Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: 8PmTueehBhY4AIOG/XZqduSWEXMEbqdz0Ulm4StgOIU=
Subject key identifier: C4:10:12:97:A4:B6:05:83:90:53:73:B9:93:7E:68:53:15:5C:99:A2
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 01A08B31307D173FDF4882EBFA430D3FAA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 19DB
Signing time: Thu 10 Sep 2026 12:00:51 +0000
Manifest this update: Thu 10 Sep 2026 12:00:51 +0000
Manifest next update: Fri 11 Sep 2026 12:00:51 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: 9wqKV8xyIV+k14Hk07LLiBFDTG1Be8Z030exOW3ezWg=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:30:7d:17:3f:df:48:82:eb:fa:43:0d:3f:aa:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Sep 10 12:00:51 2026 GMT
Not After : Sep 11 12:00:51 2026 GMT
Subject: CN=c4101297a4b60583905373b9937e6853155c99a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:62:12:5f:bb:f2:7e:11:b6:3b:3f:82:df:
ab:b0:a6:1d:82:1c:e2:7c:59:ad:fb:2f:a2:e5:f4:
89:38:1e:0f:f6:b0:29:58:fd:9b:a1:1c:6c:72:33:
7f:72:ba:60:94:ac:83:3f:8b:6c:38:e7:28:6c:cc:
ba:76:f3:f4:fb:ba:5f:fa:19:7b:67:8f:61:c9:27:
d9:5e:30:ad:d7:7b:20:61:21:89:14:0a:e8:65:bf:
a2:aa:27:7f:06:6e:cd:f9:62:b2:1b:49:37:5b:a1:
ad:1c:72:eb:77:5b:a9:bd:52:b0:d0:a9:67:17:b7:
e2:b0:10:3b:a1:99:10:17:dd:d3:8c:86:be:1f:cc:
92:da:34:7f:37:d8:5f:be:c4:34:7c:47:b1:18:74:
73:65:22:69:bd:f0:62:10:11:df:4e:af:dd:f9:1d:
c9:1d:f7:b9:22:33:29:98:60:62:44:86:f9:7f:b3:
3e:4e:d6:37:db:9e:c3:c8:be:d6:08:c8:e2:93:7e:
73:3f:6b:de:78:6c:23:05:ea:ee:45:53:c8:12:b1:
55:31:bf:65:23:c1:e0:5d:6a:56:c8:78:8e:52:04:
94:49:9d:dd:01:3b:bf:0f:f7:85:b8:3f:7b:2f:75:
00:70:db:9e:63:94:50:83:f0:2d:70:da:a3:db:89:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:10:12:97:A4:B6:05:83:90:53:73:B9:93:7E:68:53:15:5C:99:A2
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:63:d1:11:e7:c0:31:ae:2f:a8:ad:55:2f:54:97:8e:b1:bb:
55:61:c6:5b:62:53:d0:33:ef:90:96:28:57:bd:4c:83:b6:22:
75:7c:9a:f8:8c:e9:9f:35:e9:1f:3c:6f:4d:59:77:1b:0f:02:
e3:61:4e:f6:18:72:d6:29:4a:1b:f8:ac:e1:14:d3:5b:72:31:
72:99:c9:3f:56:30:10:26:64:ec:37:d4:1e:b4:7d:15:dd:cc:
52:41:74:59:39:f3:cd:47:c8:ca:83:17:8e:8c:ce:b2:bb:43:
50:99:e0:7b:fc:ba:46:36:ee:9a:67:77:5d:8d:ae:77:61:30:
b4:df:80:59:f5:69:4b:1c:d3:e9:27:5c:be:71:9d:83:ea:15:
e6:43:dd:0f:af:a5:c4:48:72:c8:57:08:05:ab:b4:92:fb:4a:
c0:01:fc:04:ae:a7:b2:f5:8b:27:50:50:0f:57:e1:3f:dd:58:
98:81:fd:2f:ed:7a:85:68:5d:54:4d:d2:67:b6:1b:ed:c6:25:
2e:b6:3d:80:05:1d:cc:4a:97:29:23:6f:e9:b7:08:2d:7f:69:
0e:de:9c:bf:61:4a:5d:2f:b0:e0:48:87:9f:4a:15:a4:d9:f0:
ed:c9:a9:9c:85:eb:70:ea:08:63:f7:1c:17:d6:34:6b:22:f0:
d8:c8:ca:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMTB9Fz/fSILr+kMNP6o5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YzdmOGU5MWI4MWZlNjQ4NzMwN2M1MjI2ZWIwNDRmOTIz
OTZjZWEwHhcNMjYwOTEwMTIwMDUxWhcNMjYwOTExMTIwMDUxWjAzMTEwLwYDVQQD
EyhjNDEwMTI5N2E0YjYwNTgzOTA1MzczYjk5MzdlNjg1MzE1NWM5OWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLFiEl+78n4Rtjs/gt+rsKYdghzi
fFmt+y+i5fSJOB4P9rApWP2boRxscjN/crpglKyDP4tsOOcobMy6dvP0+7pf+hl7
Z49hySfZXjCt13sgYSGJFAroZb+iqid/Bm7N+WKyG0k3W6GtHHLrd1upvVKw0Kln
F7fisBA7oZkQF93TjIa+H8yS2jR/N9hfvsQ0fEexGHRzZSJpvfBiEBHfTq/d+R3J
Hfe5IjMpmGBiRIb5f7M+TtY3257DyL7WCMjik35zP2veeGwjBeruRVPIErFVMb9l
I8HgXWpWyHiOUgSUSZ3dATu/D/eFuD97L3UAcNueY5RQg/AtcNqj24n2ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQQEpektgWDkFNzuZN+aFMVXJmiMB8GA1UdIwQY
MBaAFHTH+Okbgf5khzB8UibrBE+SOWzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEt
OGI2NGY3YzNhNzZlLzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEtOGI2NGY3YzNhNzZl
LzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGPREefA
Ma4vqK1VL1SXjrG7VWHGW2JT0DPvkJYoV71Mg7YidXya+IzpnzXpHzxvTVl3Gw8C
42FO9hhy1ilKG/is4RTTW3IxcpnJP1YwECZk7DfUHrR9Fd3MUkF0WTnzzUfIyoMX
jozOsrtDUJnge/y6Rjbummd3XY2ud2EwtN+AWfVpSxzT6SdcvnGdg+oV5kPdD6+l
xEhyyFcIBau0kvtKwAH8BK6nsvWLJ1BQD1fhP91YmIH9L+16hWhdVE3SZ7Yb7cYl
LrY9gAUdzEqXKSNv6bcILX9pDt6cv2FKXS+w4EiHn0oVpNnw7cmpnIXrcOoIY/cc
F9Y0ayLw2MjKzg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:26 2026 by rpki-client