Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
File: I9j2IJmVBsyG11SOpygrsSnwLWg.mft (raw, json)
Hash identifier: k8UNh/hGjZ8qLPWV1sx5CoCQDYJBiEmKDfCe++klUKY=
Subject key identifier: A7:0E:2D:C2:F7:E2:2B:23:01:C4:21:36:79:81:3D:A4:64:8B:96:EC
Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68
Certificate serial: 01A127D519354D00DD7BD677ADD7666714F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
Manifest number: 1685
Signing time: Sat 10 Oct 2026 22:00:39 +0000
Manifest this update: Sat 10 Oct 2026 22:00:39 +0000
Manifest next update: Sun 11 Oct 2026 22:00:39 +0000
Files and hashes: 1: HWGUebs3EWNszWIfhL8txyJZ4Wc.roa (hash: Kkv1FkwV95pLZojGSMytjvxl12xKvZhsibGSapIvxNM=)
2: I9j2IJmVBsyG11SOpygrsSnwLWg.crl (hash: 8Qh6xszF0GsFmKmXzAyN6O/1P8lN9r1ChPkSzbxfp9s=)
3: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (hash: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:19:35:4d:00:dd:7b:d6:77:ad:d7:66:67:14:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68
Validity
Not Before: Oct 10 22:00:39 2026 GMT
Not After : Oct 11 22:00:39 2026 GMT
Subject: CN=a70e2dc2f7e22b2301c4213679813da4648b96ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:f4:d3:a4:4f:01:f1:9c:47:b3:e9:9d:d0:
c1:90:af:74:be:f1:57:8f:56:5b:8d:59:6f:be:87:
48:f3:6f:13:05:0a:9d:28:76:6b:61:d5:13:d2:da:
0e:94:f0:ec:0d:a0:11:84:d9:24:0a:ed:fb:03:e0:
1c:ce:bb:ff:45:21:51:1a:53:ef:17:b7:91:89:c8:
fe:5d:2e:65:88:6b:02:e4:14:f4:57:97:12:0c:3f:
b0:b8:41:1c:c2:87:b7:16:f8:3f:26:71:a8:69:63:
8e:9e:ea:a2:2d:f5:06:e1:95:9d:78:86:34:53:c9:
bf:21:10:ec:22:b4:d0:99:2c:e5:25:05:d8:54:46:
84:b4:92:39:78:b3:59:68:b4:86:e7:12:13:98:c7:
4c:39:90:b8:e7:2b:7b:80:fd:c6:d7:c5:7d:8e:98:
f0:5b:76:d1:69:87:96:ab:50:b0:ec:29:7f:d3:b8:
e2:77:13:e7:2c:9f:64:4c:64:c7:6a:56:8b:64:8f:
ea:e8:1a:7f:b8:43:25:05:a5:97:f8:d3:10:fb:85:
da:26:03:eb:c5:95:ce:80:45:52:f2:6b:b7:c6:22:
21:dd:5a:a4:9c:c0:e8:61:b8:99:df:74:a2:39:32:
1b:0f:74:96:5f:f7:5f:ac:c6:ff:7a:5a:6f:aa:2f:
d8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0E:2D:C2:F7:E2:2B:23:01:C4:21:36:79:81:3D:A4:64:8B:96:EC
X509v3 Authority Key Identifier:
keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:52:0f:d7:c8:88:9e:8c:ea:6a:57:92:e0:4c:98:65:42:6c:
a8:fa:b9:bb:3a:7a:a9:59:e9:16:09:c4:9c:53:34:d3:46:b8:
71:81:45:c8:46:bc:8d:bf:89:98:71:e9:00:df:26:7b:f6:a6:
df:b7:ba:5f:8f:3c:6a:0e:da:c4:af:c4:18:a3:4f:8d:39:2e:
44:d0:a8:df:b7:6b:80:16:2c:01:29:58:dc:b7:96:bb:e7:d6:
fe:82:69:3c:70:85:89:97:5f:14:2e:f8:ee:e4:05:ec:01:77:
cc:d6:6d:b2:5f:fa:33:f8:9f:df:97:25:b6:f0:60:f7:ef:a2:
cd:53:4b:d7:a6:c9:cf:a6:56:79:0c:3f:b0:ed:5c:57:3d:01:
8d:ae:74:0a:8d:bc:a0:17:53:7e:d5:e8:62:d9:d7:3e:19:2f:
da:47:a3:58:0f:00:9c:41:e9:d8:e4:3e:f5:31:cd:93:33:4d:
a6:2b:1d:3c:54:72:ac:23:d5:47:18:bf:58:20:0a:a4:ef:82:
c2:56:3c:1f:88:ee:ca:ed:fb:32:c4:90:a9:bd:d2:c8:98:0d:
d1:ac:4a:71:b1:b0:4f:41:a0:78:8c:75:42:cf:b6:18:2a:60:
17:12:4c:cb:c9:d3:35:96:34:a0:b8:d8:e1:c6:d1:0f:6c:e9:
ed:41:72:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEn1Rk1TQDde9Z3rddmZxTyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm
MDJkNjgwHhcNMjYxMDEwMjIwMDM5WhcNMjYxMDExMjIwMDM5WjAzMTEwLwYDVQQD
EyhhNzBlMmRjMmY3ZTIyYjIzMDFjNDIxMzY3OTgxM2RhNDY0OGI5NmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHj006RPAfGcR7PpndDBkK90vvFX
j1ZbjVlvvodI828TBQqdKHZrYdUT0toOlPDsDaARhNkkCu37A+Aczrv/RSFRGlPv
F7eRicj+XS5liGsC5BT0V5cSDD+wuEEcwoe3Fvg/JnGoaWOOnuqiLfUG4ZWdeIY0
U8m/IRDsIrTQmSzlJQXYVEaEtJI5eLNZaLSG5xITmMdMOZC45yt7gP3G18V9jpjw
W3bRaYeWq1Cw7Cl/07jidxPnLJ9kTGTHalaLZI/q6Bp/uEMlBaWX+NMQ+4XaJgPr
xZXOgEVS8mu3xiIh3VqknMDoYbiZ33SiOTIbD3SWX/dfrMb/elpvqi/YQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcOLcL34isjAcQhNnmBPaRki5bsMB8GA1UdIwQY
MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et
NGZkYzQ4ZGE4ZjMzLzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz
LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlIP18iI
nozqaleS4EyYZUJsqPq5uzp6qVnpFgnEnFM000a4cYFFyEa8jb+JmHHpAN8me/am
37e6X488ag7axK/EGKNPjTkuRNCo37drgBYsASlY3LeWu+fW/oJpPHCFiZdfFC74
7uQF7AF3zNZtsl/6M/if35cltvBg9++izVNL16bJz6ZWeQw/sO1cVz0Bja50Co28
oBdTftXoYtnXPhkv2kejWA8AnEHp2OQ+9THNkzNNpisdPFRyrCPVRxi/WCAKpO+C
wlY8H4juyu37MsSQqb3SyJgN0axKcbGwT0GgeIx1Qs+2GCpgFxJMy8nTNZY0oLjY
4cbRD2zp7UFy4A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:19:05 2026 by rpki-client