Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
File: mIb0shUIFe2ng-fzz7m35Tzn2X8.mft (raw, json)
Hash identifier: URMPp5a+SUW01USTDZ0VkhC3fiBOaclpG9hs5Hqxd1g=
Subject key identifier: 62:5D:DF:3D:6A:8F:41:8F:41:6D:B2:DF:00:15:21:52:80:AF:BC:E7
Authority key identifier: 98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
Certificate issuer: /CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Certificate serial: 01A06F1532800EADC8255C5183600ADF8E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
Manifest number: 0114
Signing time: Sat 05 Sep 2026 01:00:55 +0000
Manifest this update: Sat 05 Sep 2026 01:00:55 +0000
Manifest next update: Sun 06 Sep 2026 01:00:55 +0000
Files and hashes: 1: E6Emgi8OOcxRYIN6dlPoick6xdc.roa (hash: b17vqDW+cXgHkIk7rlMgxV1W0X2t1+N9MIRFO/oaFGs=)
2: cJhwzvA4MmD9szzdzlqYrmM_RIk.roa (hash: 0CQ7EyVMolzZdZkEGpCpBtQGO5aHXkTTya7T0UCv1hY=)
3: mIb0shUIFe2ng-fzz7m35Tzn2X8.crl (hash: 8oVh6FlbVW57S03Do6IUmbZFsgNLa9lfGEDLgeyIXoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:32:80:0e:ad:c8:25:5c:51:83:60:0a:df:8e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9886f4b2150815eda783e7f3cfb9b7e53ce7d97f
Validity
Not Before: Sep 5 01:00:55 2026 GMT
Not After : Sep 6 01:00:55 2026 GMT
Subject: CN=625ddf3d6a8f418f416db2df0015215280afbce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:75:5c:fc:bf:33:a0:97:bd:ab:92:13:bd:da:
bd:9c:40:03:a9:6d:2b:36:8b:a7:5a:25:04:01:3c:
d9:26:fa:f5:4b:e9:97:c1:7e:97:a2:5c:49:f4:f0:
53:b4:48:03:97:53:a4:b7:bb:db:18:02:75:fc:6a:
57:6d:d9:1d:ec:0d:00:b1:5c:63:11:04:3a:32:b4:
d9:cb:07:91:b1:a3:17:b9:59:39:ab:f5:f2:41:79:
7f:e1:3f:6b:d4:4f:8b:e8:c4:38:1d:5a:90:3e:5c:
e2:cf:15:d3:21:d4:dd:8b:a8:ee:b9:7b:08:96:67:
b1:64:d7:8a:af:53:fb:e1:8e:65:67:5a:66:38:81:
73:f9:b5:5a:32:64:1e:24:17:ac:37:1e:35:fc:0f:
40:13:77:b2:0d:ec:18:e1:a6:5b:44:d4:b9:80:ed:
88:97:94:ea:ce:88:a0:9d:55:9f:25:fb:c0:a7:9c:
14:0d:a9:b6:10:27:af:68:6d:ca:3f:8b:24:bf:aa:
c1:08:0f:6a:7e:d4:b7:8b:21:02:7b:78:77:57:c5:
cb:b5:3b:3a:41:70:e8:e1:9e:37:30:e1:b8:57:b8:
b0:62:a3:10:56:97:67:15:6d:9e:1b:0a:60:6c:c0:
1a:e3:a4:12:56:01:e9:71:88:55:c4:49:1a:25:12:
e2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5D:DF:3D:6A:8F:41:8F:41:6D:B2:DF:00:15:21:52:80:AF:BC:E7
X509v3 Authority Key Identifier:
keyid:98:86:F4:B2:15:08:15:ED:A7:83:E7:F3:CF:B9:B7:E5:3C:E7:D9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIb0shUIFe2ng-fzz7m35Tzn2X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/5e4d7e-ac21-4f02-9581-f00d92dc07b8/1/mIb0shUIFe2ng-fzz7m35Tzn2X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:22:bc:06:67:16:f6:80:b7:c8:dd:9f:92:bc:c9:76:23:
