Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
File: 9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json)
Hash identifier: FzxaU5glZIjQCrbaSojw4qzzBqYyBqoY/eiqdH7IEEw=
Subject key identifier: 67:B6:85:BD:3F:CB:A2:A2:33:07:49:51:C0:15:BD:2B:43:91:BE:CB
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 01A1618E0B8160641C0C922864D34AD0B77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
Manifest number: 0132
Signing time: Thu 22 Oct 2026 03:01:01 +0000
Manifest this update: Thu 22 Oct 2026 03:01:01 +0000
Manifest next update: Fri 23 Oct 2026 03:01:01 +0000
Files and hashes: 1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=)
2: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: 6SYyHUojvBtsVRHmN6OwRm6Wrq1K9w1VcqurVr85fTI=)
3: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=)
4: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=)
5: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=)
6: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (hash: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=)
7: cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa (hash: xhs6LS1Q1Mh7UyOa5htlvASV20ak+TW1Eqf9IPtVEL0=)
8: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=)
9: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:8e:0b:81:60:64:1c:0c:92:28:64:d3:4a:d0:b7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Oct 22 03:01:01 2026 GMT
Not After : Oct 23 03:01:01 2026 GMT
Subject: CN=67b685bd3fcba2a233074951c015bd2b4391becb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:f0:10:bc:8d:84:70:fd:f3:d0:61:e4:e0:
20:93:6d:bd:7f:a4:18:84:2d:e8:e3:f4:8d:a8:bf:
b2:06:7b:84:a8:2c:50:9a:be:c6:5a:21:c1:33:b3:
02:75:ad:d8:78:67:5e:8c:68:d7:5a:17:f6:b4:fa:
1c:d9:ee:e7:20:a9:a7:40:c1:1d:be:eb:bb:86:56:
73:d6:c3:58:d5:8f:6d:92:2c:25:06:2c:18:54:73:
70:58:bb:f9:0b:11:47:dd:be:80:3b:33:96:59:62:
da:8f:cc:71:76:4c:df:25:d5:e3:2f:81:f0:15:b2:
b8:15:22:03:2c:b7:fd:98:76:41:66:cc:11:7c:aa:
36:e8:e0:db:76:a6:6c:6e:80:53:f4:b5:22:12:67:
55:38:f9:12:18:82:f7:81:8e:b7:f3:5d:56:f5:c2:
1f:73:30:94:ef:5b:08:f7:9b:2f:4f:df:35:6f:11:
79:78:6b:38:ed:b7:12:c0:e0:59:ef:53:50:c3:94:
09:7f:bd:cb:ed:2f:bb:c8:6b:0e:e5:a4:06:df:6e:
99:05:1b:74:59:11:9b:9d:81:85:6f:ae:a8:a8:ac:
6f:b4:28:9f:45:e0:55:c0:40:91:c7:a9:f3:c2:ee:
85:f4:e0:ae:0e:08:50:5a:2b:57:d2:29:81:0a:1b:
e1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B6:85:BD:3F:CB:A2:A2:33:07:49:51:C0:15:BD:2B:43:91:BE:CB
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:26:4e:30:e7:9e:b3:42:ad:12:3f:1e:d7:8f:05:6f:7a:d8:
6f:81:eb:29:e7:a0:d0:3c:76:69:d9:47:fd:8c:f5:b2:c1:b0:
d5:14:aa:4e:d9:87:f1:35:e3:6a:99:96:47:9b:11:0b:e5:2d:
76:20:93:10:ff:25:99:12:68:19:e3:0d:e8:a3:9b:df:f5:0e:
ac:6b:e1:6e:af:0f:9c:4a:af:ef:f2:e0:7c:b2:2c:41:3a:8a:
81:61:bf:70:21:8e:a2:e4:c9:5d:64:32:b6:b9:82:fa:2b:50:
68:2f:90:29:de:71:31:91:ae:2e:b0:65:97:ff:ed:34:ce:a7:
f5:10:a2:18:ed:14:7a:a1:c0:c7:06:33:0c:19:ee:ef:d5:1f:
37:62:bf:82:48:8b:ca:ba:55:6e:e1:90:e2:4d:8c:29:bf:77:
dc:aa:09:09:27:cc:92:4b:44:98:3c:ff:c6:77:e6:66:12:ef:
1e:63:42:6d:0d:b1:96:52:76:a2:80:bc:d8:97:6f:87:42:c4:
49:2a:49:19:0b:1c:17:18:13:b5:db:a9:cc:99:e1:e8:c1:90:
7d:76:d8:d8:66:48:cf:6e:63:d4:3f:33:93:22:28:49:b3:d2:
c5:c4:31:4b:d3:63:b4:48:55:f6:1b:36:28:b5:02:82:56:10:
e2:4c:41:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFhjguBYGQcDJIoZNNK0Ld8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NGRlMzZjZTY1NDM3MjFmMjdhNjg5M2EzYjNhYjdmZmY5
ZTEyMjEwHhcNMjYxMDIyMDMwMTAxWhcNMjYxMDIzMDMwMTAxWjAzMTEwLwYDVQQD
Eyg2N2I2ODViZDNmY2JhMmEyMzMwNzQ5NTFjMDE1YmQyYjQzOTFiZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9HwELyNhHD989Bh5OAgk229f6QY
hC3o4/SNqL+yBnuEqCxQmr7GWiHBM7MCda3YeGdejGjXWhf2tPoc2e7nIKmnQMEd
vuu7hlZz1sNY1Y9tkiwlBiwYVHNwWLv5CxFH3b6AOzOWWWLaj8xxdkzfJdXjL4Hw
FbK4FSIDLLf9mHZBZswRfKo26ODbdqZsboBT9LUiEmdVOPkSGIL3gY63811W9cIf
czCU71sI95svT981bxF5eGs47bcSwOBZ71NQw5QJf73L7S+7yGsO5aQG326ZBRt0
WRGbnYGFb66oqKxvtCifReBVwECRx6nzwu6F9OCuDghQWitX0imBChvhTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGe2hb0/y6KiMwdJUcAVvStDkb7LMB8GA1UdIwQY
MBaAFPRN42zmVDch8npok6Ozq3//nhIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoyZOMOee
s0KtEj8e148Fb3rYb4HrKeeg0Dx2adlH/Yz1ssGw1RSqTtmH8TXjapmWR5sRC+Ut
diCTEP8lmRJoGeMN6KOb3/UOrGvhbq8PnEqv7/LgfLIsQTqKgWG/cCGOouTJXWQy
trmC+itQaC+QKd5xMZGuLrBll//tNM6n9RCiGO0UeqHAxwYzDBnu79UfN2K/gkiL
yrpVbuGQ4k2MKb933KoJCSfMkktEmDz/xnfmZhLvHmNCbQ2xllJ2ooC82Jdvh0LE
SSpJGQscFxgTtdupzJnh6MGQfXbY2GZIz25j1D8zkyIoSbPSxcQxS9NjtEhV9hs2
KLUCglYQ4kxBGw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:33:48 2026 by rpki-client