Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
File: 9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft (raw, json)
Hash identifier: l3y0ks5M4FZEGshSam2F1tWYKjdnyAQADA8uSF/RjuA=
Subject key identifier: 17:1F:F7:B0:8A:3F:C0:B2:28:F2:07:B8:C2:DF:07:99:29:F6:8B:E5
Authority key identifier: F5:66:E8:90:75:12:E8:1D:9C:B8:B8:DF:33:A1:9B:D7:36:C6:9E:44
Certificate issuer: /CN=f566e8907512e81d9cb8b8df33a19bd736c69e44
Certificate serial: 01A04084A2E710FE3B054260BBD65C35A04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
Manifest number: D2
Signing time: Thu 27 Aug 2026 00:00:29 +0000
Manifest this update: Thu 27 Aug 2026 00:00:29 +0000
Manifest next update: Fri 28 Aug 2026 00:00:29 +0000
Files and hashes: 1: 9WbokHUS6B2cuLjfM6Gb1zbGnkQ.crl (hash: r/v+7iyU95z/wugbuXwMpNiOD1ZncVvE0ITgRxsoXq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:84:a2:e7:10:fe:3b:05:42:60:bb:d6:5c:35:a0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f566e8907512e81d9cb8b8df33a19bd736c69e44
Validity
Not Before: Aug 27 00:00:29 2026 GMT
Not After : Aug 28 00:00:29 2026 GMT
Subject: CN=171ff7b08a3fc0b228f207b8c2df079929f68be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:03:56:93:7c:54:d5:1c:e1:bc:92:df:e8:
dd:e3:49:4d:00:8a:d1:18:b6:e1:28:a2:f2:29:5e:
7c:ad:08:81:66:c3:43:83:53:ac:73:0d:c1:dc:96:
85:51:5b:9d:6f:b4:a8:4b:83:11:f0:66:5a:c8:48:
d9:62:b1:a7:04:fb:f1:87:be:57:27:63:72:f4:74:
d8:0c:1a:b7:96:02:10:14:50:99:55:50:1f:08:dc:
e4:9d:eb:39:43:ef:66:7f:b9:f7:2b:9c:00:ca:9c:
5e:c5:74:9f:f6:5a:6c:20:a5:5f:f7:76:65:7f:65:
9d:75:45:52:5e:3a:9e:88:af:ca:af:18:d8:3b:e3:
41:2f:67:84:c8:76:f0:7e:b3:b2:2d:3a:52:7f:71:
da:54:1b:26:0d:11:6b:1e:d2:e1:76:68:b4:d3:6c:
f1:7c:00:90:7f:08:98:3b:ce:37:44:e0:ee:7b:4a:
04:a1:61:19:d1:de:24:1a:33:cb:62:ee:78:97:2c:
62:0e:b5:9f:24:da:fc:2d:f9:8a:1d:de:6e:0d:8b:
28:90:b6:82:ed:2b:2a:40:42:0d:cd:a3:21:49:86:
e2:2f:71:2a:21:81:fe:61:e2:2b:ca:c4:f6:08:99:
7a:e0:cf:0e:a1:b3:8d:a6:19:69:b7:60:43:41:03:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:F7:B0:8A:3F:C0:B2:28:F2:07:B8:C2:DF:07:99:29:F6:8B:E5
X509v3 Authority Key Identifier:
keyid:F5:66:E8:90:75:12:E8:1D:9C:B8:B8:DF:33:A1:9B:D7:36:C6:9E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a00ecd-bdb8-4e3a-8254-58eaeac072a2/1/9WbokHUS6B2cuLjfM6Gb1zbGnkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:33:91:c3:22:ce:82:8a:17:fc:8f:64:bc:e3:47:b4:f3:
