Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
File: m7S5jjWbTJLDEYP790kjjmtvCMI.mft (raw, json)
Hash identifier: 3U5k4jPagG9AJ40Pj67IKowTRYlG5K8hGW5pyybpJ+M=
Subject key identifier: 26:6C:88:44:E7:1C:5B:D1:3E:0D:BC:84:9D:D9:7B:41:42:8D:FF:FF
Authority key identifier: 9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
Certificate issuer: /CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Certificate serial: 01A02620822D882DAC707C6AA032218CD409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
Manifest number: 1A12
Signing time: Fri 21 Aug 2026 21:00:59 +0000
Manifest this update: Fri 21 Aug 2026 21:00:59 +0000
Manifest next update: Sat 22 Aug 2026 21:00:59 +0000
Files and hashes: 1: SKpYBqwn6udQHU20Uf2pG2NVjSc.roa (hash: 0Drji27vy2Cr4dvgFBfhAgVdOvdDdCwXZsDdSfaarcA=)
2: m7S5jjWbTJLDEYP790kjjmtvCMI.crl (hash: mijQHqXgoq7/v/JgtRCrVtYeQMYWWbYxqOcaHNX5Eu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:20:82:2d:88:2d:ac:70:7c:6a:a0:32:21:8c:d4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bb4b98e359b4c92c31183fbf749238e6b6f08c2
Validity
Not Before: Aug 21 21:00:59 2026 GMT
Not After : Aug 22 21:00:59 2026 GMT
Subject: CN=266c8844e71c5bd13e0dbc849dd97b41428dffff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:ad:c0:02:c1:4b:13:a0:9d:ff:52:ec:0d:
0f:2f:66:2d:75:4c:a2:05:17:e6:3a:3a:83:99:d5:
26:f3:55:35:e8:5a:19:99:7e:93:d2:cb:9f:1e:10:
23:aa:fe:59:19:b4:02:fc:82:ad:e0:6f:96:39:cd:
77:bf:f5:5d:b2:58:46:d7:f5:36:a5:f5:fa:d3:d2:
a7:36:e4:c9:54:17:24:b8:13:ed:62:fa:e7:92:24:
fa:c3:a1:34:c7:2b:46:76:a8:f0:e5:8c:2d:32:0f:
2f:7b:24:c2:d8:39:0e:a6:26:70:d2:2f:70:63:ca:
c5:60:53:16:f2:e1:33:3e:d2:b1:ca:ea:12:33:6a:
04:95:68:79:31:e1:e3:46:6a:19:e9:b7:2a:b7:16:
3f:07:09:cc:22:30:fb:03:51:a1:0d:72:26:99:d6:
f2:ef:46:97:a8:77:43:1e:b7:d8:ed:34:b3:37:3b:
6d:95:15:ac:74:cb:31:1e:33:d7:cc:7b:54:2c:74:
e1:dc:9c:98:e6:80:85:54:34:cc:f0:87:d2:71:ae:
6e:e2:70:70:de:1f:8f:9e:9b:8d:27:20:79:d1:40:
79:f6:45:ca:4e:c0:b8:e2:d6:0a:74:6c:be:8d:76:
87:74:0a:c6:84:61:86:7d:74:f6:35:03:38:d4:ae:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6C:88:44:E7:1C:5B:D1:3E:0D:BC:84:9D:D9:7B:41:42:8D:FF:FF
X509v3 Authority Key Identifier:
keyid:9B:B4:B9:8E:35:9B:4C:92:C3:11:83:FB:F7:49:23:8E:6B:6F:08:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7S5jjWbTJLDEYP790kjjmtvCMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c9d4bb-3135-4a9c-b371-bb0d04a27727/1/m7S5jjWbTJLDEYP790kjjmtvCMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c9:06:f3:1a:6e:e7:13:d5:d5:51:4e:62:fa:e2:db:b8:ab:
