Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
File: IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft (raw, json)
Hash identifier: /QhXhe5IIi37pLa7REaLG25o5+xEIf4Lc1Phl5RrKKA=
Subject key identifier: 02:A8:47:4A:26:9D:0F:78:64:E4:B6:F6:83:01:01:22:6F:CF:84:FF
Authority key identifier: 20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
Certificate issuer: /CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Certificate serial: 01A08CE84CBAC17EDAEA3BB9AB0B778CB542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
Manifest number: 10AF
Signing time: Thu 10 Sep 2026 20:00:29 +0000
Manifest this update: Thu 10 Sep 2026 20:00:29 +0000
Manifest next update: Fri 11 Sep 2026 20:00:29 +0000
Files and hashes: 1: 1-kYVKomYqjL01cbaEPOlMsEWOVY.roa (hash: oUQ10g8uHJDmhHl7WNNwDwZSnYMcTHr2vmmz1SCpm+8=)
2: IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl (hash: NcoCrGBvEJDj4HUd0goQGrL8i9uh2u3VaY12Dv3vQTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:4c:ba:c1:7e:da:ea:3b:b9:ab:0b:77:8c:b5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20f81274f66bde89f12c243d09a9edc3e5b1e229
Validity
Not Before: Sep 10 20:00:29 2026 GMT
Not After : Sep 11 20:00:29 2026 GMT
Subject: CN=02a8474a269d0f7864e4b6f6830101226fcf84ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:13:1e:05:60:1d:ae:57:1c:1e:1d:af:38:4d:
dc:c1:28:c8:06:4e:10:3b:f6:88:3d:e6:98:90:5c:
a3:0c:04:5e:60:cc:22:b6:63:c2:50:60:42:61:84:
e0:aa:22:a0:5a:a9:69:49:d5:dd:00:ea:4c:33:85:
ef:8f:15:9b:51:42:2e:22:69:03:40:5e:ec:ff:86:
df:e5:ca:bd:76:b9:01:76:92:4b:77:e6:66:ef:51:
bc:48:86:93:78:33:38:f4:84:db:b5:6e:80:87:2c:
b3:93:7f:40:89:2e:cf:2b:a3:30:1a:83:b8:da:98:
35:d5:80:5e:38:7e:bc:2c:8b:53:fa:21:47:c9:20:
3f:f2:48:cb:dc:05:b0:be:cf:ec:39:fe:47:5c:05:
f6:2e:99:3c:e3:95:cc:13:8c:4d:0b:5b:d5:0a:38:
79:b7:96:35:1b:35:f3:de:63:fe:16:f4:73:3c:07:
82:c9:20:90:7b:ba:e0:c9:04:08:a4:2d:6c:97:33:
21:01:d3:4b:b1:21:3d:b3:cd:ba:91:be:d2:ee:b8:
5d:40:e9:1a:39:86:2f:c4:24:e0:b5:64:5b:f8:45:
3d:2d:f5:e0:19:84:cd:76:7d:cd:64:a0:0b:50:e7:
f8:28:ab:7d:64:57:e2:fd:75:49:6b:21:ef:fe:1a:
1f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A8:47:4A:26:9D:0F:78:64:E4:B6:F6:83:01:01:22:6F:CF:84:FF
X509v3 Authority Key Identifier:
