl/KeM8NQNldn6c90655TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2VkNjJlNjk4ZjM5Y2ZiMzZiZTBjNGQxYzk4NDA1ZjY3
YWUzNTAwHhcNMjYxMDA3MDkwMDQxWhcNMjYxMDA4MDkwMDQxWjAzMTEwLwYDVQQD
Eyg4Y2Q1Yjg3NWFhYTk4YmVmM2IyNWRkZDcxZjg4YzM0MGE0ZjM5NDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB6QxUKAJtjO2qm+RL9wRlS1zwNm
RgT1GKlYdLvZJ2pTgftW5b2VFtnG6FPre6Tuwk0uBsWOM+6DTNH+6KWOl7hM73mi
SBX9vPNuk1E4dFWNS+3hedVjSXk2dMFHIT0UZqLaq2x02dkMT3pTR3sSGzt0rikS
Y6H/3vSK2libIu+vX9DUKMaVPb/sXXUbQ4T1Rg7JxCl1MuGxdxCwJis5LsnWmXR2
a/xvm1gGmkcuBsi6nNfm33jv6OUmA5On/zYnu6wG3B9gyQTDuxzmlefmNkcDd5Xo
SuNlzxlOOIi7crz4hcCEct+2Qy0UVSw7ohmPLxzIjBjB6IZ0opFBcDYxAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzVuHWqqYvvOyXd1x+Iw0Ck85R1MB8GA1UdIwQY
MBaAFGnO1i5pjznPs2vgxNHJhAX2euNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt
NWM2OTA0NDdiYTg5LzEvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5
LzEvYWM3V0xtbVBPYy16YS1ERTBjbUVCZlo2NDFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnd+GyLMg
nbO7rGMFggnKaEF3a9fD+IVW8q6n4uFHBRlWfh0M34KIW0u0nb6JB7ozRMHRntK5
7xMaByEXarpW4+8Cd32NScfRFAoiJNWaHPbNW3ofFcE/CQ5Uo6r0bmvM821yyujO
QsuqCKivQzx3+Z18+8LTY/XPfdx7DuxtGcyxQaeXb2JipoZmBzdnDFoZgqGjvOdT
jhUnkBQd4k+enwi9D5Bpr2WMLop3BCYdqbdNmNZYkyV6q57Lt4FeZq+dDYfykf+o
I1z5/y9bOEjMyGcM2la9HHcsSWf8G4/WD+dHyFm4+HUfZchQv/W5bY9Scvz+BMm1
zB+JHQkiaC16AQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:28 2026 by rpki-client