Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: KU0WRV+qEwQeuvU5jPKKvqBbrGwxP7CiOO/NwQfJCpY=
Subject key identifier: 9B:FF:32:40:74:08:76:08:44:AC:B3:21:99:FB:85:5F:EA:24:A9:97
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 01A06F1594C2B6EBD8CB36A5A83A718606B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 09E5
Signing time: Sat 05 Sep 2026 01:01:20 +0000
Manifest this update: Sat 05 Sep 2026 01:01:20 +0000
Manifest next update: Sun 06 Sep 2026 01:01:20 +0000
Files and hashes: 1: E907k5QYJtLiwC_jK3iFvXI9RdI.roa (hash: snQqBx0r+DlkIlsrsM46ddsGDow3XlKtABIHB2rzqdc=)
2: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: woY+hdqtD5CGwA1NvGJhYsOf/yw4jXERNJ69YXbvQ6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:94:c2:b6:eb:d8:cb:36:a5:a8:3a:71:86:06:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Sep 5 01:01:20 2026 GMT
Not After : Sep 6 01:01:20 2026 GMT
Subject: CN=9bff32407408760844acb32199fb855fea24a997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:4c:cb:f1:e2:0f:4f:36:2c:e7:58:30:1b:
23:ad:be:c1:b6:07:85:c4:cb:26:f2:e4:48:70:a5:
52:ab:3e:fa:fa:b0:8a:fb:2f:60:7f:9b:72:59:66:
70:57:91:65:75:a0:9f:83:b1:98:c9:c2:80:15:7f:
a2:7a:a2:49:10:52:1f:e2:53:ef:d2:3a:43:01:17:
61:53:9c:f4:c2:20:0d:18:86:8f:84:18:bd:13:a7:
50:1c:8e:d3:18:28:be:fe:97:e5:43:af:c0:bd:c7:
18:e8:c6:02:c9:ba:5f:07:91:51:ab:2e:d7:a3:b3:
9b:8a:c7:e0:44:8c:aa:ad:b9:f5:95:71:25:14:76:
b3:fa:fe:93:7f:1f:9b:35:f8:f0:03:da:8c:d2:6a:
d3:4d:29:c0:de:a1:d7:08:dd:a6:9b:e5:22:72:97:
5e:84:4a:60:08:0a:ab:01:bb:15:60:d2:52:8b:cd:
17:a1:ec:92:47:be:9f:25:9c:cb:23:61:fe:63:87:
56:92:35:cb:ed:56:32:cc:90:06:a5:0c:d5:6a:fd:
f3:e1:f1:26:e4:b1:82:66:c1:f0:53:1b:19:ac:31:
4b:49:db:27:ac:00:07:59:81:4e:1e:11:14:af:c1:
c6:4c:eb:a5:dc:31:96:5c:d5:6d:6e:b8:ca:29:60:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:FF:32:40:74:08:76:08:44:AC:B3:21:99:FB:85:5F:EA:24:A9:97
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e3:89:ba:12:5e:aa:30:50:2f:6e:70:46:92:5f:e2:2e:05:
e1:1d:68:59:27:59:53:fa:bb:3e:31:93:c5:79:aa:2d:4d:58:
41:cc:9f:86:9a:c5:59:96:d1:30:dc:ef:af:b8:b4:ce:fb:2e:
ab:3d:11:3b:53:6a:b0:9a:03:c1:28:e7:0d:f1:1d:26:fc:fa:
1d:7c:13:89:ba:24:35:94:81:a6:dc:a9:a4:7e:23:c8:aa:01:
5a:b8:0d:5b:2a:66:84:5e:6e:d5:a0:57:d9:7c:da:fc:3e:1a:
25:db:77:b4:1e:48:79:1b:b7:9b:e8:c0:1b:78:13:77:ed:b9:
17:cf:aa:d0:dd:6e:bf:f3:25:9e:82:b2:31:9e:a8:48:dc:b7:
05:28:1b:5e:7f:36:73:6b:38:89:35:8b:e7:a5:3c:42:96:e4:
cf:12:81:7a:d1:a0:ad:95:93:36:ca:77:26:c8:f7:79:b5:ed:
95:bb:87:d8:57:95:b4:41:81:25:15:ed:95:7b:12:50:b8:b4:
5b:5d:02:0a:0d:5f:70:ea:4a:06:93:40:21:e0:f6:dd:2f:26:
db:65:e4:fe:04:59:6f:90:57:20:98:6a:82:9a:a2:97:de:8d:
14:3f:71:67:c5:fb:e1:e7:a7:a4:72:d4:1b:65:c7:9a:4d:a3:
9e:8b:8b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvFZTCtuvYyzalqDpxhga3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmMzM2Q1YmE1ODUyMzRjY2NlZjhhNTdhZDg2Y2ExZWFm
YzRhYTIwHhcNMjYwOTA1MDEwMTIwWhcNMjYwOTA2MDEwMTIwWjAzMTEwLwYDVQQD
Eyg5YmZmMzI0MDc0MDg3NjA4NDRhY2IzMjE5OWZiODU1ZmVhMjRhOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvBMy/HiD082LOdYMBsjrb7BtgeF
xMsm8uRIcKVSqz76+rCK+y9gf5tyWWZwV5FldaCfg7GYycKAFX+ieqJJEFIf4lPv
0jpDARdhU5z0wiANGIaPhBi9E6dQHI7TGCi+/pflQ6/AvccY6MYCybpfB5FRqy7X
o7ObisfgRIyqrbn1lXElFHaz+v6Tfx+bNfjwA9qM0mrTTSnA3qHXCN2mm+Uicpde
hEpgCAqrAbsVYNJSi80XoeySR76fJZzLI2H+Y4dWkjXL7VYyzJAGpQzVav3z4fEm
5LGCZsHwUxsZrDFLSdsnrAAHWYFOHhEUr8HGTOul3DGWXNVtbrjKKWAsRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJv/MkB0CHYIRKyzIZn7hV/qJKmXMB8GA1UdIwQY
MBaAFK68M9W6WFI0zM74pXrYbKHq/EqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmIt
OTZhNWI1ZGFkNjcxLzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iNjc1NTEtMzVlMy00MmYxLTkxMmItOTZhNWI1ZGFkNjcx
LzEvcnJ3ejFicFlValRNenZpbGV0aHNvZXI4U3FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaOOJuhJe
qjBQL25wRpJf4i4F4R1oWSdZU/q7PjGTxXmqLU1YQcyfhprFWZbRMNzvr7i0zvsu
qz0RO1NqsJoDwSjnDfEdJvz6HXwTibokNZSBptyppH4jyKoBWrgNWypmhF5u1aBX
2Xza/D4aJdt3tB5IeRu3m+jAG3gTd+25F8+q0N1uv/MlnoKyMZ6oSNy3BSgbXn82
c2s4iTWL56U8QpbkzxKBetGgrZWTNsp3Jsj3ebXtlbuH2FeVtEGBJRXtlXsSULi0
W10CCg1fcOpKBpNAIeD23S8m22Xk/gRZb5BXIJhqgpqil96NFD9xZ8X74eenpHLU
G2XHmk2jnouL4Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:51:28 2026 by rpki-client