Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
File: IOagEH1ompNwtiKVGkSWRsw4tZA.mft (raw, json)
Hash identifier: Dfg6TRmh7cvN8t81/z8/EvEQYT0CxQo3ybytLDeyK/U=
Subject key identifier: 9D:6B:D5:C1:12:C9:8F:2B:FA:19:B3:C4:86:F1:CF:36:D9:09:F5:B8
Authority key identifier: 20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
Certificate issuer: /CN=20e6a0107d689a9370b622951a449646cc38b590
Certificate serial: 01A08C441CCE6F6FD12CACFF8A3E721763F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
Manifest number: 15C9
Signing time: Thu 10 Sep 2026 17:01:09 +0000
Manifest this update: Thu 10 Sep 2026 17:01:09 +0000
Manifest next update: Fri 11 Sep 2026 17:01:09 +0000
Files and hashes: 1: DWHWORrS3BHCdKCom2SvJuOOFgQ.roa (hash: neZrwsmxWjbB3VimASaWthX1wVXWiR6atISt14XcKo0=)
2: IOagEH1ompNwtiKVGkSWRsw4tZA.crl (hash: 13tKMDQqVB/lNsE2P1rpXKZV9x7yBYJeu6jLP8lmaVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:44:1c:ce:6f:6f:d1:2c:ac:ff:8a:3e:72:17:63:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e6a0107d689a9370b622951a449646cc38b590
Validity
Not Before: Sep 10 17:01:09 2026 GMT
Not After : Sep 11 17:01:09 2026 GMT
Subject: CN=9d6bd5c112c98f2bfa19b3c486f1cf36d909f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9f:3a:08:5a:47:dc:7a:c4:c1:98:d1:46:55:
6f:df:5e:fe:ca:f6:74:2c:ac:2f:c5:b8:d8:e3:f0:
c8:f5:4e:66:a2:e0:ae:26:27:4b:3f:8e:bf:4c:c1:
ef:25:dc:25:a7:fd:26:3f:c0:b8:0a:ad:e6:60:83:
66:cb:1b:0a:2e:05:f9:f5:60:47:d9:d9:b9:b8:77:
cc:82:20:26:77:97:95:aa:97:8f:8c:5d:6f:c7:10:
c2:10:d7:04:2f:aa:b9:f7:d3:91:f0:70:06:c6:06:
25:db:e4:e2:68:50:7d:3b:0a:ff:f6:90:31:7f:07:
68:b9:78:13:88:a5:41:e2:87:e3:4e:ed:5f:4f:2d:
02:01:53:bd:30:61:b5:c0:f0:61:49:d4:b7:9e:f0:
15:b3:f0:1c:b2:7b:99:6e:86:c3:20:38:bc:b5:73:
9e:f4:0b:59:48:79:0a:58:46:b7:80:50:ad:0e:be:
63:a0:60:6c:5b:7e:30:72:5a:56:a9:17:48:bd:37:
64:58:14:7e:62:f4:f1:06:cb:03:99:1f:12:20:d6:
69:61:ce:5b:6d:72:06:23:ac:a5:07:61:68:2c:f9:
52:46:cc:8a:69:a1:5c:bb:77:ed:33:16:5a:29:84:
88:1e:98:de:2a:60:78:a2:71:fa:81:db:27:45:fd:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:6B:D5:C1:12:C9:8F:2B:FA:19:B3:C4:86:F1:CF:36:D9:09:F5:B8
X509v3 Authority Key Identifier:
keyid:20:E6:A0:10:7D:68:9A:93:70:B6:22:95:1A:44:96:46:CC:38:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOagEH1ompNwtiKVGkSWRsw4tZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e84e8f-8bb2-4054-b495-125eedf8d9f1/1/IOagEH1ompNwtiKVGkSWRsw4tZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:cd:e3:e9:31:bc:17:4b:15:6a:0b:b3:52:95:08:80:e3:48:
