Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: /e63QS5eAyP1KYjdrpawlbZl6wH8mcgP0fj8g3y689g=
Subject key identifier: 8D:8B:3F:FD:EB:E3:66:94:E1:3E:F1:F5:85:E4:BA:C4:B5:B0:03:D9
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01A0889DB5A872659F1134E7452C7EB74AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0F60
Signing time: Thu 10 Sep 2026 00:00:32 +0000
Manifest this update: Thu 10 Sep 2026 00:00:32 +0000
Manifest next update: Fri 11 Sep 2026 00:00:32 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: ecWHIOX8HvGLBV5YxZH7q6s/8/HPvsjtbqzQb3zLBOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:9d:b5:a8:72:65:9f:11:34:e7:45:2c:7e:b7:4a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Sep 10 00:00:32 2026 GMT
Not After : Sep 11 00:00:32 2026 GMT
Subject: CN=8d8b3ffdebe36694e13ef1f585e4bac4b5b003d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:7b:37:a6:ee:ae:bb:4a:f4:d6:f6:9f:91:
84:a1:f6:b9:8e:bc:34:07:27:75:31:08:64:bf:c7:
4b:a6:6d:46:b1:f2:cd:65:6e:eb:9c:80:fd:0c:6a:
7b:88:ee:8f:2c:c3:6d:cd:e3:d3:5e:90:cc:ab:90:
85:51:58:c0:6d:93:22:57:ae:60:8a:5a:d3:f0:ad:
c3:14:d6:1b:cf:e8:a0:ae:81:f7:9b:ee:b0:07:04:
30:ce:67:20:af:5a:28:be:96:f1:c9:83:96:ba:75:
e5:ef:7b:f0:3f:76:45:e4:18:28:b5:2b:5d:43:bf:
9d:dc:3d:8c:02:9c:02:41:fc:1d:a1:2e:51:71:67:
dc:3d:14:ac:90:bb:a5:16:18:f9:17:9a:96:61:0b:
9e:28:71:aa:7a:09:6b:3b:87:ef:8c:6e:5a:20:46:
ab:e2:28:37:c1:1a:bc:b1:30:ea:66:bf:ff:37:62:
bb:09:a5:49:62:a1:cd:42:82:b4:78:d0:c2:f0:bb:
77:15:ef:d5:ec:6a:2d:85:a8:ba:cc:e4:f9:33:9f:
94:bd:35:8f:f4:a5:c3:45:d2:09:b0:79:f9:a9:c4:
41:b8:36:47:87:06:3f:48:6c:ea:d4:49:e2:c1:1d:
bc:e2:93:f4:32:20:a9:ef:f1:1d:7d:8c:99:02:e8:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8B:3F:FD:EB:E3:66:94:E1:3E:F1:F5:85:E4:BA:C4:B5:B0:03:D9
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ab:d6:09:59:bc:fa:af:73:00:c4:e3:bc:ae:ed:ff:be:e5:
87:a1:3c:01:cd:39:02:32:74:de:d4:f0:42:a8:39:46:1c:82:
cc:10:6c:15:7a:55:2b:3d:20:55:44:d8:80:65:6a:1c:ae:10:
60:35:66:e6:64:30:f1:7f:2a:2a:e0:b7:4f:70:25:50:ba:04:
d1:03:14:72:d7:5a:46:79:fc:b7:ed:14:cb:15:f8:ad:6a:f9:
84:af:a6:c1:98:57:bb:67:15:b9:f1:3f:e4:db:a4:76:cf:7a:
98:e6:d3:8a:5d:3d:f0:56:d3:a8:39:97:21:0a:a1:a7:54:83:
27:bb:4b:94:28:83:2e:39:ff:4f:37:cb:5c:2f:5a:f4:7d:13:
cf:44:59:d9:36:ed:3e:08:b5:a6:69:57:fb:f1:76:b7:18:3b:
4b:45:4c:f1:b5:ad:d1:e0:c9:30:48:51:8e:dd:76:88:8b:ec:
52:9c:9d:bc:19:dc:4f:aa:2a:14:9d:fe:aa:57:ec:a2:92:1f:
bc:b3:50:1a:25:31:12:d6:eb:f1:32:8f:6e:40:6d:c1:10:a8:
37:cd:6a:8e:ed:ff:85:b6:47:7e:e8:69:97:19:f6:da:91:8d:
90:d7:26:72:be:e3:ef:b9:7d:03:1d:fa:65:b3:b2:bf:0f:41:
0a:ca:a5:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCInbWocmWfETTnRSx+t0qrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl
Zjg4NTcwHhcNMjYwOTEwMDAwMDMyWhcNMjYwOTExMDAwMDMyWjAzMTEwLwYDVQQD
Eyg4ZDhiM2ZmZGViZTM2Njk0ZTEzZWYxZjU4NWU0YmFjNGI1YjAwM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpl7N6burrtK9Nb2n5GEofa5jrw0
Byd1MQhkv8dLpm1GsfLNZW7rnID9DGp7iO6PLMNtzePTXpDMq5CFUVjAbZMiV65g
ilrT8K3DFNYbz+igroH3m+6wBwQwzmcgr1oovpbxyYOWunXl73vwP3ZF5BgotStd
Q7+d3D2MApwCQfwdoS5RcWfcPRSskLulFhj5F5qWYQueKHGqeglrO4fvjG5aIEar
4ig3wRq8sTDqZr//N2K7CaVJYqHNQoK0eNDC8Lt3Fe/V7Gothai6zOT5M5+UvTWP
9KXDRdIJsHn5qcRBuDZHhwY/SGzq1EniwR284pP0MiCp7/EdfYyZAuhezQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2LP/3r42aU4T7x9YXkusS1sAPZMB8GA1UdIwQY
MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt
MzI5MzZjM2E0YTlkLzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk
LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqvWCVm8
+q9zAMTjvK7t/77lh6E8Ac05AjJ03tTwQqg5RhyCzBBsFXpVKz0gVUTYgGVqHK4Q
YDVm5mQw8X8qKuC3T3AlULoE0QMUctdaRnn8t+0UyxX4rWr5hK+mwZhXu2cVufE/
5Nukds96mObTil098FbTqDmXIQqhp1SDJ7tLlCiDLjn/TzfLXC9a9H0Tz0RZ2Tbt
Pgi1pmlX+/F2txg7S0VM8bWt0eDJMEhRjt12iIvsUpydvBncT6oqFJ3+qlfsopIf
vLNQGiUxEtbr8TKPbkBtwRCoN81qju3/hbZHfuhplxn22pGNkNcmcr7j77l9Ax36
ZbOyvw9BCsqlQw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:24:49 2026 by rpki-client