25:80:ac:d8:4b:ec:f9:5d:1b:0b:33:64:77:59:e6:42:3f:04:
3b:88:50:77:da:c1:d5:6f:40:be:5f:5b:c5:98:a0:a2:b0:df:
ea:33:a6:f9:96:dc:b4:b0:6d:12:0f:60:2f:0c:65:7f:3f:6a:
1d:84:55:16:03:a0:92:dc:71:2a:58:17:6a:74:c4:9f:09:a4:
f0:5d:c1:eb:ea:77:9c:bb:89:14:03:14:6e:b5:b5:81:65:79:
24:91:f0:93:a2:fb:f9:3c:03:3f:29:75:76:d0:72:9e:16:d2:
30:30:a2:d3:3e:19:41:b1:be:30:80:a1:c4:d3:67:ad:ce:01:
1f:21:04:8d:87:4a:16:64:ba:5f:c6:cc:86:36:49:22:17:ff:
e2:8d:db:fd:c0:35:5e:c3:3f:ff:59:5a:ce:ca:dd:8c:1a:f0:
0c:a0:87:61:65:a9:29:cb:16:4b:cc:82:79:bb:6a:9e:72:fb:
97:78:a8:00:75:66:cb:4f:e6:8c:8f:38:83:06:ed:e6:08:a2:
6e:57:7a:23:52:b8:15:8e:6b:e8:22:d2:99:aa:9e:99:b8:af:
c3:19:4c:7e:8c:87:d9:74:cb:36:75:ea:7f:5a:48:c1:9c:df:
ad:60:09:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmIIItiC2scHxqoDIhjNQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYjRiOThlMzU5YjRjOTJjMzExODNmYmY3NDkyMzhlNmI2
ZjA4YzIwHhcNMjYwODIxMjEwMDU5WhcNMjYwODIyMjEwMDU5WjAzMTEwLwYDVQQD
EygyNjZjODg0NGU3MWM1YmQxM2UwZGJjODQ5ZGQ5N2I0MTQyOGRmZmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AWtwALBSxOgnf9S7A0PL2YtdUyi
BRfmOjqDmdUm81U16FoZmX6T0sufHhAjqv5ZGbQC/IKt4G+WOc13v/VdslhG1/U2
pfX609KnNuTJVBckuBPtYvrnkiT6w6E0xytGdqjw5YwtMg8veyTC2DkOpiZw0i9w
Y8rFYFMW8uEzPtKxyuoSM2oElWh5MeHjRmoZ6bcqtxY/BwnMIjD7A1GhDXImmdby
70aXqHdDHrfY7TSzNzttlRWsdMsxHjPXzHtULHTh3JyY5oCFVDTM8IfSca5u4nBw
3h+PnpuNJyB50UB59kXKTsC44tYKdGy+jXaHdArGhGGGfXT2NQM41K7zPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZsiETnHFvRPg28hJ3Ze0FCjf//MB8GA1UdIwQY
MBaAFJu0uY41m0ySwxGD+/dJI45rbwjCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEt
YmIwZDA0YTI3NzI3LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jOWQ0YmItMzEzNS00YTljLWIzNzEtYmIwZDA0YTI3NzI3
LzEvbTdTNWpqV2JUSkxERVlQNzkwa2pqbXR2Q01JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8kG8xpu
5xPV1VFOYvri27irJYCs2Evs+V0bCzNkd1nmQj8EO4hQd9rB1W9Avl9bxZigorDf
6jOm+ZbctLBtEg9gLwxlfz9qHYRVFgOgktxxKlgXanTEnwmk8F3B6+p3nLuJFAMU
brW1gWV5JJHwk6L7+TwDPyl1dtBynhbSMDCi0z4ZQbG+MIChxNNnrc4BHyEEjYdK
FmS6X8bMhjZJIhf/4o3b/cA1XsM//1lazsrdjBrwDKCHYWWpKcsWS8yCebtqnnL7
l3ioAHVmy0/mjI84gwbt5giibld6I1K4FY5r6CLSmaqembivwxlMfoyH2XTLNnXq
f1pIwZzfrWAJ3A==
-----END CERTIFICATE-----
Generated at Sat Aug 22 01:46:31 2026 by rpki-client