6b:42:22:83:11:0e:1b:2b:63:57:28:70:f2:8a:8e:a9:ff:1c:
a8:05:4c:6c:0c:96:4d:2e:8e:8f:63:b0:e6:4c:08:1c:d2:e9:
04:49:c1:d8:e2:e2:3f:8d:ca:d4:21:a4:78:fb:5c:d3:82:ef:
09:12:c8:2f:56:71:47:2c:de:cd:eb:05:38:67:b0:7f:d1:b9:
12:cb:65:cd:54:b4:34:1a:91:17:43:d5:ef:7a:e3:52:cf:28:
3e:33:54:00:a3:e5:46:e4:41:9c:d2:92:9c:82:57:c4:cc:9d:
c1:c6:1b:9e:d4:1a:40:3f:75:5b:84:8f:f0:d9:ac:9e:12:90:
73:32:2e:06:e1:f7:65:4d:74:7a:48:6f:1d:ba:d3:62:98:4a:
9d:65:c2:b9:f5:0f:f7:a1:36:b6:ef:9d:4b:c4:3f:24:92:c2:
c5:46:0e:9f:7b:bc:b9:2f:dc:8a:8a:09:53:95:c8:04:8e:a6:
6f:4d:a9:22:33:ba:e9:66:8e:4f:de:fa:76:c1:0b:c5:4a:71:
6d:d2:be:6e:c7:8e:08:57:4b:e9:3c:f4:ef:84:b1:e0:ca:4b:
ca:88:74:81:56:e7:10:3e:c3:e0:07:f0:0c:08:04:7a:f8:7e:
b5:2a:6b:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMRBzOb2/RLKz/ij5yF2P2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTZhMDEwN2Q2ODlhOTM3MGI2MjI5NTFhNDQ5NjQ2Y2Mz
OGI1OTAwHhcNMjYwOTEwMTcwMTA5WhcNMjYwOTExMTcwMTA5WjAzMTEwLwYDVQQD
Eyg5ZDZiZDVjMTEyYzk4ZjJiZmExOWIzYzQ4NmYxY2YzNmQ5MDlmNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ86CFpH3HrEwZjRRlVv317+yvZ0
LKwvxbjY4/DI9U5mouCuJidLP46/TMHvJdwlp/0mP8C4Cq3mYINmyxsKLgX59WBH
2dm5uHfMgiAmd5eVqpePjF1vxxDCENcEL6q599OR8HAGxgYl2+TiaFB9Owr/9pAx
fwdouXgTiKVB4ofjTu1fTy0CAVO9MGG1wPBhSdS3nvAVs/AcsnuZbobDIDi8tXOe
9AtZSHkKWEa3gFCtDr5joGBsW34wclpWqRdIvTdkWBR+YvTxBssDmR8SINZpYc5b
bXIGI6ylB2FoLPlSRsyKaaFcu3ftMxZaKYSIHpjeKmB4onH6gdsnRf1uewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1r1cESyY8r+hmzxIbxzzbZCfW4MB8GA1UdIwQY
MBaAFCDmoBB9aJqTcLYilRpElkbMOLWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUt
MTI1ZWVkZjhkOWYxLzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lODRlOGYtOGJiMi00MDU0LWI0OTUtMTI1ZWVkZjhkOWYx
LzEvSU9hZ0VIMW9tcE53dGlLVkdrU1dSc3c0dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp83j6TG8
F0sVaguzUpUIgONIa0IigxEOGytjVyhw8oqOqf8cqAVMbAyWTS6Oj2Ow5kwIHNLp
BEnB2OLiP43K1CGkePtc04LvCRLIL1ZxRyzezesFOGewf9G5EstlzVS0NBqRF0PV
73rjUs8oPjNUAKPlRuRBnNKSnIJXxMydwcYbntQaQD91W4SP8NmsnhKQczIuBuH3
ZU10ekhvHbrTYphKnWXCufUP96E2tu+dS8Q/JJLCxUYOn3u8uS/ciooJU5XIBI6m
b02pIjO66WaOT976dsELxUpxbdK+bseOCFdL6Tz074Sx4MpLyoh0gVbnED7D4Afw
DAgEevh+tSprGg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:02:48 2026 by rpki-client