Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
File: S9Kz8xprCl18Bpijd5alHXsMtqQ.mft (raw, json)
Hash identifier: ow5wueTTwbntJYRyi8ODGZaigvul9fV2Og+TBnkb41c=
Subject key identifier: BF:C3:FD:FA:5C:50:0C:7F:91:B7:C8:3D:88:62:E3:D1:5F:6C:AF:2F
Authority key identifier: 4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
Certificate issuer: /CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Certificate serial: 01A17ADFA3DD37BF2B0C810B76A5FDDBE8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 01:00:39 +0000
Manifest this update: Tue 27 Oct 2026 01:00:39 +0000
Manifest next update: Wed 28 Oct 2026 01:00:39 +0000
Files and hashes: 1: 1-r6OI7d1rMDTcnDoJviDH-z-JXc.roa (hash: fWr15RBt+7/7WtyC/v/I3WPSvILNHAPy+A8F/stwfsE=)
2: Nr5F-zFvBPkvGpajXkBN81saN98.roa (hash: QMSPffIzGEzcnl0mHwoe8F96V/0PI/v/ncg3YwkpjEo=)
3: S9Kz8xprCl18Bpijd5alHXsMtqQ.crl (hash: rNSnJqXmEqIo12gAJ3naN2DptltvRQKzaPT/LWTmRr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:a3:dd:37:bf:2b:0c:81:0b:76:a5:fd:db:e8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd2b3f31a6b0a5d7c0698a37796a51d7b0cb6a4
Validity
Not Before: Oct 27 01:00:39 2026 GMT
Not After : Oct 28 01:00:39 2026 GMT
Subject: CN=bfc3fdfa5c500c7f91b7c83d8862e3d15f6caf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:d3:34:e5:b5:5a:2c:b3:29:37:07:ac:ed:
23:cc:6d:80:6a:c9:15:86:2c:08:10:a7:2a:79:4b:
78:4a:28:68:eb:b2:2b:97:dd:be:54:c2:b4:0c:c0:
84:57:8f:44:4c:d7:54:82:d6:13:79:11:1c:68:67:
1d:b5:21:71:29:82:33:0e:fe:eb:89:c8:c0:16:71:
98:9c:8f:fd:4a:ad:01:18:bc:36:a5:4f:7d:76:3f:
26:a2:24:8b:af:da:d2:c5:1b:37:dc:9c:a6:4b:ce:
7f:85:44:e8:2e:4e:ab:a0:63:b6:5c:bc:ae:0e:a1:
7d:71:c8:00:07:bb:c4:e4:1a:f5:d2:b2:e2:63:1f:
80:e5:e9:11:07:c5:b4:ff:be:1d:59:10:64:f2:c4:
0d:49:b9:57:fb:51:82:28:6f:fc:74:da:33:9b:88:
ff:4e:32:be:0c:05:6b:49:7a:91:27:ab:3d:55:6f:
3f:93:6c:f1:4f:43:3b:08:3e:80:3a:12:77:79:bf:
cf:2e:11:66:66:8f:fd:c9:ce:4b:1d:96:32:2d:73:
15:ed:15:35:d4:1c:a3:c9:5b:63:d5:86:d1:0d:ef:
b0:f6:cb:f4:84:e8:24:da:e7:09:48:f0:93:9b:af:
fa:65:10:3c:a4:b1:8f:fa:51:e0:65:3e:10:f3:95:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C3:FD:FA:5C:50:0C:7F:91:B7:C8:3D:88:62:E3:D1:5F:6C:AF:2F
X509v3 Authority Key Identifier:
keyid:4B:D2:B3:F3:1A:6B:0A:5D:7C:06:98:A3:77:96:A5:1D:7B:0C:B6:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9Kz8xprCl18Bpijd5alHXsMtqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3997ea-204a-4efd-85d6-2d7fd0fb22ce/1/S9Kz8xprCl18Bpijd5alHXsMtqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:db:c3:d0:06:3b:c2:d7:66:c3:64:21:46:1e:67:ad:fd:57:
