Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier: z4p+uISZugEPu/2dX/EvlHw72GDvRkiqavNV5kvn0iI=
Subject key identifier: E7:9D:69:DC:61:FD:D7:39:A2:88:40:9F:BC:F6:88:D8:26:3C:B8:FA
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial: 01A154777728764D607E6FE7820EC93D76D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 14:01:17 +0000
Manifest this update: Mon 19 Oct 2026 14:01:17 +0000
Manifest next update: Tue 20 Oct 2026 14:01:17 +0000
Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: sZJRrCcdcUMAg5h1rAqeaGxqTvzi3PSmoTyFcVSHv4o=)
2: CvAwcxB4NQhTMik421cY6D4GJSQ.roa (hash: bDEysHdEoYRzyx+ZtQs8J1SFqsQ1uvog9sHvqZgzUSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:77:28:76:4d:60:7e:6f:e7:82:0e:c9:3d:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Validity
Not Before: Oct 19 14:01:17 2026 GMT
Not After : Oct 20 14:01:17 2026 GMT
Subject: CN=e79d69dc61fdd739a288409fbcf688d8263cb8fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:b2:79:f9:1d:09:8c:57:28:d1:e3:94:ea:
4a:47:ef:8d:2a:40:8a:8e:46:41:cd:c3:43:6d:32:
93:30:9d:e2:5f:3e:93:cb:22:cb:07:2e:5c:23:fa:
59:5c:56:a8:64:5e:fd:3d:8c:4d:75:16:d5:57:f0:
bc:0b:30:e6:fd:68:dc:42:f7:c9:5a:86:32:06:e8:
63:3c:40:c1:07:96:52:57:e9:52:87:99:5c:5f:22:
48:44:14:4d:a8:17:f6:15:fb:40:72:4d:09:c7:9b:
ca:52:0d:81:1d:e3:b1:11:80:c4:53:ff:d3:19:ee:
7c:1a:81:34:4c:43:d7:8a:11:2d:f5:df:5d:12:c3:
90:e1:09:0d:8c:50:45:71:00:3e:4a:e8:fb:7b:68:
ba:76:20:ae:1c:7d:f4:b4:b8:96:0e:99:9f:ab:52:
ed:85:05:bd:15:91:47:bc:5f:e7:96:a2:19:f5:54:
6f:6c:c3:7e:2c:42:c6:56:49:06:d9:43:cc:6c:90:
68:cf:4d:e2:bd:03:7c:19:ef:b5:97:0e:38:58:d9:
47:11:63:0e:ea:59:78:5e:32:8c:1e:11:95:c2:30:
29:e8:0c:6d:56:10:4f:37:c1:1b:77:43:4c:10:15:
b3:e1:aa:c7:f3:5f:25:1c:c8:41:15:b3:0a:a3:2c:
87:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:69:DC:61:FD:D7:39:A2:88:40:9F:BC:F6:88:D8:26:3C:B8:FA
X509v3 Authority Key Identifier:
keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:13:4f:8a:5b:63:56:4b:84:a1:84:19:a8:a6:ce:a4:2e:91:
d3:7d:40:af:8c:b4:68:bb:90:7e:e3:69:a7:1e:42:cf:3d:53:
db:03:a9:c5:50:95:45:f8:cc:c8:34:39:8f:5a:cd:ca:c7:08:
32:a9:aa:09:8e:dd:53:58:f3:41:93:69:72:1e:e2:bd:db:1a:
51:74:4a:a3:23:6d:2c:bc:4b:28:ac:bf:38:1c:01:9e:9b:f0:
9d:2d:66:a2:6d:c4:e6:ee:e6:f9:e7:6f:ea:6c:9c:ff:b9:b4:
61:a1:3e:52:ae:56:06:49:03:e1:1b:08:85:78:94:98:7f:9f:
e2:0f:ba:2b:37:92:37:e4:93:59:1a:e0:d9:2c:fd:71:1a:21:
cd:ac:b2:3a:d4:c2:28:b5:a0:e1:fd:9b:05:87:70:e3:0e:00:
ae:d5:b1:85:24:e1:36:5b:c3:d0:d6:cd:37:e0:39:44:91:af:
11:55:24:00:f8:6c:a3:d8:ed:1e:ec:f3:8b:63:93:1a:10:c5:
f4:b2:af:77:0e:83:75:0c:ae:d2:66:a9:1f:88:f4:bb:a8:de:
c9:29:c8:08:7f:50:a3:35:5d:ff:07:5f:a3:79:b6:03:f9:e8:
16:46:c2:1f:8e:d2:6d:f0:4d:80:d6:44:9f:b7:b3:70:10:34:
1c:a9:be:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUd3codk1gfm/ngg7JPXbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm
OGVjNmUwHhcNMjYxMDE5MTQwMTE3WhcNMjYxMDIwMTQwMTE3WjAzMTEwLwYDVQQD
EyhlNzlkNjlkYzYxZmRkNzM5YTI4ODQwOWZiY2Y2ODhkODI2M2NiOGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvOyefkdCYxXKNHjlOpKR++NKkCK
jkZBzcNDbTKTMJ3iXz6TyyLLBy5cI/pZXFaoZF79PYxNdRbVV/C8CzDm/WjcQvfJ
WoYyBuhjPEDBB5ZSV+lSh5lcXyJIRBRNqBf2FftAck0Jx5vKUg2BHeOxEYDEU//T
Ge58GoE0TEPXihEt9d9dEsOQ4QkNjFBFcQA+Suj7e2i6diCuHH30tLiWDpmfq1Lt
hQW9FZFHvF/nlqIZ9VRvbMN+LELGVkkG2UPMbJBoz03ivQN8Ge+1lw44WNlHEWMO
6ll4XjKMHhGVwjAp6AxtVhBPN8Ebd0NMEBWz4arH818lHMhBFbMKoyyH/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOedadxh/dc5oohAn7z2iNgmPLj6MB8GA1UdIwQY
MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt
NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy
LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxNPiltj
VkuEoYQZqKbOpC6R031Ar4y0aLuQfuNppx5Czz1T2wOpxVCVRfjMyDQ5j1rNyscI
MqmqCY7dU1jzQZNpch7ivdsaUXRKoyNtLLxLKKy/OBwBnpvwnS1mom3E5u7m+edv
6myc/7m0YaE+Uq5WBkkD4RsIhXiUmH+f4g+6KzeSN+STWRrg2Sz9cRohzayyOtTC
KLWg4f2bBYdw4w4ArtWxhSThNlvD0NbNN+A5RJGvEVUkAPhso9jtHuzzi2OTGhDF
9LKvdw6DdQyu0mapH4j0u6jeySnICH9QozVd/wdfo3m2A/noFkbCH47SbfBNgNZE
n7ezcBA0HKm+Tg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:05:51 2026 by rpki-client