Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: SvTYCghBu4AYzdSML7f1cXL6O7C3AuMosi5fx3M1pfw=
Subject key identifier: A0:B5:63:51:95:7C:63:89:D1:D0:AD:B5:D9:96:75:BC:BD:57:D1:97
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 01A17EBCD619F935BF67C318B7EC1779B78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 19:01:07 +0000
Manifest this update: Tue 27 Oct 2026 19:01:07 +0000
Manifest next update: Wed 28 Oct 2026 19:01:07 +0000
Files and hashes: 1: 1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa (hash: fWr15RBt+7/7WtyC/v/I3WPSvILNHAPy+A8F/stwfsE=)
2: Nr5F-zFvBPkvGpajXkBN81saN98.roa (hash: QMSPffIzGEzcnl0mHwoe8F96V/0PI/v/ncg3YwkpjEo=)
3: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: uxGwSv25DwQIyiL+MrMPCxl/mhHsQ6CeJSEqhSz2w9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:d6:19:f9:35:bf:67:c3:18:b7:ec:17:79:b7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Oct 27 19:01:07 2026 GMT
Not After : Oct 28 19:01:07 2026 GMT
Subject: CN=a0b56351957c6389d1d0adb5d99675bcbd57d197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3a:a2:89:3e:af:ed:c4:37:da:d7:da:c1:14:
10:83:2b:7e:94:60:b0:e2:26:5c:5c:21:24:e7:12:
c8:53:6b:4c:23:82:31:a1:4e:c2:13:f8:f7:40:15:
6e:63:cf:92:b3:d7:9f:26:2a:f5:fd:d1:81:2b:c6:
ea:a4:6f:db:e5:d6:40:6a:95:c6:2f:15:d2:ac:f8:
44:63:00:df:55:3b:52:8c:b0:73:22:36:5c:a1:19:
f0:43:0d:2f:f6:c2:01:d3:e7:80:8d:b6:1d:41:00:
3f:52:c8:31:22:14:ab:6e:2f:bc:8c:0c:f1:8e:22:
ce:a4:51:09:28:79:d3:71:6c:f3:4f:43:cd:bd:3b:
97:43:32:65:4c:2e:20:a9:cf:da:78:78:f9:d7:b2:
1e:c0:c6:e2:83:12:07:41:d0:89:10:99:cb:f8:9d:
f3:f3:79:c0:78:e7:4e:88:46:00:7a:b0:97:ca:1c:
44:23:11:9c:17:81:9c:75:1d:ca:59:4d:9e:96:ef:
ec:50:f6:a6:1f:fc:8d:08:9a:03:3d:8f:02:92:f6:
33:5d:00:60:ad:d2:9c:a2:0d:e8:0e:d1:d5:b6:bf:
c2:d5:e6:c8:e1:c6:4f:b8:8c:6a:83:e4:08:6d:b1:
0a:d1:64:56:0e:47:15:f7:98:75:62:8b:b7:8c:9a:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:63:51:95:7C:63:89:D1:D0:AD:B5:D9:96:75:BC:BD:57:D1:97
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:8d:89:a9:4a:1f:ca:2b:fe:0f:37:6a:16:36:91:9c:c5:f8:
8a:f0:f0:4b:c5:18:6d:49:34:bc:1d:b7:36:2e:5c:c9:7c:50:
0b:68:6b:0f:f7:8d:db:30:f8:9d:e2:78:64:d6:77:63:24:cf:
06:8f:7f:68:44:8e:4f:98:28:3a:7e:10:a7:30:fd:68:35:3d:
53:e5:65:e3:fa:4f:68:66:77:1d:78:2f:11:e9:44:fe:e5:50:
0b:21:d9:6c:76:96:1e:62:3b:56:7d:01:27:f9:ef:a5:5a:36:
e0:81:c7:81:2c:7c:c9:6c:7e:27:ac:59:04:3e:78:19:57:9d:
3b:a9:4a:55:11:1d:88:7a:b7:d5:a3:9c:4e:05:66:49:3a:05:
66:d4:51:f4:a3:c2:58:ea:ff:10:6b:c7:0c:3f:c9:f9:43:ba:
01:14:75:a3:98:97:a1:82:91:bc:c5:c3:35:32:a8:f5:1d:f4:
da:1f:18:47:b0:6a:2a:b2:12:0f:4f:0d:c1:ed:2d:3d:a9:09:
f8:9c:69:d5:4b:00:bd:9e:bd:34:61:df:3a:01:c2:6e:8e:78:
a0:7f:d1:57:00:29:d3:50:d7:7c:f3:b3:c4:79:00:9d:cc:31:
05:44:b7:4b:6a:01:98:56:15:45:a0:04:d8:9a:cd:68:4b:61:
87:da:22:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+vNYZ+TW/Z8MYt+wXebePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDJiM2YzMWE2YjBhNWQ3YzA2OThhMzc3OTZhNTFkN2Iw
Y2I2YTQwHhcNMjYxMDI3MTkwMTA3WhcNMjYxMDI4MTkwMTA3WjAzMTEwLwYDVQQD
EyhhMGI1NjM1MTk1N2M2Mzg5ZDFkMGFkYjVkOTk2NzViY2JkNTdkMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jqiiT6v7cQ32tfawRQQgyt+lGCw
4iZcXCEk5xLIU2tMI4IxoU7CE/j3QBVuY8+Ss9efJir1/dGBK8bqpG/b5dZAapXG
LxXSrPhEYwDfVTtSjLBzIjZcoRnwQw0v9sIB0+eAjbYdQQA/UsgxIhSrbi+8jAzx
jiLOpFEJKHnTcWzzT0PNvTuXQzJlTC4gqc/aeHj517IewMbigxIHQdCJEJnL+J3z
83nAeOdOiEYAerCXyhxEIxGcF4GcdR3KWU2elu/sUPamH/yNCJoDPY8CkvYzXQBg
rdKcog3oDtHVtr/C1ebI4cZPuIxqg+QIbbEK0WRWDkcV95h1You3jJrHBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKC1Y1GVfGOJ0dCttdmWdby9V9GXMB8GA1UdIwQY
MBaAFEvSs/MaawpdfAaYo3eWpR17DLakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYt
MmQ3ZmQwZmIyMmNlLzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYtMmQ3ZmQwZmIyMmNl
LzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWo2JqUof
yiv+DzdqFjaRnMX4ivDwS8UYbUk0vB23Ni5cyXxQC2hrD/eN2zD4neJ4ZNZ3YyTP
Bo9/aESOT5goOn4QpzD9aDU9U+Vl4/pPaGZ3HXgvEelE/uVQCyHZbHaWHmI7Vn0B
J/nvpVo24IHHgSx8yWx+J6xZBD54GVedO6lKVREdiHq31aOcTgVmSToFZtRR9KPC
WOr/EGvHDD/J+UO6ARR1o5iXoYKRvMXDNTKo9R302h8YR7BqKrISD08Nwe0tPakJ
+Jxp1UsAvZ69NGHfOgHCbo54oH/RVwAp01DXfPOzxHkAncwxBUS3S2oBmFYVRaAE
2JrNaEthh9oiDQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:01:43 2026 by rpki-client