Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: 11zl4zhdDYEyBTvAX/Jvr7fQcPlV6Dt1Mhigi8TLlzc=
Subject key identifier: CC:AE:8C:BF:E0:AB:B6:9C:69:10:55:EA:C6:D7:F2:54:6A:5B:1F:38
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 01A001DC940CC8278FB6B7ED59110121EFBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 1991
Signing time: Fri 14 Aug 2026 20:00:28 +0000
Manifest this update: Fri 14 Aug 2026 20:00:28 +0000
Manifest next update: Sat 15 Aug 2026 20:00:28 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: uxw1iAb5njaHLc4oM3/eDrSDNIbZZu0G3OdtDdZrTXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:94:0c:c8:27:8f:b6:b7:ed:59:11:01:21:ef:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Aug 14 20:00:28 2026 GMT
Not After : Aug 15 20:00:28 2026 GMT
Subject: CN=ccae8cbfe0abb69c691055eac6d7f2546a5b1f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:6d:c1:d4:e8:80:63:a0:1f:5a:cc:bb:e4:
2a:dd:27:2b:9a:e3:81:b8:0c:2c:ab:d7:65:b4:39:
12:10:b6:ab:bd:97:b8:b7:03:df:73:22:99:32:c0:
b1:ff:2d:db:dd:77:9e:7f:09:ca:32:f5:64:94:48:
62:3c:a5:8a:47:c4:65:06:5a:29:b6:8a:2e:16:71:
91:b3:ea:8f:ef:c0:db:1e:c8:3a:89:d5:96:d2:cc:
46:04:0a:af:6f:04:3a:5e:f9:c3:37:da:a1:1f:fc:
16:65:c1:e8:1a:ad:74:72:93:b8:f7:bd:76:a7:ec:
4d:08:fe:05:e0:96:15:cd:4e:0c:fc:13:c3:8b:4d:
03:2d:8b:53:a0:ae:32:54:5f:37:7f:68:ca:3f:1a:
51:3d:61:96:c4:c7:92:92:dc:3b:42:5a:05:fb:c5:
6b:10:8c:8d:fc:50:c9:82:6b:6e:d9:a8:48:31:41:
ad:6c:20:8c:03:39:ac:ca:0c:99:aa:47:c5:27:9b:
02:26:ad:ec:ca:45:43:1f:c4:7c:45:69:f8:b1:40:
37:31:bd:5e:5e:eb:55:2d:4f:2b:66:87:49:ef:fa:
7f:0c:d7:3d:93:0f:7b:0b:b5:89:ac:cf:97:87:1e:
4c:ce:cb:93:72:67:f8:32:e1:f3:e8:41:1d:5e:0f:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AE:8C:BF:E0:AB:B6:9C:69:10:55:EA:C6:D7:F2:54:6A:5B:1F:38
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e8:90:e0:4e:ce:39:6c:e7:3b:3d:a0:98:40:e1:5e:57:e7:
45:ea:7b:eb:b9:7c:1f:9f:da:1b:57:18:fd:ca:40:25:34:55:
0b:1b:f4:9e:e8:b1:ae:b6:7c:81:34:6d:67:e3:35:33:10:0c:
8c:e4:14:ef:65:ac:0f:f9:73:70:30:8c:31:ea:f9:ef:5f:36:
3d:31:66:1c:22:84:28:04:9a:e4:34:26:5e:d2:36:a8:00:7b:
95:0f:27:b5:c4:1c:84:ac:80:17:81:95:f6:79:c7:ba:85:75:
6c:ac:c5:f0:a8:c4:be:3e:38:8b:ba:8a:78:cd:20:bf:92:c0:
12:b0:44:dd:67:83:89:1d:fe:f0:7e:83:ec:12:de:22:71:38:
93:4b:f8:7d:29:38:88:70:b1:d1:fa:6a:b3:83:b0:da:4b:ba:
0a:a8:50:40:fe:fb:3b:e9:63:55:3b:0e:2f:bc:82:61:ad:b6:
d4:dd:e7:da:6a:cb:82:3d:3f:7a:02:1c:ab:23:89:f4:83:8f:
aa:6f:e9:4a:e7:97:a6:95:2d:9c:d4:5d:5e:70:e6:d0:5a:a0:
a8:9a:d2:2a:87:cc:2b:44:00:de:7d:1d:36:1f:69:67:be:0a:
5c:3e:a7:8b:3b:88:0c:cf:e8:cf:9a:a8:68:ba:f7:83:bb:44:
40:8c:82:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3JQMyCePtrftWREBIe+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx
NzkyM2EwHhcNMjYwODE0MjAwMDI4WhcNMjYwODE1MjAwMDI4WjAzMTEwLwYDVQQD
EyhjY2FlOGNiZmUwYWJiNjljNjkxMDU1ZWFjNmQ3ZjI1NDZhNWIxZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UNtwdTogGOgH1rMu+Qq3ScrmuOB
uAwsq9dltDkSELarvZe4twPfcyKZMsCx/y3b3XeefwnKMvVklEhiPKWKR8RlBlop
toouFnGRs+qP78DbHsg6idWW0sxGBAqvbwQ6XvnDN9qhH/wWZcHoGq10cpO49712
p+xNCP4F4JYVzU4M/BPDi00DLYtToK4yVF83f2jKPxpRPWGWxMeSktw7QloF+8Vr
EIyN/FDJgmtu2ahIMUGtbCCMAzmsygyZqkfFJ5sCJq3sykVDH8R8RWn4sUA3Mb1e
XutVLU8rZodJ7/p/DNc9kw97C7WJrM+Xhx5MzsuTcmf4MuHz6EEdXg/rnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyujL/gq7acaRBV6sbX8lRqWx84MB8GA1UdIwQY
MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt
ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5
LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+iQ4E7O
OWznOz2gmEDhXlfnRep767l8H5/aG1cY/cpAJTRVCxv0nuixrrZ8gTRtZ+M1MxAM
jOQU72WsD/lzcDCMMer57182PTFmHCKEKASa5DQmXtI2qAB7lQ8ntcQchKyAF4GV
9nnHuoV1bKzF8KjEvj44i7qKeM0gv5LAErBE3WeDiR3+8H6D7BLeInE4k0v4fSk4
iHCx0fpqs4Ow2ku6CqhQQP77O+ljVTsOL7yCYa221N3n2mrLgj0/egIcqyOJ9IOP
qm/pSueXppUtnNRdXnDm0FqgqJrSKofMK0QA3n0dNh9pZ74KXD6nizuIDM/oz5qo
aLr3g7tEQIyCZA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:06 2026 by rpki-client