Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
File: rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft (raw, json)
Hash identifier: YxKij25FC0ANkVWaWNFmPq7oGNL6f39pXZk9bjlFR+o=
Subject key identifier: DA:CF:7B:3C:39:F0:93:E3:7A:C2:3A:01:E4:32:83:A2:20:7C:02:B2
Authority key identifier: AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
Certificate issuer: /CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Certificate serial: 01A08A8D2597A32D98EDD9BC6E50BC4918C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:40 +0000
Manifest this update: Thu 10 Sep 2026 09:01:40 +0000
Manifest next update: Fri 11 Sep 2026 09:01:40 +0000
Files and hashes: 1: DvFoE9eQcmaY9cfgHPWGq1B4Y0o.roa (hash: 2frlwVf7B3+tlGK0l62bvwlFXmOnTN/JdBfNROmaTaE=)
2: rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl (hash: XIB5jsypnMymtxi3LK2jAmDQR8YfvUfxdzS/opQ/Pmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:25:97:a3:2d:98:ed:d9:bc:6e:50:bc:49:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac0fd4686b6c10a5e37f0a018f550b671d68c908
Validity
Not Before: Sep 10 09:01:40 2026 GMT
Not After : Sep 11 09:01:40 2026 GMT
Subject: CN=dacf7b3c39f093e37ac23a01e43283a2207c02b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:c8:46:5d:d5:4d:aa:b6:78:ac:42:0a:20:
b6:01:c4:fc:a0:b2:62:c0:2d:2e:bd:53:eb:17:c8:
fb:77:b1:59:dd:cb:54:d7:94:93:8b:ba:23:d2:72:
ca:ad:94:7e:cb:3e:c5:17:c2:34:d4:9f:c8:41:44:
4e:c1:47:b8:4c:96:3f:7b:df:7b:05:13:0a:fd:bd:
2f:41:00:89:36:f9:18:81:fd:f3:1e:75:57:69:19:
aa:20:dd:1f:ed:86:01:5a:9a:98:fb:31:56:92:a6:
69:42:4a:bd:9a:f4:e2:57:ec:84:49:f1:01:e3:b0:
4f:e4:b6:d3:28:c7:37:86:81:96:69:a1:db:b6:6d:
9e:7d:81:e4:d9:01:da:e1:b3:d9:c5:44:f7:47:26:
91:62:80:5b:67:d4:b6:e4:d0:3e:af:e4:97:e7:64:
f0:e8:81:83:b7:7d:41:82:e0:5f:3b:95:fd:2f:ee:
ef:06:6c:da:ca:a0:e8:36:94:19:d5:50:7b:c4:f7:
63:51:3b:6b:f0:bc:dc:36:4b:8c:a1:16:9a:90:d1:
23:d0:38:a9:46:67:3b:43:8d:05:38:f5:b4:a6:9d:
1e:94:7e:e8:f6:90:73:2e:82:d0:be:14:d9:1f:36:
04:76:ba:21:ae:4b:c6:0d:62:78:fd:55:c7:c0:b9:
db:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:7B:3C:39:F0:93:E3:7A:C2:3A:01:E4:32:83:A2:20:7C:02:B2
X509v3 Authority Key Identifier:
keyid:AC:0F:D4:68:6B:6C:10:A5:E3:7F:0A:01:8F:55:0B:67:1D:68:C9:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rA_UaGtsEKXjfwoBj1ULZx1oyQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8fc9a-3b92-4798-8cfd-c6bdb1830694/1/rA_UaGtsEKXjfwoBj1ULZx1oyQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:64:56:be:87:b8:2e:f2:04:02:78:30:aa:27:13:55:7e:ad:
16:21:e1:d3:26:d1:cd:c2:62:b5:a6:c1:d9:dd:8d:fb:6e:83:
c9:1f:7f:05:1d:08:ac:cc:34:ba:0d:8e:87:d5:d1:3b:e4:8b:
9e:b2:00:16:89:49:c9:ef:8f:de:17:5d:cc:50:27:6c:05:c7:
b6:d1:4e:52:9e:ea:8e:da:8c:db:d3:d5:1a:c7:ec:de:a3:f4:
e8:35:b5:f2:3a:e8:4e:96:c9:14:a3:9c:c3:f2:11:a4:a3:2e:
a6:b3:93:f4:0a:aa:53:a1:58:42:86:c8:19:92:dd:29:0d:05:
ee:d5:38:9f:50:34:47:ce:da:6d:f3:ce:06:7c:59:4f:f0:ea:
9e:37:39:0a:da:09:05:86:35:ab:85:78:87:37:7e:f1:bb:81:
fd:59:cb:c9:ec:a5:71:34:39:a8:92:44:6f:15:77:1c:35:2d:
c6:6b:5b:87:77:56:96:8e:de:5c:a4:b7:c8:a1:ab:79:52:0a:
7e:6b:73:71:54:3a:24:f2:e0:4c:dc:a2:98:12:5e:b5:f0:41:
9e:28:d6:ff:00:8d:d4:b2:f3:20:42:2e:fa:5b:5c:fb:ad:ea:
29:c1:9a:73:0c:59:6c:a6:3d:72:00:70:ca:64:8c:6e:a8:e3:
ed:33:31:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjSWXoy2Y7dm8blC8SRjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMGZkNDY4NmI2YzEwYTVlMzdmMGEwMThmNTUwYjY3MWQ2
OGM5MDgwHhcNMjYwOTEwMDkwMTQwWhcNMjYwOTExMDkwMTQwWjAzMTEwLwYDVQQD
EyhkYWNmN2IzYzM5ZjA5M2UzN2FjMjNhMDFlNDMyODNhMjIwN2MwMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPDIRl3VTaq2eKxCCiC2AcT8oLJi
wC0uvVPrF8j7d7FZ3ctU15STi7oj0nLKrZR+yz7FF8I01J/IQUROwUe4TJY/e997
BRMK/b0vQQCJNvkYgf3zHnVXaRmqIN0f7YYBWpqY+zFWkqZpQkq9mvTiV+yESfEB
47BP5LbTKMc3hoGWaaHbtm2efYHk2QHa4bPZxUT3RyaRYoBbZ9S25NA+r+SX52Tw
6IGDt31BguBfO5X9L+7vBmzayqDoNpQZ1VB7xPdjUTtr8LzcNkuMoRaakNEj0Dip
Rmc7Q40FOPW0pp0elH7o9pBzLoLQvhTZHzYEdrohrkvGDWJ4/VXHwLnbhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrPezw58JPjesI6AeQyg6IgfAKyMB8GA1UdIwQY
MBaAFKwP1GhrbBCl438KAY9VC2cdaMkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQt
YzZiZGIxODMwNjk0LzEvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGZjOWEtM2I5Mi00Nzk4LThjZmQtYzZiZGIxODMwNjk0
LzEvckFfVWFHdHNFS1hqZndvQmoxVUxaeDFveVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGRWvoe4
LvIEAngwqicTVX6tFiHh0ybRzcJitabB2d2N+26DyR9/BR0IrMw0ug2Oh9XRO+SL
nrIAFolJye+P3hddzFAnbAXHttFOUp7qjtqM29PVGsfs3qP06DW18jroTpbJFKOc
w/IRpKMuprOT9AqqU6FYQobIGZLdKQ0F7tU4n1A0R87abfPOBnxZT/Dqnjc5CtoJ
BYY1q4V4hzd+8buB/VnLyeylcTQ5qJJEbxV3HDUtxmtbh3dWlo7eXKS3yKGreVIK
fmtzcVQ6JPLgTNyimBJetfBBnijW/wCN1LLzIEIu+ltc+63qKcGacwxZbKY9cgBw
ymSMbqjj7TMx3w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:01:40 2026 by rpki-client