Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
File: mXw08WgyztiYLPBvtZoCKYQB-No.mft (raw, json)
Hash identifier: IdYugllA9bI+Yi3Xni27h2Ycyux3KyHd6IUBBh8c2ZM=
Subject key identifier: 9B:EA:12:4F:F6:97:B6:BF:B6:64:BA:F1:2D:28:86:F4:E3:82:79:08
Authority key identifier: 99:7C:34:F1:68:32:CE:D8:98:2C:F0:6F:B5:9A:02:29:84:01:F8:DA
Certificate issuer: /CN=997c34f16832ced8982cf06fb59a02298401f8da
Certificate serial: 01A0B6F7E1FEC188E9BA2931A0D43F8AA18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:01:33 +0000
Manifest this update: Sat 19 Sep 2026 00:01:33 +0000
Manifest next update: Sun 20 Sep 2026 00:01:33 +0000
Files and hashes: 1: M2Xl3gCxDPl2FoR0ehnDRYa-dGY.roa (hash: lU9vzqH6uaYjhvpiDwQOl1OKXNocXUzAF959NsQaJPo=)
2: mXw08WgyztiYLPBvtZoCKYQB-No.crl (hash: ZSHy/szZc0YPKzHyCtW9hwCWUQ54yzXF/JfaPr6skgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:e1:fe:c1:88:e9:ba:29:31:a0:d4:3f:8a:a1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=997c34f16832ced8982cf06fb59a02298401f8da
Validity
Not Before: Sep 19 00:01:33 2026 GMT
Not After : Sep 20 00:01:33 2026 GMT
Subject: CN=9bea124ff697b6bfb664baf12d2886f4e3827908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:33:be:e3:13:d3:af:f0:e9:6e:75:4a:f9:
9e:9e:86:59:7e:5b:bd:42:dc:19:73:d6:2f:91:90:
4f:ab:31:e0:dc:83:39:f0:d7:50:46:5d:89:06:cd:
09:50:2e:da:12:33:2e:75:4a:c1:66:6a:47:ff:3a:
e4:bd:d8:58:aa:17:29:7f:ec:4b:6d:7c:9c:67:c5:
ac:13:de:5f:ac:3e:4e:5a:f3:6b:12:b9:1a:cc:a5:
2e:5b:79:c3:6e:bb:7c:c6:00:57:91:64:6a:4b:de:
7c:6d:a7:cd:c5:a0:5a:12:88:1d:d8:27:46:f3:98:
e1:0e:93:c8:01:32:0f:59:0c:a2:31:67:87:4d:bd:
e9:48:51:7a:a3:27:c6:b3:89:fc:83:f3:e7:b2:c6:
c2:36:f4:0e:3a:57:9f:87:4a:bd:e9:fd:ee:df:62:
1f:a1:3c:a2:af:2c:40:31:98:2a:4e:a7:69:0e:01:
13:f4:97:63:04:e8:94:d8:7c:f9:9f:76:37:64:d7:
06:93:bf:f3:88:8e:cc:ff:98:e6:15:31:0d:a2:48:
ba:9e:91:74:9f:58:7d:9e:65:f0:91:b3:78:e5:9d:
47:91:eb:71:3e:bd:84:1e:f6:7a:b2:10:3a:dd:0f:
a0:35:b4:0e:ac:65:18:3a:27:05:4a:e1:d1:5e:ed:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:12:4F:F6:97:B6:BF:B6:64:BA:F1:2D:28:86:F4:E3:82:79:08
X509v3 Authority Key Identifier:
keyid:99:7C:34:F1:68:32:CE:D8:98:2C:F0:6F:B5:9A:02:29:84:01:F8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXw08WgyztiYLPBvtZoCKYQB-No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9a86d2-4dd5-40f0-a622-318b0e996ad1/1/mXw08WgyztiYLPBvtZoCKYQB-No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:de:1d:3b:82:60:4c:e9:f7:81:0f:ac:e9:ae:db:45:e1:2a:
