Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: tpn+dvKfvwyfVYlurhzL7GYBGiO3w8+wKs5hjqhh4rI=
Subject key identifier: 2B:A1:EF:78:DF:5D:7B:B4:4C:E9:EF:AD:BE:1E:9F:4E:28:0C:87:AD
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 019DCD875068EAC0F6C797813F07984D847D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0881
Signing time: Mon 27 Apr 2026 06:01:30 +0000
Manifest this update: Mon 27 Apr 2026 06:01:30 +0000
Manifest next update: Tue 28 Apr 2026 06:01:30 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
6: EXs9LISjCQhWAd2HiIWm-im5__w.roa (hash: n4sN98ePnVDPSJNxRYiTwCAYAV7AFkIT151+9zv8WsM=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: fEobU2P4praWdoPqvn72e4SukptEat1s7ngRYXIqc3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:50:68:ea:c0:f6:c7:97:81:3f:07:98:4d:84:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Apr 27 06:01:30 2026 GMT
Not After : Apr 28 06:01:30 2026 GMT
Subject: CN=2ba1ef78df5d7bb44ce9efadbe1e9f4e280c87ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:aa:87:03:3e:18:f8:8c:89:52:30:12:b6:
de:b8:a4:e3:1c:5e:3f:16:63:84:6d:6e:f0:55:a2:
cd:fb:a8:b9:64:a4:db:d5:c2:c7:d0:e0:25:82:95:
97:00:b6:a8:52:75:28:56:f2:39:bc:c6:1f:9b:e7:
a6:d6:bf:1b:df:e6:0a:d8:a0:5a:73:29:1b:37:1d:
61:7d:33:9e:a3:b5:f6:de:96:7c:1d:0d:a8:a5:90:
38:29:0d:54:d8:88:07:b4:fe:03:23:c7:79:ed:3b:
d8:f8:67:07:2b:01:e2:7b:be:39:5d:dc:be:98:52:
47:fa:30:b8:0d:0c:00:e8:98:b6:f4:bd:23:fb:3b:
fa:fe:5c:0f:7d:5d:37:b8:0b:7f:b4:45:31:5e:5a:
b8:79:d6:9f:7f:f6:db:1b:fd:f5:b7:8f:b4:79:ae:
f8:fe:5a:7e:d9:26:09:a8:73:59:60:c6:b3:cf:cc:
da:10:f1:15:fa:87:c3:db:55:f9:22:52:09:b1:02:
01:d9:45:ec:73:a7:ae:ac:50:26:b6:8b:5b:a7:d9:
44:49:38:63:43:be:5b:7a:85:3e:d2:d8:af:28:22:
c8:17:ef:77:0c:8f:71:d2:f7:de:f3:99:29:e6:09:
bc:e0:ee:74:88:1c:f9:bb:d6:a7:6e:8e:28:a6:65:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A1:EF:78:DF:5D:7B:B4:4C:E9:EF:AD:BE:1E:9F:4E:28:0C:87:AD
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:4d:2f:8a:9d:a0:1c:d5:fe:fe:ce:f1:38:26:53:c7:28:
57:ba:46:e4:07:14:9b:ad:f9:5a:67:50:ef:f0:66:b5:cc:fe:
28:4c:92:2a:15:16:e6:d5:ad:8a:dd:29:76:4f:76:0b:3f:da:
31:e5:2e:d7:1d:a8:fa:75:df:20:08:c9:7a:0a:5a:36:14:7d:
0b:77:61:fc:57:a1:d1:bf:cf:46:41:a6:3d:77:92:0d:a4:b7:
85:73:fc:bb:65:87:b8:68:42:ef:6b:4b:1e:08:06:86:2c:d0:
5d:4b:0a:4c:b9:8b:13:5f:4a:e6:09:e1:e1:27:7d:a3:3b:b9:
a0:07:8d:cf:bf:7f:13:1b:0b:49:f5:b3:57:8c:43:d8:08:45:
e1:fe:b4:89:25:43:a6:a2:7f:79:89:3c:2b:ce:14:5a:ff:d3:
ee:2d:a9:05:51:72:f3:61:0c:21:3f:62:1b:93:04:12:57:01:
be:ec:1e:1c:66:94:92:5a:1f:e2:cf:b2:37:cd:11:07:e8:f5:
5c:b4:bd:cb:43:26:d1:44:85:2a:d9:5c:5f:de:12:64:de:20:
9e:77:66:77:24:dc:3a:f7:ff:4c:46:23:29:30:e3:86:9a:08:
a7:ac:d0:19:af:88:8e:1d:31:0f:6b:90:ca:01:28:ba:98:52:
75:92:34:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3Nh1Bo6sD2x5eBPweYTYR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjYwNDI3MDYwMTMwWhcNMjYwNDI4MDYwMTMwWjAzMTEwLwYDVQQD
EygyYmExZWY3OGRmNWQ3YmI0NGNlOWVmYWRiZTFlOWY0ZTI4MGM4N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GGqhwM+GPiMiVIwErbeuKTjHF4/
FmOEbW7wVaLN+6i5ZKTb1cLH0OAlgpWXALaoUnUoVvI5vMYfm+em1r8b3+YK2KBa
cykbNx1hfTOeo7X23pZ8HQ2opZA4KQ1U2IgHtP4DI8d57TvY+GcHKwHie745Xdy+
mFJH+jC4DQwA6Ji29L0j+zv6/lwPfV03uAt/tEUxXlq4edaff/bbG/31t4+0ea74
/lp+2SYJqHNZYMazz8zaEPEV+ofD21X5IlIJsQIB2UXsc6eurFAmtotbp9lESThj
Q75beoU+0tivKCLIF+93DI9x0vfe85kp5gm84O50iBz5u9anbo4opmV26wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuh73jfXXu0TOnvrb4en04oDIetMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2dNL4qd
oBzV/v7O8TgmU8coV7pG5AcUm635WmdQ7/Bmtcz+KEySKhUW5tWtit0pdk92Cz/a
MeUu1x2o+nXfIAjJegpaNhR9C3dh/Feh0b/PRkGmPXeSDaS3hXP8u2WHuGhC72tL
HggGhizQXUsKTLmLE19K5gnh4Sd9ozu5oAeNz79/ExsLSfWzV4xD2AhF4f60iSVD
pqJ/eYk8K84UWv/T7i2pBVFy82EMIT9iG5MEElcBvuweHGaUklof4s+yN80RB+j1
XLS9y0Mm0USFKtlcX94SZN4gnndmdyTcOvf/TEYjKTDjhpoIp6zQGa+Ijh0xD2uQ
ygEouphSdZI0nw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:07 2026 by rpki-client