4c:55:fb:6b:34:a0:c5:4a:59:d6:36:49:74:b3:7a:6a:a4:43:
93:8a:4c:d2:17:66:25:d8:53:b7:f8:f7:a1:da:b1:58:a4:2d:
da:48:26:ce:61:f4:31:0d:c0:1f:8a:99:ea:46:1a:b4:9f:7d:
62:aa:81:28:ab:fa:fc:18:f6:0a:44:a7:d3:bb:5b:5a:af:17:
2f:81:fa:58:de:eb:4b:1e:e9:96:0c:61:05:0c:d1:fc:09:d0:
71:dc:60:8c:77:25:0f:57:4c:7b:7a:4b:04:64:41:d8:c5:ea:
9b:53:12:21:30:b5:67:82:24:a5:66:f3:d0:76:61:1d:ca:cb:
df:67:1b:c5:a7:1d:05:88:6e:80:e2:d9:eb:25:eb:e4:ee:ee:
7f:4b:31:fa:38:c0:56:7d:2b:28:5a:cc:4c:65:6d:19:d3:df:
b4:a4:ee:4d:09:25:59:77:eb:43:93:2e:28:ca:d4:ba:ca:9a:
22:ad:8d:be:f1:ea:e5:74:92:57:87:9f:37:cb:b0:6d:f3:0f:
0d:42:d1:aa:3f:19:53:8e:73:e9:41:69:16:11:b1:6f:45:88:
63:2d:6e:80:17:94:be:4e:b2:c8:cc:cc:09:72:d9:c8:3e:a2:
b1:eb:37:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF636PdN78rDIELdqX92+juMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDJiM2YzMWE2YjBhNWQ3YzA2OThhMzc3OTZhNTFkN2Iw
Y2I2YTQwHhcNMjYxMDI3MDEwMDM5WhcNMjYxMDI4MDEwMDM5WjAzMTEwLwYDVQQD
EyhiZmMzZmRmYTVjNTAwYzdmOTFiN2M4M2Q4ODYyZTNkMTVmNmNhZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKrTNOW1WiyzKTcHrO0jzG2AaskV
hiwIEKcqeUt4Siho67Irl92+VMK0DMCEV49ETNdUgtYTeREcaGcdtSFxKYIzDv7r
icjAFnGYnI/9Sq0BGLw2pU99dj8moiSLr9rSxRs33JymS85/hUToLk6roGO2XLyu
DqF9ccgAB7vE5Br10rLiYx+A5ekRB8W0/74dWRBk8sQNSblX+1GCKG/8dNozm4j/
TjK+DAVrSXqRJ6s9VW8/k2zxT0M7CD6AOhJ3eb/PLhFmZo/9yc5LHZYyLXMV7RU1
1ByjyVtj1YbRDe+w9sv0hOgk2ucJSPCTm6/6ZRA8pLGP+lHgZT4Q85VI7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/D/fpcUAx/kbfIPYhi49FfbK8vMB8GA1UdIwQY
MBaAFEvSs/MaawpdfAaYo3eWpR17DLakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYt
MmQ3ZmQwZmIyMmNlLzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8zOTk3ZWEtMjA0YS00ZWZkLTg1ZDYtMmQ3ZmQwZmIyMmNl
LzEvUzlLejh4cHJDbDE4QnBpamQ1YWxIWHNNdHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9vD0AY7
wtdmw2QhRh5nrf1XTFX7azSgxUpZ1jZJdLN6aqRDk4pM0hdmJdhTt/j3odqxWKQt
2kgmzmH0MQ3AH4qZ6kYatJ99YqqBKKv6/Bj2CkSn07tbWq8XL4H6WN7rSx7plgxh
BQzR/AnQcdxgjHclD1dMe3pLBGRB2MXqm1MSITC1Z4IkpWbz0HZhHcrL32cbxacd
BYhugOLZ6yXr5O7uf0sx+jjAVn0rKFrMTGVtGdPftKTuTQklWXfrQ5MuKMrUusqa
Iq2NvvHq5XSSV4efN8uwbfMPDULRqj8ZU45z6UFpFhGxb0WIYy1ugBeUvk6yyMzM
CXLZyD6ises3JA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:30 2026 by rpki-client