Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: OtXTLFe8b00ocITS8zm4o8qV3pGOEOZZtPizG3EdlUA=
Subject key identifier: 60:AB:FB:BA:F4:83:98:19:E5:9F:2F:99:5E:D4:B4:AD:D0:6A:56:77
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 01A17F2B31CF3FF95180B8CE212206061704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 21:01:39 +0000
Manifest this update: Tue 27 Oct 2026 21:01:39 +0000
Manifest next update: Wed 28 Oct 2026 21:01:39 +0000
Files and hashes: 1: e06_jEIDuFW1OUI1Yr38xB0lxx8.roa (hash: gSYcnsHJnz/xJ/EuZcj8lHoCpS2M+qgzC3QMJw+m3cU=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: 9BUoaJ0vbMTqeJmM3+mVC/dDlz06vtO5wL+qgVe9gFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2b:31:cf:3f:f9:51:80:b8:ce:21:22:06:06:17:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Oct 27 21:01:39 2026 GMT
Not After : Oct 28 21:01:39 2026 GMT
Subject: CN=60abfbbaf4839819e59f2f995ed4b4add06a5677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:c8:36:d0:f0:4e:25:12:18:8d:fe:9c:56:
f0:ad:db:cb:3a:ac:1c:72:62:0f:59:6f:f5:22:96:
9e:da:1b:69:c6:6b:33:f1:67:ab:bf:07:e4:c3:c3:
ee:06:86:b9:11:f4:ef:90:e7:d7:0e:20:96:2c:b3:
c5:0e:e7:63:3e:a7:97:c7:1d:23:57:37:10:f5:20:
04:9b:d3:fd:01:e2:a2:00:b3:d2:23:0a:78:e1:3d:
7d:6b:cd:19:62:2b:84:3f:d1:81:96:1b:b7:b9:02:
40:f5:93:41:fe:c3:1f:17:39:ff:cf:4f:13:41:d9:
60:b7:47:ca:d7:8f:7a:31:7c:6b:7e:9d:aa:7a:d2:
05:2d:94:08:9c:e8:5c:b3:db:dc:77:65:8b:5d:74:
48:1e:d5:32:83:2c:15:f8:d6:97:92:7a:87:a1:07:
23:68:e1:6a:8e:ae:05:59:fb:38:22:91:a2:b8:e9:
68:e0:ea:fc:15:97:61:8d:0b:1d:9d:94:b8:00:2d:
ff:35:6b:3e:35:a8:74:2c:15:4e:0b:6e:35:ec:bc:
8f:0d:4c:33:ae:8b:56:9e:5a:f2:95:45:90:05:8d:
fe:10:40:de:ef:35:32:3a:2a:82:e6:9e:e8:33:c3:
7c:e8:b4:97:6a:de:02:a0:59:f8:9e:2f:01:6c:63:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AB:FB:BA:F4:83:98:19:E5:9F:2F:99:5E:D4:B4:AD:D0:6A:56:77
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:d9:06:9f:8d:77:d6:0f:e6:c8:10:07:34:75:f5:27:f5:
53:57:4e:ba:9f:a1:1a:37:2a:b7:a5:7d:a0:11:34:15:d3:60:
6d:13:66:c8:0b:b0:39:16:40:83:c0:99:70:8a:f8:21:5e:4f:
81:18:2d:7c:6a:47:b8:82:46:94:98:f1:fd:63:68:8b:3e:3b:
0f:6b:d2:c7:3a:da:18:44:0b:53:8d:4f:62:13:44:9b:fd:d4:
fd:78:eb:65:e3:c9:5f:85:f5:1c:a5:06:e6:83:f2:ce:2a:53:
25:a7:53:5f:c7:00:28:b6:86:90:ac:69:38:4e:a6:7a:39:c0:
35:4a:21:e4:a3:42:c7:ae:78:8f:dc:99:91:2d:6a:8e:6c:75:
70:5c:35:0c:ea:fe:5a:e2:86:0b:7b:1c:cf:9e:07:2c:d4:85:
9f:ac:27:3f:f0:fe:1a:2b:4d:98:a3:73:6b:48:26:0a:7f:16:
29:1f:d6:c5:32:85:43:39:8f:20:5a:3b:6e:58:49:b1:d3:46:
43:f2:da:30:51:ef:17:46:6f:f6:27:76:59:17:88:68:1d:88:
41:f9:0a:69:24:a6:ca:46:12:f1:28:a2:4c:33:ee:84:32:79:
06:65:5b:db:14:b0:07:ce:37:bd:33:76:50:e0:30:fa:f4:71:
87:f0:3f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/KzHPP/lRgLjOISIGBhcEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDQzZDQ5OTg2ODA5MWJiZGM0N2Q5NWFlZTFjOTA5OWYw
MDU2MjAwHhcNMjYxMDI3MjEwMTM5WhcNMjYxMDI4MjEwMTM5WjAzMTEwLwYDVQQD
Eyg2MGFiZmJiYWY0ODM5ODE5ZTU5ZjJmOTk1ZWQ0YjRhZGQwNmE1Njc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssfINtDwTiUSGI3+nFbwrdvLOqwc
cmIPWW/1Ipae2htpxmsz8Wervwfkw8PuBoa5EfTvkOfXDiCWLLPFDudjPqeXxx0j
VzcQ9SAEm9P9AeKiALPSIwp44T19a80ZYiuEP9GBlhu3uQJA9ZNB/sMfFzn/z08T
Qdlgt0fK1496MXxrfp2qetIFLZQInOhcs9vcd2WLXXRIHtUygywV+NaXknqHoQcj
aOFqjq4FWfs4IpGiuOlo4Or8FZdhjQsdnZS4AC3/NWs+Nah0LBVOC2417LyPDUwz
rotWnlrylUWQBY3+EEDe7zUyOiqC5p7oM8N86LSXat4CoFn4ni8BbGNARQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCr+7r0g5gZ5Z8vmV7UtK3QalZ3MB8GA1UdIwQY
MBaAFJPUPUmYaAkbvcR9la7hyQmfAFYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGIt
N2ZlNDJmZjRkY2Q4LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGItN2ZlNDJmZjRkY2Q4
LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsjZBp+N
d9YP5sgQBzR19Sf1U1dOup+hGjcqt6V9oBE0FdNgbRNmyAuwORZAg8CZcIr4IV5P
gRgtfGpHuIJGlJjx/WNoiz47D2vSxzraGEQLU41PYhNEm/3U/XjrZePJX4X1HKUG
5oPyzipTJadTX8cAKLaGkKxpOE6mejnANUoh5KNCx654j9yZkS1qjmx1cFw1DOr+
WuKGC3scz54HLNSFn6wnP/D+GitNmKNza0gmCn8WKR/WxTKFQzmPIFo7blhJsdNG
Q/LaMFHvF0Zv9id2WReIaB2IQfkKaSSmykYS8SiiTDPuhDJ5BmVb2xSwB843vTN2
UOAw+vRxh/A/nQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:14:14 2026 by rpki-client