keyid:20:F8:12:74:F6:6B:DE:89:F1:2C:24:3D:09:A9:ED:C3:E5:B1:E2:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPgSdPZr3onxLCQ9Cantw-Wx4ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef96e-f8a6-4f9b-9bc7-fe26e899deb8/1/IPgSdPZr3onxLCQ9Cantw-Wx4ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:1f:51:81:d2:38:90:f1:b6:41:be:b8:87:06:66:48:8b:d4:
35:57:3d:5b:5c:e0:30:ca:4a:bc:f7:1f:e4:6b:21:ea:ed:42:
a3:c7:2c:00:9d:2c:e2:32:ba:33:93:1a:f6:44:b4:fe:af:b2:
73:0b:a8:a9:e7:bb:9f:87:31:d1:9a:d2:ca:f0:f1:99:a2:26:
d7:ca:16:8e:a9:ce:8e:d6:13:4b:2f:dd:15:eb:ad:48:c0:3c:
57:41:b4:92:e4:66:f0:de:59:41:82:7e:28:07:89:f8:53:81:
ac:1b:42:36:33:64:bc:ff:28:94:84:66:f8:9d:52:11:ef:83:
8d:eb:1a:39:b6:43:ac:77:29:71:1a:11:75:11:df:9b:68:8a:
bf:29:3a:e6:4f:9a:05:45:eb:d7:0c:d7:b2:c7:47:99:ea:f5:
56:09:3c:66:73:77:cd:55:3a:24:d0:25:58:8e:52:8a:c1:d7:
9e:1a:24:ae:e2:79:c3:7e:1e:d2:6f:d2:dd:13:ce:9d:bd:92:
ec:a9:cb:77:91:40:2b:e5:74:5d:94:f8:05:46:3e:13:c0:b2:
3f:3e:fe:d7:65:62:72:0b:d7:4d:81:1d:73:eb:6b:c7:cb:37:
79:e5:3c:ec:ef:4e:a0:b0:56:11:8f:70:a1:53:00:1d:a1:52:
73:c5:12:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCM6Ey6wX7a6ju5qwt3jLVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjgxMjc0ZjY2YmRlODlmMTJjMjQzZDA5YTllZGMzZTVi
MWUyMjkwHhcNMjYwOTEwMjAwMDI5WhcNMjYwOTExMjAwMDI5WjAzMTEwLwYDVQQD
EygwMmE4NDc0YTI2OWQwZjc4NjRlNGI2ZjY4MzAxMDEyMjZmY2Y4NGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRMeBWAdrlccHh2vOE3cwSjIBk4Q
O/aIPeaYkFyjDAReYMwitmPCUGBCYYTgqiKgWqlpSdXdAOpMM4XvjxWbUUIuImkD
QF7s/4bf5cq9drkBdpJLd+Zm71G8SIaTeDM49ITbtW6Ahyyzk39AiS7PK6MwGoO4
2pg11YBeOH68LItT+iFHySA/8kjL3AWwvs/sOf5HXAX2Lpk845XME4xNC1vVCjh5
t5Y1GzXz3mP+FvRzPAeCySCQe7rgyQQIpC1slzMhAdNLsSE9s826kb7S7rhdQOka
OYYvxCTgtWRb+EU9LfXgGYTNdn3NZKALUOf4KKt9ZFfi/XVJayHv/hof0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKoR0omnQ94ZOS29oMBASJvz4T/MB8GA1UdIwQY
MBaAFCD4EnT2a96J8SwkPQmp7cPlseIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzct
ZmUyNmU4OTlkZWI4LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zZWY5NmUtZjhhNi00ZjliLTliYzctZmUyNmU4OTlkZWI4
LzEvSVBnU2RQWnIzb254TENROUNhbnR3LVd4NGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhB9RgdI4
kPG2Qb64hwZmSIvUNVc9W1zgMMpKvPcf5Gsh6u1Co8csAJ0s4jK6M5Ma9kS0/q+y
cwuoqee7n4cx0ZrSyvDxmaIm18oWjqnOjtYTSy/dFeutSMA8V0G0kuRm8N5ZQYJ+
KAeJ+FOBrBtCNjNkvP8olIRm+J1SEe+DjesaObZDrHcpcRoRdRHfm2iKvyk65k+a
BUXr1wzXssdHmer1Vgk8ZnN3zVU6JNAlWI5SisHXnhokruJ5w34e0m/S3RPOnb2S
7KnLd5FAK+V0XZT4BUY+E8CyPz7+12VicgvXTYEdc+trx8s3eeU87O9OoLBWEY9w
oVMAHaFSc8USFA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:49 2026 by rpki-client