Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: u57h7cMhGhujgHW+yiMyzuACZgGH8GByoY2/4d1wx34=
Subject key identifier: 39:70:05:0F:ED:9A:E2:26:DD:64:66:A9:35:32:6C:DC:54:78:D9:45
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01A14C18B62D3DAF81FCD5521569511A1F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 17A0
Signing time: Sat 17 Oct 2026 23:00:50 +0000
Manifest this update: Sat 17 Oct 2026 23:00:50 +0000
Manifest next update: Sun 18 Oct 2026 23:00:50 +0000
Files and hashes: 1: W2yqTamRVKq1-hzTnlQpS09zF94.roa (hash: dOlIM2Q4c3cJnEpwCAfFKPIS65UFCCfTkKQG/Xr+ZGY=)
2: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: IjPQ0s2dgbGdnsoSjfNNuVFayAauZWR1ohzXVtWiOpI=)
3: u5YBErGttrr5_GUXpkR3g3VzJy8.roa (hash: ZE6OlUZtXwmD/J5v/xklkEnBngZZGtjN+4EVyvFW8hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:18:b6:2d:3d:af:81:fc:d5:52:15:69:51:1a:1f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Oct 17 23:00:50 2026 GMT
Not After : Oct 18 23:00:50 2026 GMT
Subject: CN=3970050fed9ae226dd6466a935326cdc5478d945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ce:de:1a:01:f2:86:4b:54:bc:06:4a:49:af:
28:5f:d7:0a:c3:c3:9c:f8:0d:07:50:30:71:e8:8f:
c8:44:97:29:42:ae:89:b1:e3:46:9e:d3:5e:1f:5f:
f0:cb:97:f2:b6:9c:76:85:e0:a4:88:e3:aa:be:ad:
f8:39:8f:2b:ce:45:59:ba:68:01:9e:e8:09:e3:1a:
7d:0e:55:a4:62:88:9e:7f:f2:db:41:a0:40:5a:71:
bb:52:7c:6f:5a:60:3b:bf:30:a4:73:e9:4c:33:1a:
9b:2e:3e:88:8b:39:b8:ed:41:23:3d:f8:e4:31:52:
3d:1b:3b:23:64:09:7e:62:60:76:d9:40:fc:f8:bd:
14:33:fa:6d:b8:4c:59:6e:3b:5b:7d:d2:b0:f2:89:
25:b2:ff:9b:5f:2b:33:35:38:d1:36:f1:eb:21:1f:
f3:f6:0c:00:bb:90:b5:a0:48:28:31:9a:fb:c2:6b:
1c:7c:25:cd:5a:09:e2:27:d8:b6:a4:0d:34:6b:c4:
88:31:03:52:91:46:1a:f1:d3:ba:e8:a9:39:42:c7:
e3:7c:ee:70:e9:73:bc:ae:6f:7b:35:d4:a7:ee:51:
41:cf:55:1a:73:95:0f:33:4c:34:d8:9b:d1:71:7a:
8c:80:47:d7:18:1f:5d:d0:a1:b5:7f:d5:b0:20:da:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:05:0F:ED:9A:E2:26:DD:64:66:A9:35:32:6C:DC:54:78:D9:45
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:08:33:fd:86:89:ae:7b:e3:c3:83:6f:50:ce:ed:ad:27:8b:
21:93:2e:28:6f:09:7b:3f:50:5c:cf:77:ff:c1:f6:16:3c:02:
84:30:34:78:76:26:87:cf:5c:f3:32:98:df:2c:e0:08:2c:50:
29:bc:da:b0:21:4d:93:a2:0c:dc:c8:2f:b8:4b:f9:21:80:49:
49:91:58:dc:58:8b:35:ca:25:e8:c4:0f:bd:27:2e:55:16:66:
42:74:9a:8f:63:02:a0:1f:0d:4c:af:87:8a:98:36:67:47:70:
d0:9d:ef:f2:dc:c3:8c:82:be:f3:02:e2:b5:e7:b7:d5:7f:f7:
a0:f6:63:65:be:d9:9c:c5:26:77:8d:0c:b6:2a:91:ff:a1:e5:
c1:c2:23:b3:a7:09:e7:e4:78:3d:13:b6:03:c6:ac:e8:99:87:
4c:9a:60:28:d3:da:dc:7b:4f:c1:01:a0:31:b1:29:e8:e3:34:
b2:63:87:0f:57:b8:f2:b2:fa:11:2f:70:5b:48:ab:90:00:67:
40:59:a9:42:44:2f:6a:81:13:36:09:b1:70:be:f5:90:d5:d0:
02:14:73:0c:77:dc:7b:a3:2d:2a:f2:c3:fc:20:51:5c:9b:66:
96:c7:53:4d:99:11:62:64:cc:f6:6c:b3:2a:50:a0:d3:d9:46:
61:02:71:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFMGLYtPa+B/NVSFWlRGh8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjYxMDE3MjMwMDUwWhcNMjYxMDE4MjMwMDUwWjAzMTEwLwYDVQQD
EygzOTcwMDUwZmVkOWFlMjI2ZGQ2NDY2YTkzNTMyNmNkYzU0NzhkOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos7eGgHyhktUvAZKSa8oX9cKw8Oc
+A0HUDBx6I/IRJcpQq6JseNGntNeH1/wy5fytpx2heCkiOOqvq34OY8rzkVZumgB
nugJ4xp9DlWkYoief/LbQaBAWnG7UnxvWmA7vzCkc+lMMxqbLj6Iizm47UEjPfjk
MVI9GzsjZAl+YmB22UD8+L0UM/ptuExZbjtbfdKw8oklsv+bXyszNTjRNvHrIR/z
9gwAu5C1oEgoMZr7wmscfCXNWgniJ9i2pA00a8SIMQNSkUYa8dO66Kk5QsfjfO5w
6XO8rm97NdSn7lFBz1Uac5UPM0w02JvRcXqMgEfXGB9d0KG1f9WwINqQyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlwBQ/tmuIm3WRmqTUybNxUeNlFMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQgz/YaJ
rnvjw4NvUM7trSeLIZMuKG8Jez9QXM93/8H2FjwChDA0eHYmh89c8zKY3yzgCCxQ
KbzasCFNk6IM3MgvuEv5IYBJSZFY3FiLNcol6MQPvScuVRZmQnSaj2MCoB8NTK+H
ipg2Z0dw0J3v8tzDjIK+8wLitee31X/3oPZjZb7ZnMUmd40MtiqR/6HlwcIjs6cJ
5+R4PRO2A8as6JmHTJpgKNPa3HtPwQGgMbEp6OM0smOHD1e48rL6ES9wW0irkABn
QFmpQkQvaoETNgmxcL71kNXQAhRzDHfce6MtKvLD/CBRXJtmlsdTTZkRYmTM9myz
KlCg09lGYQJxmw==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:35:41 2026 by rpki-client