Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File: 9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier: stAS+Rtjec5eXgMEINa6SRWTufEKoLVc3QbdQ4Jw5Jk=
Subject key identifier: C2:1B:11:01:B6:66:21:C9:5C:B3:5D:4E:62:69:A8:BD:B2:4E:A7:37
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer: /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial: 01A0013807C9EE77519D43E467F497454A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number: 168D
Signing time: Fri 14 Aug 2026 17:00:44 +0000
Manifest this update: Fri 14 Aug 2026 17:00:44 +0000
Manifest next update: Sat 15 Aug 2026 17:00:44 +0000
Files and hashes: 1: 1-lOgfXr6z3ulgJm--XvyqYFnCkw.roa (hash: gyUyEbA+sluFWgU9QeypDRe8X2zOXF1Cp4BuVH8B2Is=)
2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: KzU3pjfWZT0v/b31lM4zKaHLKO8RbVrR4WbBl5FuLqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:07:c9:ee:77:51:9d:43:e4:67:f4:97:45:4a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Validity
Not Before: Aug 14 17:00:44 2026 GMT
Not After : Aug 15 17:00:44 2026 GMT
Subject: CN=c21b1101b66621c95cb35d4e6269a8bdb24ea737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:12:2c:42:fe:4a:40:2a:70:0e:6b:e5:66:
27:b9:b4:db:5b:fa:bc:73:b0:02:81:f1:84:2f:31:
38:cb:47:c0:38:bc:49:de:56:6f:49:88:b2:46:72:
85:b4:68:a7:d7:43:fd:36:3e:82:df:a0:f0:68:75:
eb:a6:e9:52:a6:47:fd:c8:d8:be:ed:4f:ba:c0:1d:
ab:1a:10:89:9a:ee:84:d1:15:db:35:6b:90:a0:20:
4d:d0:ce:cb:6d:f0:35:e2:77:4d:1c:68:b8:7e:ed:
88:be:cb:8f:df:58:71:32:f9:15:2f:d5:49:5f:05:
d0:34:e8:cd:0c:8c:ac:5f:1f:03:29:61:81:9d:b4:
89:0e:cb:ba:df:f0:e1:63:fc:02:97:27:00:ae:c6:
7b:18:e9:98:e7:c5:f2:fd:b0:48:d2:13:00:4f:5a:
08:66:b2:8d:30:be:a9:84:1d:ee:b2:98:48:83:ba:
fb:25:d6:82:33:9b:c2:13:f4:29:f4:16:4f:eb:b9:
5c:e1:b3:34:bc:0a:95:46:64:b8:28:0c:78:fc:01:
f4:24:aa:24:36:a2:4d:15:ec:96:03:c2:fd:86:78:
c9:0d:64:e5:02:29:26:16:19:3e:4d:54:80:e8:e3:
ca:e1:3a:a9:c5:5b:21:51:0d:dc:59:8b:b3:59:b0:
5e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1B:11:01:B6:66:21:C9:5C:B3:5D:4E:62:69:A8:BD:B2:4E:A7:37
X509v3 Authority Key Identifier:
keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:17:5d:c4:5b:76:62:e8:3e:b7:d2:fc:0f:c4:af:2a:72:8f:
a0:6c:10:df:87:2d:bb:c6:66:2a:f6:86:28:05:35:41:65:c7:
ff:9e:44:f6:cd:b4:3b:33:23:92:26:a0:b1:10:27:1f:c4:39:
76:22:dc:65:64:90:01:92:f1:1e:40:9a:ca:f3:6c:b6:41:a9:
79:e4:a3:41:19:e6:3c:2e:b7:19:09:91:42:94:5f:98:5e:5b:
7b:18:fc:00:47:ae:b4:cc:57:0d:49:32:b5:72:6d:8f:ec:7d:
b7:4c:11:ab:54:fc:5e:8e:9d:82:fa:46:85:93:46:db:76:b0:
d3:eb:15:d5:e8:df:b9:08:0a:96:47:3f:f3:0c:e0:99:84:5a:
1a:11:ad:78:72:8d:30:05:34:03:0b:20:af:f4:e6:27:c2:39:
8c:a6:60:59:7f:9f:99:d1:75:2f:ff:b0:5d:4d:2f:04:32:86:
3a:c8:a4:17:9c:fd:6a:ff:03:19:d1:be:7b:77:50:e3:ee:1d:
b6:ed:83:aa:e1:3e:da:a0:d4:7f:a6:5b:db:71:2a:65:cd:bc:
a9:6c:34:95:fa:84:c7:c2:63:ad:cb:9e:c0:01:fc:49:7f:9c:
58:24:61:f6:f4:f7:9d:c3:14:84:5e:85:4a:07:5a:b1:cb:19:
c9:7a:87:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABOAfJ7ndRnUPkZ/SXRUpbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YzZiN2RkNTE3NWJlOGRiN2EwNTIyZjdkNGU0MWM1YzQy
YzZiMjkwHhcNMjYwODE0MTcwMDQ0WhcNMjYwODE1MTcwMDQ0WjAzMTEwLwYDVQQD
EyhjMjFiMTEwMWI2NjYyMWM5NWNiMzVkNGU2MjY5YThiZGIyNGVhNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jgSLEL+SkAqcA5r5WYnubTbW/q8
c7ACgfGELzE4y0fAOLxJ3lZvSYiyRnKFtGin10P9Nj6C36DwaHXrpulSpkf9yNi+
7U+6wB2rGhCJmu6E0RXbNWuQoCBN0M7LbfA14ndNHGi4fu2IvsuP31hxMvkVL9VJ
XwXQNOjNDIysXx8DKWGBnbSJDsu63/DhY/wClycArsZ7GOmY58Xy/bBI0hMAT1oI
ZrKNML6phB3usphIg7r7JdaCM5vCE/Qp9BZP67lc4bM0vAqVRmS4KAx4/AH0JKok
NqJNFeyWA8L9hnjJDWTlAikmFhk+TVSA6OPK4TqpxVshUQ3cWYuzWbBeBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIbEQG2ZiHJXLNdTmJpqL2yTqc3MB8GA1UdIwQY
MBaAFPTGt91Rdb6Nt6BSL31OQcXELGspMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGIt
OWIyMWI2ZjY2NzlhLzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNWY3MTQtNDcyYy00ODU2LWFhNGItOWIyMWI2ZjY2Nzlh
LzEvOU1hMzNWRjF2bzIzb0ZJdmZVNUJ4Y1FzYXlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRddxFt2
Yug+t9L8D8SvKnKPoGwQ34ctu8ZmKvaGKAU1QWXH/55E9s20OzMjkiagsRAnH8Q5
diLcZWSQAZLxHkCayvNstkGpeeSjQRnmPC63GQmRQpRfmF5bexj8AEeutMxXDUky
tXJtj+x9t0wRq1T8Xo6dgvpGhZNG23aw0+sV1ejfuQgKlkc/8wzgmYRaGhGteHKN
MAU0Awsgr/TmJ8I5jKZgWX+fmdF1L/+wXU0vBDKGOsikF5z9av8DGdG+e3dQ4+4d
tu2DquE+2qDUf6Zb23EqZc28qWw0lfqEx8JjrcuewAH8SX+cWCRh9vT3ncMUhF6F
SgdascsZyXqHng==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:55 2026 by rpki-client