ef:d4:dd:9f:59:a5:9c:b3:38:cb:59:5d:ca:ae:da:0a:6a:c7:
d0:6a:0a:0b:97:13:f9:31:b6:54:60:89:8d:3a:a2:7c:29:44:
b4:6a:d6:be:43:e7:34:c1:ae:1c:c8:ea:ab:90:4a:f6:b2:72:
6c:b3:ff:fe:b3:34:6e:8d:92:3d:cc:81:aa:96:5c:bf:63:bd:
46:7b:fb:8b:55:0c:c7:5a:50:d3:e4:4f:c9:e9:80:18:93:ac:
e5:39:cf:42:c1:ba:1b:b7:22:28:bb:7c:e2:7e:14:b1:13:8c:
09:75:dc:76:3b:44:9f:14:5e:26:a8:9e:94:5e:8a:74:b0:6b:
b3:ff:23:4b:99:02:10:fd:ec:3c:81:29:05:59:c3:02:35:50:
4b:a6:fb:6c:0f:4c:d2:8d:54:b5:98:b0:99:59:ac:7a:36:97:
e9:00:36:a5:80:c9:61:97:f4:34:e6:44:b7:33:5f:94:8b:58:
62:5e:8f:e0:19:f8:13:e3:08:cc:b2:6f:bd:26:9f:a9:05:e7:
aa:96:91:c6:41:d8:f4:ca:0d:fc:3e:68:a8:a3:87:0c:cf:bd:
19:2b:8a:5e:de:41:9e:5f:94:71:9e:87:51:79:41:9e:58:74:
ab:73:dc:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC29+H+wYjpuikxoNQ/iqGLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2MzNGYxNjgzMmNlZDg5ODJjZjA2ZmI1OWEwMjI5ODQw
MWY4ZGEwHhcNMjYwOTE5MDAwMTMzWhcNMjYwOTIwMDAwMTMzWjAzMTEwLwYDVQQD
Eyg5YmVhMTI0ZmY2OTdiNmJmYjY2NGJhZjEyZDI4ODZmNGUzODI3OTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBozvuMT06/w6W51SvmenoZZflu9
QtwZc9YvkZBPqzHg3IM58NdQRl2JBs0JUC7aEjMudUrBZmpH/zrkvdhYqhcpf+xL
bXycZ8WsE95frD5OWvNrErkazKUuW3nDbrt8xgBXkWRqS958bafNxaBaEogd2CdG
85jhDpPIATIPWQyiMWeHTb3pSFF6oyfGs4n8g/PnssbCNvQOOlefh0q96f3u32If
oTyiryxAMZgqTqdpDgET9JdjBOiU2Hz5n3Y3ZNcGk7/ziI7M/5jmFTENoki6npF0
n1h9nmXwkbN45Z1HketxPr2EHvZ6shA63Q+gNbQOrGUYOicFSuHRXu0T5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvqEk/2l7a/tmS68S0ohvTjgnkIMB8GA1UdIwQY
MBaAFJl8NPFoMs7YmCzwb7WaAimEAfjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVh3MDhXZ3l6dGlZTFBCdnRab0NLWVFCLU5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjIt
MzE4YjBlOTk2YWQxLzEvbVh3MDhXZ3l6dGlZTFBCdnRab0NLWVFCLU5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS85YTg2ZDItNGRkNS00MGYwLWE2MjItMzE4YjBlOTk2YWQx
LzEvbVh3MDhXZ3l6dGlZTFBCdnRab0NLWVFCLU5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn94dO4Jg
TOn3gQ+s6a7bReEq79Tdn1mlnLM4y1ldyq7aCmrH0GoKC5cT+TG2VGCJjTqifClE
tGrWvkPnNMGuHMjqq5BK9rJybLP//rM0bo2SPcyBqpZcv2O9Rnv7i1UMx1pQ0+RP
yemAGJOs5TnPQsG6G7ciKLt84n4UsROMCXXcdjtEnxReJqielF6KdLBrs/8jS5kC
EP3sPIEpBVnDAjVQS6b7bA9M0o1UtZiwmVmsejaX6QA2pYDJYZf0NOZEtzNflItY
Yl6P4Bn4E+MIzLJvvSafqQXnqpaRxkHY9MoN/D5oqKOHDM+9GSuKXt5Bnl+UcZ6H
UXlBnlh0q3PcQg==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:13:29 2026 by rpki-client