Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: ly7C8yVk/hD9jKkOFKK6uyb/glUdn0oqBHQ0t9iA0HQ=
Subject key identifier: B4:71:9A:F6:2B:9A:6C:8A:BD:FD:59:8F:31:64:43:7F:52:E5:0A:4C
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01A08A1E29F252FA97BC9125A445CE477DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 09EC
Signing time: Thu 10 Sep 2026 07:00:27 +0000
Manifest this update: Thu 10 Sep 2026 07:00:27 +0000
Manifest next update: Fri 11 Sep 2026 07:00:27 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: 8tSEwUH0JKaj9-b78A6P1HNWucA.roa (hash: /2i4x0ciVTUv5ry6RgoyWYRvzmYenJ7v0fQyaaOhTzk=)
6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: YgznJ6MinwwveTyOElDO3HS9FyIFCkMo7tn10RMLcw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:29:f2:52:fa:97:bc:91:25:a4:45:ce:47:7d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Sep 10 07:00:27 2026 GMT
Not After : Sep 11 07:00:27 2026 GMT
Subject: CN=b4719af62b9a6c8abdfd598f3164437f52e50a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:d2:69:bf:5f:cb:22:45:b2:32:34:54:cc:
97:20:d4:f1:2a:38:d9:f9:77:be:81:39:70:a6:73:
dc:fe:de:72:80:35:66:18:f6:79:bb:86:7c:41:80:
af:94:37:ff:7e:a7:fb:c0:28:73:d3:44:b7:f0:66:
18:d3:94:6e:11:d1:b6:63:54:58:71:85:f3:56:05:
2f:55:da:18:33:32:17:d5:0f:dd:94:33:ec:72:e5:
e1:a6:3c:8b:27:c3:84:e7:3f:b3:a5:3c:fa:bf:e8:
91:b2:cd:65:88:aa:af:1a:64:64:6b:20:b2:5d:63:
25:53:ca:03:3e:73:f4:68:5d:56:f8:7f:18:30:d2:
90:98:fe:f1:53:07:75:26:1d:20:0b:0e:aa:6a:b8:
8d:fa:52:2e:69:20:ae:86:58:bf:64:98:59:90:b8:
c9:65:c2:f8:38:da:ae:61:9f:7b:34:67:59:40:56:
9d:02:71:59:ad:ff:3c:28:c6:82:23:81:1d:ce:bf:
d9:d1:e8:4b:22:a5:82:b4:69:7b:68:dd:e2:0e:63:
b9:a1:9a:b1:e2:e5:e4:1a:3c:f5:83:cf:a4:0f:bf:
ff:00:a8:27:fb:4b:15:b6:a9:11:6c:48:5f:b5:c4:
35:12:1a:71:f2:31:2a:46:b7:5a:27:45:47:a8:bf:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:71:9A:F6:2B:9A:6C:8A:BD:FD:59:8F:31:64:43:7F:52:E5:0A:4C
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7a:db:04:b3:af:8b:18:27:c1:83:82:e6:c7:cb:a4:32:73:
65:15:5f:10:f3:34:f9:d8:69:0e:71:f7:30:0a:2b:34:72:ed:
72:e0:00:70:d4:d4:52:45:50:af:ba:fa:e8:67:11:dd:36:75:
87:46:e4:83:d7:cd:7a:83:fc:40:24:a8:1b:55:62:8a:8b:fb:
94:3f:eb:28:e0:e3:43:d8:8c:e4:c2:68:e7:4a:b8:ed:cd:c5:
ba:45:63:2c:6e:ce:51:e8:b7:e0:47:cd:2e:9f:32:41:0b:8e:
2a:17:fd:db:f2:54:9e:15:c4:ba:5e:4c:4f:0c:8e:c9:fa:2b:
39:a7:e7:e2:5e:dd:bc:de:ed:51:6c:9f:3f:5c:8f:1a:f0:89:
6c:6f:a1:6b:62:5f:d5:db:87:2e:1a:0a:34:f3:3c:03:d4:8b:
9a:76:fb:a4:c1:91:b6:eb:90:bb:cc:de:34:39:a5:57:04:61:
fa:32:4e:a4:49:cd:0a:0f:bb:14:6d:a2:fd:5a:c9:04:76:99:
c2:03:57:b4:c4:e8:e2:41:e9:b6:e8:f1:3f:ff:14:c1:e4:c5:
9e:ff:b0:bc:e9:29:c2:13:9e:f4:0c:b0:e0:1c:15:84:96:c7:
dc:e7:61:39:50:0c:fa:9c:39:d3:ca:a6:9d:5b:57:a6:05:11:
7b:30:14:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKHinyUvqXvJElpEXOR33kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw
ZTY5MWQwHhcNMjYwOTEwMDcwMDI3WhcNMjYwOTExMDcwMDI3WjAzMTEwLwYDVQQD
EyhiNDcxOWFmNjJiOWE2YzhhYmRmZDU5OGYzMTY0NDM3ZjUyZTUwYTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsDSab9fyyJFsjI0VMyXINTxKjjZ
+Xe+gTlwpnPc/t5ygDVmGPZ5u4Z8QYCvlDf/fqf7wChz00S38GYY05RuEdG2Y1RY
cYXzVgUvVdoYMzIX1Q/dlDPscuXhpjyLJ8OE5z+zpTz6v+iRss1liKqvGmRkayCy
XWMlU8oDPnP0aF1W+H8YMNKQmP7xUwd1Jh0gCw6qariN+lIuaSCuhli/ZJhZkLjJ
ZcL4ONquYZ97NGdZQFadAnFZrf88KMaCI4Edzr/Z0ehLIqWCtGl7aN3iDmO5oZqx
4uXkGjz1g8+kD7//AKgn+0sVtqkRbEhftcQ1Ehpx8jEqRrdaJ0VHqL9k0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRxmvYrmmyKvf1ZjzFkQ39S5QpMMB8GA1UdIwQY
MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt
MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk
LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHrbBLOv
ixgnwYOC5sfLpDJzZRVfEPM0+dhpDnH3MAorNHLtcuAAcNTUUkVQr7r66GcR3TZ1
h0bkg9fNeoP8QCSoG1Viiov7lD/rKODjQ9iM5MJo50q47c3FukVjLG7OUei34EfN
Lp8yQQuOKhf92/JUnhXEul5MTwyOyforOafn4l7dvN7tUWyfP1yPGvCJbG+ha2Jf
1duHLhoKNPM8A9SLmnb7pMGRtuuQu8zeNDmlVwRh+jJOpEnNCg+7FG2i/VrJBHaZ
wgNXtMTo4kHptujxP/8UweTFnv+wvOkpwhOe9Ayw4BwVhJbH3OdhOVAM+pw508qm
nVtXpgURezAUkw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:32:49 2026 by rpki-client