Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json)
Hash identifier: zwpPVx13k22BioAO5cQRKnqUoqrBCkIigJdBgs9Nh3A=
Subject key identifier: DE:FC:6A:6B:CB:04:E3:3D:DF:FB:45:98:E3:D5:7D:4B:62:DD:D4:86
Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620
Certificate serial: 01A17D3C4311056AB1F3E984285D374576E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 12:01:03 +0000
Manifest this update: Tue 27 Oct 2026 12:01:03 +0000
Manifest next update: Wed 28 Oct 2026 12:01:03 +0000
Files and hashes: 1: e06_jEIDuFW1OUI1Yr38xB0lxx8.roa (hash: gSYcnsHJnz/xJ/EuZcj8lHoCpS2M+qgzC3QMJw+m3cU=)
2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: DF3e4cnaAm2hH7ABu6VT85OLH50WGH/3yk/4l2B/QU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:43:11:05:6a:b1:f3:e9:84:28:5d:37:45:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620
Validity
Not Before: Oct 27 12:01:03 2026 GMT
Not After : Oct 28 12:01:03 2026 GMT
Subject: CN=defc6a6bcb04e33ddffb4598e3d57d4b62ddd486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:40:35:a5:73:d2:6e:65:21:2a:97:d2:ef:4f:
24:f9:65:58:55:9b:27:0f:b4:a8:25:a5:8d:13:5b:
20:ba:6f:19:c6:c8:3e:6a:01:1f:50:eb:f0:39:dc:
91:80:d7:56:06:fb:38:50:a3:e7:bf:ae:fd:26:bd:
bd:e5:49:3d:4d:e2:f8:49:22:40:33:46:ca:fd:63:
8c:3a:82:40:d7:9b:bf:e9:8e:5e:4e:a9:d6:ad:00:
96:28:76:14:a7:d5:96:3a:9c:c7:f8:aa:86:81:c4:
b4:83:e6:4b:15:33:69:25:15:01:93:11:4a:af:42:
57:1d:33:3a:36:8e:4f:4d:55:20:f8:23:06:ea:f2:
78:35:ed:09:59:eb:bf:8e:95:86:05:ae:c3:99:1e:
db:a8:d8:b3:fa:3d:75:eb:66:3b:e1:b6:0a:f5:4d:
b9:07:56:54:32:1f:04:6c:05:ca:33:e9:8e:62:77:
b2:28:ed:e8:ec:92:dd:9d:5b:38:3d:0c:6b:4a:78:
35:f5:ad:be:65:1c:26:f6:86:5b:c5:63:7d:a9:af:
c1:30:c9:cd:2d:da:3d:91:b5:25:04:c1:fc:f6:53:
25:1d:01:3e:70:a2:25:7f:63:b8:85:d9:d4:55:e1:
7e:95:d8:00:88:a2:03:41:b6:c4:18:85:36:84:ad:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FC:6A:6B:CB:04:E3:3D:DF:FB:45:98:E3:D5:7D:4B:62:DD:D4:86
X509v3 Authority Key Identifier:
keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4c:d4:37:f7:59:24:2a:d6:b8:f0:86:2b:3b:7f:84:26:1f:
47:be:f6:27:61:b8:c7:fa:8c:a1:c2:69:f8:ea:24:1a:89:92:
b4:8b:ac:6a:a3:38:55:c6:07:82:a6:bf:f4:2a:9b:a8:bd:78:
a5:fb:3b:03:34:2b:25:dd:53:32:78:25:84:ba:1e:1d:c5:52:
d6:8f:be:a8:88:2e:ed:61:84:88:96:c8:be:08:9e:dd:88:8f:
81:8d:34:1d:95:91:fb:8d:e6:4d:05:fe:06:dc:49:1d:2e:c3:
04:e4:8d:07:a4:85:40:75:a1:fe:ee:a4:79:06:05:39:a8:44:
5d:49:c3:19:31:9f:cc:d9:85:43:4e:c0:63:02:f4:58:b3:9a:
ea:27:9a:41:ea:a9:cf:5d:67:1a:b1:33:ee:05:22:7d:ec:5d:
69:df:9e:19:65:42:95:d2:4c:de:29:76:01:5a:d0:bb:1e:f6:
b5:f6:9d:90:6e:46:75:7e:c0:09:11:75:03:fb:9a:77:51:58:
80:da:bc:17:cd:93:09:3e:30:57:5d:02:f0:2a:8c:9b:ee:6d:
e0:05:44:00:4b:02:07:bd:b7:41:32:cd:51:60:73:3f:e3:e8:
22:7a:4e:da:c3:11:ba:1d:a3:46:69:96:5f:6c:51:8f:cb:fe:
81:11:17:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PEMRBWqx8+mEKF03RXbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZDQzZDQ5OTg2ODA5MWJiZGM0N2Q5NWFlZTFjOTA5OWYw
MDU2MjAwHhcNMjYxMDI3MTIwMTAzWhcNMjYxMDI4MTIwMTAzWjAzMTEwLwYDVQQD
EyhkZWZjNmE2YmNiMDRlMzNkZGZmYjQ1OThlM2Q1N2Q0YjYyZGRkNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50A1pXPSbmUhKpfS708k+WVYVZsn
D7SoJaWNE1sgum8Zxsg+agEfUOvwOdyRgNdWBvs4UKPnv679Jr295Uk9TeL4SSJA
M0bK/WOMOoJA15u/6Y5eTqnWrQCWKHYUp9WWOpzH+KqGgcS0g+ZLFTNpJRUBkxFK
r0JXHTM6No5PTVUg+CMG6vJ4Ne0JWeu/jpWGBa7DmR7bqNiz+j1162Y74bYK9U25
B1ZUMh8EbAXKM+mOYneyKO3o7JLdnVs4PQxrSng19a2+ZRwm9oZbxWN9qa/BMMnN
Ldo9kbUlBMH89lMlHQE+cKIlf2O4hdnUVeF+ldgAiKIDQbbEGIU2hK2lAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN78amvLBOM93/tFmOPVfUti3dSGMB8GA1UdIwQY
MBaAFJPUPUmYaAkbvcR9la7hyQmfAFYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGIt
N2ZlNDJmZjRkY2Q4LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGItN2ZlNDJmZjRkY2Q4
LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEzUN/dZ
JCrWuPCGKzt/hCYfR772J2G4x/qMocJp+OokGomStIusaqM4VcYHgqa/9CqbqL14
pfs7AzQrJd1TMnglhLoeHcVS1o++qIgu7WGEiJbIvgie3YiPgY00HZWR+43mTQX+
BtxJHS7DBOSNB6SFQHWh/u6keQYFOahEXUnDGTGfzNmFQ07AYwL0WLOa6ieaQeqp
z11nGrEz7gUifexdad+eGWVCldJM3il2AVrQux72tfadkG5GdX7ACRF1A/uad1FY
gNq8F82TCT4wV10C8CqMm+5t4AVEAEsCB723QTLNUWBzP+PoInpO2sMRuh2jRmmW
X2xRj8v+gREXdA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:30:07 2026 by rpki-client