Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File: I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier: UOlpPYBhGOkQuqnKRtI0IZA9YAlHuVs5oYfifzUdMA8=
Subject key identifier: F7:3D:A2:3D:FF:D7:EC:E1:B9:7B:5D:DF:39:A1:0E:94:65:27:90:DE
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer: /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial: 01A08C7B7EF361418AF90CE44CFA5B5FABA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number: 1A66
Signing time: Thu 10 Sep 2026 18:01:38 +0000
Manifest this update: Thu 10 Sep 2026 18:01:38 +0000
Manifest next update: Fri 11 Sep 2026 18:01:38 +0000
Files and hashes: 1: 249_vWOJGgvFFmLv_5dYY1MQIWI.roa (hash: XCFj+iRH39Cj0T/bNpjf+R2spCw9+pyFathw15z8sLI=)
2: 9TBMQolrynkT7tDiDQfMSK2fy8k.roa (hash: DNBUcS0X2dXGEBDpiiVERi+TH/oYhB/Rs+ebfGfKbXM=)
3: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: WL5mr03S/Wdmr47zq/GE1senEc4saoguI5CjDj4bW4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:7e:f3:61:41:8a:f9:0c:e4:4c:fa:5b:5f:ab:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
Validity
Not Before: Sep 10 18:01:38 2026 GMT
Not After : Sep 11 18:01:38 2026 GMT
Subject: CN=f73da23dffd7ece1b97b5ddf39a10e94652790de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:26:8d:9d:22:6b:53:23:a0:72:3c:5f:f0:
0f:f8:9c:a1:3b:d9:ca:6d:fe:c2:7a:5a:97:1c:22:
86:02:ab:4d:ac:5c:46:bd:af:f2:74:ea:24:53:73:
46:ea:03:aa:3b:29:c6:ff:21:40:fa:6d:72:5e:49:
32:9a:5b:ec:23:eb:46:d0:28:5f:3e:5a:97:63:d1:
77:53:ae:23:91:11:90:bc:1a:ac:8f:4a:48:10:e4:
56:fa:09:5e:4a:38:fc:ca:d9:30:c7:6e:30:2b:51:
9e:0b:7a:b8:50:b6:1f:66:6d:56:24:7b:45:f1:8c:
ab:11:f6:c8:ce:ab:be:1b:90:30:6e:88:15:37:fc:
2f:48:44:e1:48:96:6d:de:3c:ff:74:a5:72:a0:46:
b6:cf:18:ba:ca:d4:13:60:4c:1e:2a:4e:d9:1e:02:
37:ea:ef:93:a7:d2:b0:d8:97:1d:07:61:ec:24:17:
bd:2d:8c:69:5c:7d:5c:0e:b3:6f:ec:68:dd:81:9b:
d9:54:55:23:e7:18:c0:52:ed:9a:47:a0:ba:a8:02:
e1:0c:d3:ca:76:e9:85:69:0a:21:f0:a6:65:f2:e0:
5a:3c:b0:a1:0b:83:0b:94:c3:12:bd:64:9e:77:02:
92:cb:06:f5:e6:a7:f5:d0:9c:9f:f3:01:4e:4b:69:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3D:A2:3D:FF:D7:EC:E1:B9:7B:5D:DF:39:A1:0E:94:65:27:90:DE
X509v3 Authority Key Identifier:
keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d9:2d:44:3d:09:c8:e0:83:5c:53:90:bf:7b:7e:00:52:b3:
c5:f5:3e:b3:57:08:2a:c7:dc:4d:73:10:82:0d:23:17:c4:8b:
56:a7:5b:45:8f:27:9e:b0:3c:9d:7c:1e:eb:a1:37:eb:88:67:
4d:e4:8f:bf:7b:81:e8:43:08:95:b9:45:ea:8d:1f:9f:53:3f:
cf:52:81:a6:8f:31:6c:c2:dd:6f:8f:32:7d:42:d3:d4:fc:af:
15:06:b1:dd:35:dc:0a:e1:c9:66:8a:4a:ba:99:07:5c:ff:64:
c7:07:dc:b1:6c:8b:7a:ae:30:be:d0:9d:a0:24:f2:fb:db:8d:
bb:9b:82:2f:28:52:93:f9:b0:4c:56:f6:14:c2:fa:97:cf:0b:
28:3b:f1:c3:b4:e0:f4:24:9b:79:79:ef:4a:b7:97:25:15:d1:
13:fa:0e:a8:0d:a5:fa:19:64:cc:a1:a8:b2:9c:73:04:0c:90:
b0:71:67:14:72:c4:55:ae:14:3c:98:a5:1e:a1:c3:6f:e6:a4:
26:de:cf:18:74:b6:65:7b:b8:a1:4b:45:02:67:5f:99:5c:cd:
7a:b8:46:4e:6d:bd:9d:31:ec:e9:4d:df:aa:05:85:b6:ed:d8:
5c:dd:d4:59:aa:11:d2:6d:3d:08:c4:e0:5c:41:7e:e7:d9:30:
16:31:c7:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMe37zYUGK+QzkTPpbX6ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDdhYWFiMjIwNmMwODEyOGY1NDM3MzAwNjRhMTQ1YTNl
ZmZhMTQwHhcNMjYwOTEwMTgwMTM4WhcNMjYwOTExMTgwMTM4WjAzMTEwLwYDVQQD
EyhmNzNkYTIzZGZmZDdlY2UxYjk3YjVkZGYzOWExMGU5NDY1Mjc5MGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYwmjZ0ia1MjoHI8X/AP+JyhO9nK
bf7CelqXHCKGAqtNrFxGva/ydOokU3NG6gOqOynG/yFA+m1yXkkymlvsI+tG0Chf
PlqXY9F3U64jkRGQvBqsj0pIEORW+gleSjj8ytkwx24wK1GeC3q4ULYfZm1WJHtF
8YyrEfbIzqu+G5AwbogVN/wvSEThSJZt3jz/dKVyoEa2zxi6ytQTYEweKk7ZHgI3
6u+Tp9Kw2JcdB2HsJBe9LYxpXH1cDrNv7GjdgZvZVFUj5xjAUu2aR6C6qALhDNPK
dumFaQoh8KZl8uBaPLChC4MLlMMSvWSedwKSywb15qf10Jyf8wFOS2nYAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPc9oj3/1+zhuXtd3zmhDpRlJ5DeMB8GA1UdIwQY
MBaAFCNHqqsiBsCBKPVDcwBkoUWj7/oUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQt
NzU4NDA2NjFlYWY1LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9lZjlmMGQtZDg0MC00MzcxLWFkYzQtNzU4NDA2NjFlYWY1
LzEvSTBlcXF5SUd3SUVvOVVOekFHU2hSYVB2LWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdktRD0J
yOCDXFOQv3t+AFKzxfU+s1cIKsfcTXMQgg0jF8SLVqdbRY8nnrA8nXwe66E364hn
TeSPv3uB6EMIlblF6o0fn1M/z1KBpo8xbMLdb48yfULT1PyvFQax3TXcCuHJZopK
upkHXP9kxwfcsWyLeq4wvtCdoCTy+9uNu5uCLyhSk/mwTFb2FML6l88LKDvxw7Tg
9CSbeXnvSreXJRXRE/oOqA2l+hlkzKGospxzBAyQsHFnFHLEVa4UPJilHqHDb+ak
Jt7PGHS2ZXu4oUtFAmdfmVzNerhGTm29nTHs6U3fqgWFtu3YXN3UWaoR0m09CMTg
XEF+59kwFjHHQg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:17 2026 by rpki-client