Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: /+2jy2Pr6qPPAvThuG8aNLzCUmfSB0lCPW0G4iQKxqM=
Subject key identifier: D1:DD:40:11:A3:DA:E1:A6:E5:CC:64:04:03:AE:3C:A7:B0:F1:47:09
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 01A0E32BD7A86E71A438ACCF258B06FF4673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0F06
Signing time: Sun 27 Sep 2026 14:01:36 +0000
Manifest this update: Sun 27 Sep 2026 14:01:36 +0000
Manifest next update: Mon 28 Sep 2026 14:01:36 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: VD4oUq7cQyLm2JVkQmsRP0YyO0I6m3rMpm9ehoAh1YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:d7:a8:6e:71:a4:38:ac:cf:25:8b:06:ff:46:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Sep 27 14:01:36 2026 GMT
Not After : Sep 28 14:01:36 2026 GMT
Subject: CN=d1dd4011a3dae1a6e5cc640403ae3ca7b0f14709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:1e:c6:cc:1f:29:7d:af:11:6b:63:91:b8:
aa:4c:49:2a:f7:73:a1:4d:4a:16:0d:20:33:a3:b9:
03:43:77:60:a5:6e:de:aa:e8:85:39:0e:e0:0b:8f:
b4:7a:0f:26:7c:c7:6a:49:b6:ea:3f:b4:3e:9d:ed:
35:66:83:b6:a4:d8:08:78:e5:99:44:74:2f:fe:be:
ba:0d:7b:95:bc:df:b6:e0:70:d0:d1:03:b6:2b:ac:
52:6e:a9:6f:85:78:98:dc:7c:d6:46:c4:51:63:51:
a6:4a:73:00:28:99:a2:09:db:93:fa:03:50:22:5a:
e6:e9:4f:3d:8c:a3:92:02:1e:71:6c:a4:75:43:b8:
8d:10:6d:e4:86:69:89:57:17:b3:ac:23:6a:99:43:
49:f0:64:3d:b3:49:b9:21:36:fe:29:da:90:78:9c:
42:71:f6:95:08:df:6c:0c:14:98:97:9e:4c:37:6f:
f1:51:5d:c2:18:9f:58:67:81:bb:20:2e:e6:6c:e3:
00:ec:7f:68:e0:d3:b5:9b:16:78:17:dc:56:9e:7a:
2c:6d:25:2c:eb:77:36:0f:82:a4:68:c9:77:0b:75:
06:66:38:c0:b3:fc:06:98:6f:f0:25:ca:3b:e3:10:
34:e3:50:58:3e:e7:7c:ad:4f:a0:5a:66:6b:96:d3:
85:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:40:11:A3:DA:E1:A6:E5:CC:64:04:03:AE:3C:A7:B0:F1:47:09
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:50:25:60:12:4d:99:ae:80:c8:d1:6e:1f:ec:2e:ff:c9:39:
ad:86:67:0f:2c:49:65:4a:43:f0:77:f2:a8:9a:dc:7e:6e:c2:
fe:01:dd:ba:3e:18:96:5d:18:6c:e5:2c:9e:66:fb:f6:a3:b8:
67:a7:0d:0f:25:88:96:4d:85:a4:d8:56:3f:2d:8d:ac:56:6f:
1a:7f:55:68:ce:5e:85:bc:6c:39:bd:09:bc:bb:ef:61:26:3f:
6b:e8:5c:15:a5:98:8c:04:39:7f:e4:88:fa:71:24:58:3f:01:
8b:07:3d:f2:87:06:f7:28:ab:8f:42:92:0b:cf:22:75:34:05:
6e:7d:f8:cd:05:ad:62:95:ea:06:0c:12:78:4b:bd:b7:61:16:
04:40:ec:02:c3:e6:79:c0:6d:d1:d0:d1:90:76:9b:da:10:0e:
a7:85:30:02:3a:78:f3:8a:e0:65:f9:a0:d0:8f:3f:8c:77:49:
0a:2b:0e:26:af:cb:bd:a3:83:1b:e3:bc:88:01:21:c3:78:be:
1d:5b:08:09:84:72:0b:87:3b:c8:f0:01:de:1f:d1:bd:f5:9e:
0a:8b:e6:36:4c:66:94:58:01:6e:c7:67:ae:a5:6d:7f:82:76:
ad:ce:67:c4:1a:fe:50:f4:2a:f9:fb:98:9f:f5:d1:3b:e2:9d:
0c:e2:40:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK9eobnGkOKzPJYsG/0ZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh
MDM1YTMwHhcNMjYwOTI3MTQwMTM2WhcNMjYwOTI4MTQwMTM2WjAzMTEwLwYDVQQD
EyhkMWRkNDAxMWEzZGFlMWE2ZTVjYzY0MDQwM2FlM2NhN2IwZjE0NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo78exswfKX2vEWtjkbiqTEkq93Oh
TUoWDSAzo7kDQ3dgpW7equiFOQ7gC4+0eg8mfMdqSbbqP7Q+ne01ZoO2pNgIeOWZ
RHQv/r66DXuVvN+24HDQ0QO2K6xSbqlvhXiY3HzWRsRRY1GmSnMAKJmiCduT+gNQ
Ilrm6U89jKOSAh5xbKR1Q7iNEG3khmmJVxezrCNqmUNJ8GQ9s0m5ITb+KdqQeJxC
cfaVCN9sDBSYl55MN2/xUV3CGJ9YZ4G7IC7mbOMA7H9o4NO1mxZ4F9xWnnosbSUs
63c2D4KkaMl3C3UGZjjAs/wGmG/wJco74xA041BYPud8rU+gWmZrltOFTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHdQBGj2uGm5cxkBAOuPKew8UcJMB8GA1UdIwQY
MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt
NzAzYjZiNzBhN2VjLzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj
LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATVAlYBJN
ma6AyNFuH+wu/8k5rYZnDyxJZUpD8HfyqJrcfm7C/gHduj4Yll0YbOUsnmb79qO4
Z6cNDyWIlk2FpNhWPy2NrFZvGn9VaM5ehbxsOb0JvLvvYSY/a+hcFaWYjAQ5f+SI
+nEkWD8Biwc98ocG9yirj0KSC88idTQFbn34zQWtYpXqBgwSeEu9t2EWBEDsAsPm
ecBt0dDRkHab2hAOp4UwAjp484rgZfmg0I8/jHdJCisOJq/LvaODG+O8iAEhw3i+
HVsICYRyC4c7yPAB3h/RvfWeCovmNkxmlFgBbsdnrqVtf4J2rc5nxBr+UPQq+fuY
n/XRO+KdDOJAXw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:11:56 2026 by rpki-client