a2:04:b6:d6:60:3b:e2:7b:57:3a:b7:a2:4b:2e:b0:74:a5:26:
d9:66:77:03:a6:be:b1:a1:14:6b:29:6e:77:f1:7e:b2:b8:fd:
94:25:6d:88:d9:2e:0f:8c:05:f3:b5:ec:26:8e:29:ff:ec:52:
fc:c3:f4:aa:8d:44:fa:50:23:79:a4:b4:23:41:87:11:3f:7e:
27:52:71:0e:f3:5b:67:7f:fd:d9:cc:ae:bf:73:3f:23:65:be:
6b:7a:6a:c9:66:17:d4:e7:7f:04:27:3d:41:b1:53:45:7b:a3:
9c:b8:bb:24:97:2c:4f:ec:17:a5:e3:ba:ab:76:90:6f:e5:71:
e5:a4:4a:4e:4d:e1:37:30:c4:6c:e7:57:0b:fd:a5:43:f1:d4:
e1:8a:e1:1d:7f:1c:95:b1:29:b0:b2:e6:c7:4e:eb:45:42:27:
e7:5c:ae:67:0a:3b:61:44:b0:d6:5d:2b:ce:23:ef:0a:ef:a1:
a1:9b:aa:06:73:ca:1c:fe:18:4c:c4:b3:f6:73:3f:ed:28:36:
9e:f1:e1:a4:b6:3e:8c:7f:49:34:87:28:51:73:f3:e0:6f:5f:
a7:a8:56:de:69:1d:ec:1f:60:86:c8:ad:98:76:65:88:82:71:
bd:b0:30:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvFTKADq3IJVxRg2AK344MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ODZmNGIyMTUwODE1ZWRhNzgzZTdmM2NmYjliN2U1M2Nl
N2Q5N2YwHhcNMjYwOTA1MDEwMDU1WhcNMjYwOTA2MDEwMDU1WjAzMTEwLwYDVQQD
Eyg2MjVkZGYzZDZhOGY0MThmNDE2ZGIyZGYwMDE1MjE1MjgwYWZiY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHVc/L8zoJe9q5ITvdq9nEADqW0r
NounWiUEATzZJvr1S+mXwX6XolxJ9PBTtEgDl1Okt7vbGAJ1/GpXbdkd7A0AsVxj
EQQ6MrTZyweRsaMXuVk5q/XyQXl/4T9r1E+L6MQ4HVqQPlzizxXTIdTdi6juuXsI
lmexZNeKr1P74Y5lZ1pmOIFz+bVaMmQeJBesNx41/A9AE3eyDewY4aZbRNS5gO2I
l5TqzoignVWfJfvAp5wUDam2ECevaG3KP4skv6rBCA9qftS3iyECe3h3V8XLtTs6
QXDo4Z43MOG4V7iwYqMQVpdnFW2eGwpgbMAa46QSVgHpcYhVxEkaJRLicQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJd3z1qj0GPQW2y3wAVIVKAr7znMB8GA1UdIwQY
MBaAFJiG9LIVCBXtp4Pn88+5t+U859l/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC81ZTRkN2UtYWMyMS00ZjAyLTk1ODEt
ZjAwZDkyZGMwN2I4LzEvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC81ZTRkN2UtYWMyMS00ZjAyLTk1ODEtZjAwZDkyZGMwN2I4
LzEvbUliMHNoVUlGZTJuZy1meno3bTM1VHpuMlg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPwivAZn
FvaAt8jdn5K8yXYjogS21mA74ntXOreiSy6wdKUm2WZ3A6a+saEUaylud/F+srj9
lCVtiNkuD4wF87XsJo4p/+xS/MP0qo1E+lAjeaS0I0GHET9+J1JxDvNbZ3/92cyu
v3M/I2W+a3pqyWYX1Od/BCc9QbFTRXujnLi7JJcsT+wXpeO6q3aQb+Vx5aRKTk3h
NzDEbOdXC/2lQ/HU4YrhHX8clbEpsLLmx07rRUIn51yuZwo7YUSw1l0rziPvCu+h
oZuqBnPKHP4YTMSz9nM/7Sg2nvHhpLY+jH9JNIcoUXPz4G9fp6hW3mkd7B9ghsit
mHZliIJxvbAwlQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:45:15 2026 by rpki-client