38:10:09:70:cd:ac:bc:a3:b9:55:bd:1c:fb:81:71:cc:d1:c6:
b7:da:06:49:6e:9f:73:92:2b:21:7d:6a:70:b8:d8:ac:b8:c7:
63:84:3e:24:41:05:6b:33:b3:63:a4:bf:f5:91:c0:45:88:78:
3b:ee:82:dd:72:dd:9a:e1:13:a5:16:1b:7d:6e:f5:91:60:ba:
33:f6:2f:27:59:87:ba:40:03:98:7e:72:04:86:37:3f:d9:b7:
97:26:4c:2a:69:93:da:99:c0:f4:f5:e7:df:55:99:b2:f3:2c:
b8:f5:41:d0:22:dd:c8:3d:a2:78:dd:8a:3b:84:02:95:29:f5:
9f:03:de:07:2f:a9:a7:af:96:1e:05:0e:0a:45:61:46:df:ab:
19:6d:79:2d:a1:f7:ae:15:bd:a3:61:73:55:ad:a6:1b:92:8c:
fa:95:64:e7:38:55:59:00:c9:90:69:18:4a:c0:fc:ef:2e:85:
6a:64:9c:8c:45:7f:20:cc:27:8e:62:0c:75:53:ae:b9:1d:c5:
b3:3b:a4:ba:76:e6:ef:30:c2:c5:12:38:01:64:09:10:46:82:
f0:9c:10:f2:6a:72:38:3c:c0:71:5d:bc:65:87:c5:90:ca:35:
39:9e:cd:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhKLnEP47BUJgu9ZcNaBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NjZlODkwNzUxMmU4MWQ5Y2I4YjhkZjMzYTE5YmQ3MzZj
NjllNDQwHhcNMjYwODI3MDAwMDI5WhcNMjYwODI4MDAwMDI5WjAzMTEwLwYDVQQD
EygxNzFmZjdiMDhhM2ZjMGIyMjhmMjA3YjhjMmRmMDc5OTI5ZjY4YmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZQDVpN8VNUc4byS3+jd40lNAIrR
GLbhKKLyKV58rQiBZsNDg1Oscw3B3JaFUVudb7SoS4MR8GZayEjZYrGnBPvxh75X
J2Ny9HTYDBq3lgIQFFCZVVAfCNzknes5Q+9mf7n3K5wAypxexXSf9lpsIKVf93Zl
f2WddUVSXjqeiK/KrxjYO+NBL2eEyHbwfrOyLTpSf3HaVBsmDRFrHtLhdmi002zx
fACQfwiYO843RODue0oEoWEZ0d4kGjPLYu54lyxiDrWfJNr8LfmKHd5uDYsokLaC
7SsqQEINzaMhSYbiL3EqIYH+YeIrysT2CJl64M8OobONphlpt2BDQQMgeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcf97CKP8CyKPIHuMLfB5kp9ovlMB8GA1UdIwQY
MBaAFPVm6JB1EugdnLi43zOhm9c2xp5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdib2tIVVM2QjJjdUxqZk02R2IxemJHbmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hMDBlY2QtYmRiOC00ZTNhLTgyNTQt
NThlYWVhYzA3MmEyLzEvOVdib2tIVVM2QjJjdUxqZk02R2IxemJHbmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9hMDBlY2QtYmRiOC00ZTNhLTgyNTQtNThlYWVhYzA3MmEy
LzEvOVdib2tIVVM2QjJjdUxqZk02R2IxemJHbmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPgzkcMi
zoKKF/yPZLzjR7TzOBAJcM2svKO5Vb0c+4FxzNHGt9oGSW6fc5IrIX1qcLjYrLjH
Y4Q+JEEFazOzY6S/9ZHARYh4O+6C3XLdmuETpRYbfW71kWC6M/YvJ1mHukADmH5y
BIY3P9m3lyZMKmmT2pnA9PXn31WZsvMsuPVB0CLdyD2ieN2KO4QClSn1nwPeBy+p
p6+WHgUOCkVhRt+rGW15LaH3rhW9o2FzVa2mG5KM+pVk5zhVWQDJkGkYSsD87y6F
amScjEV/IMwnjmIMdVOuuR3Fszukunbm7zDCxRI4AWQJEEaC8JwQ8mpyODzAcV28
ZYfFkMo1OZ7NMg==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:27:01 2026 by rpki-client