Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
File: S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft (raw, json)
Hash identifier: /kAqsn0wmDMLCZxoMWz9BbdpJFK4yPLNyeeWoXHdJEI=
Subject key identifier: F6:2A:6A:5B:8F:55:0E:61:4F:06:A5:50:D3:6F:F2:6D:23:15:6F:30
Authority key identifier: 4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
Certificate issuer: /CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Certificate serial: 01A128E8B0F49F0E9FF92439DDD8AC43FBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
Manifest number: 0113
Signing time: Sun 11 Oct 2026 03:01:40 +0000
Manifest this update: Sun 11 Oct 2026 03:01:40 +0000
Manifest next update: Mon 12 Oct 2026 03:01:40 +0000
Files and hashes: 1: 2g3g_d2cbfXZVdPZvllR7ko9tq4.roa (hash: qrpCT5b4Pl5PHRJkUsaii3h3DkJ//XJSoI+D6opqI3Y=)
2: DZRRAdctSa4CVUBsnqANHKo8DbA.roa (hash: dNAFaUwzL63hmLrib+niPT9WNwhu3ti4JBM4gbkcCtk=)
3: S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl (hash: Gg9HyzEC27nInomvqj5SUarGBp9WMZu8Kzmc76nSRkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:b0:f4:9f:0e:9f:f9:24:39:dd:d8:ac:43:fb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd19d54b817ae73c8885e1cf49e9e6e04135739
Validity
Not Before: Oct 11 03:01:40 2026 GMT
Not After : Oct 12 03:01:40 2026 GMT
Subject: CN=f62a6a5b8f550e614f06a550d36ff26d23156f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:b6:a8:44:ce:d5:46:10:02:ec:61:d6:bf:
fd:e2:ac:fa:9c:8f:ba:81:86:63:12:2d:8a:0c:5a:
de:bb:35:7e:af:c1:ba:cc:d8:d7:f8:5d:3f:e1:21:
6f:8b:ed:d1:2c:70:1f:ae:67:ad:c5:36:9c:31:ea:
b4:a5:c6:7d:91:5d:e9:47:ad:e9:d5:9e:bc:a0:3a:
6b:9d:d4:de:b5:9b:4a:fb:3c:c6:2a:0a:3a:b2:a7:
a1:6f:33:da:3a:ed:09:0b:13:e8:aa:be:3a:11:40:
b9:24:15:07:19:84:17:e1:18:e4:1d:1c:0a:41:c3:
6e:a2:94:0d:80:9c:81:39:71:71:12:f7:96:7a:f3:
e1:41:ac:22:b3:80:43:4c:85:31:99:6a:9e:55:4b:
cd:bb:41:60:10:dd:41:cd:0d:b2:52:f6:9e:0f:34:
ef:f8:e6:b0:51:84:c8:84:21:5e:5c:6b:75:d6:8c:
d8:62:3f:2f:2f:b6:4a:c3:30:bb:6e:eb:60:df:24:
af:a9:68:69:24:11:b5:e3:82:70:4c:6e:9e:5f:0e:
57:a5:c0:12:45:09:50:9a:91:57:81:a8:8f:67:ff:
f8:68:b2:0a:d5:93:4f:31:6f:d6:73:a5:f3:f6:2e:
ff:58:cd:16:fe:cd:99:6d:c8:ed:18:2a:39:57:a4:
07:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2A:6A:5B:8F:55:0E:61:4F:06:A5:50:D3:6F:F2:6D:23:15:6F:30
X509v3 Authority Key Identifier:
keyid:4B:D1:9D:54:B8:17:AE:73:C8:88:5E:1C:F4:9E:9E:6E:04:13:57:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9GdVLgXrnPIiF4c9J6ebgQTVzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bbee5e-ddbd-4b85-b4ca-2ae440a5ccb0/1/S9GdVLgXrnPIiF4c9J6ebgQTVzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:80:f4:81:de:5a:98:64:11:9f:a8:b8:85:c3:3b:58:6b:
4a:dc:c7:13:25:9b:cd:6e:2e:06:77:d7:79:7a:42:03:4d:07:
99:95:5c:66:8d:50:35:e9:74:ff:00:75:f5:a6:57:37:f5:26:
4d:22:8a:36:b8:11:c1:16:b6:8a:0c:fe:26:e7:17:46:42:bf:
6f:a2:5b:5e:52:dd:bc:a7:97:8a:d1:96:10:f8:fa:35:c8:ef:
77:93:dc:19:29:17:75:5c:73:d3:ac:17:40:5c:43:85:22:5f:
63:bd:7f:10:c8:df:37:77:f5:d4:90:2d:e0:4b:c7:ad:7e:f9:
7f:9a:88:6e:8d:ca:40:ce:4c:ff:13:49:42:42:66:dd:b9:90:
09:b7:7d:f8:37:3f:47:9a:55:e5:1b:7d:97:cd:02:8d:c5:cc:
b5:ed:39:29:dd:42:4f:83:04:6e:6d:ac:b0:80:4e:43:3b:72:
3a:ef:ec:9a:7e:ee:f7:48:5f:20:95:b6:37:9f:b2:f4:07:25:
7b:36:9a:e2:ca:99:5b:e1:55:26:e3:47:c6:48:a2:33:bb:cc:
92:ac:fd:57:ba:fb:94:be:3d:fa:bd:02:7c:83:c5:2a:71:dd:
bf:66:94:52:57:d3:bb:6a:d7:e6:bb:ad:6d:b5:01:75:4e:a0:
62:32:ba:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEo6LD0nw6f+SQ53disQ/uwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZDE5ZDU0YjgxN2FlNzNjODg4NWUxY2Y0OWU5ZTZlMDQx
MzU3MzkwHhcNMjYxMDExMDMwMTQwWhcNMjYxMDEyMDMwMTQwWjAzMTEwLwYDVQQD
EyhmNjJhNmE1YjhmNTUwZTYxNGYwNmE1NTBkMzZmZjI2ZDIzMTU2ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj+2qETO1UYQAuxh1r/94qz6nI+6
gYZjEi2KDFreuzV+r8G6zNjX+F0/4SFvi+3RLHAfrmetxTacMeq0pcZ9kV3pR63p
1Z68oDprndTetZtK+zzGKgo6sqehbzPaOu0JCxPoqr46EUC5JBUHGYQX4RjkHRwK
QcNuopQNgJyBOXFxEveWevPhQawis4BDTIUxmWqeVUvNu0FgEN1BzQ2yUvaeDzTv
+OawUYTIhCFeXGt11ozYYj8vL7ZKwzC7butg3ySvqWhpJBG144JwTG6eXw5XpcAS
RQlQmpFXgaiPZ//4aLIK1ZNPMW/Wc6Xz9i7/WM0W/s2ZbcjtGCo5V6QHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYqaluPVQ5hTwalUNNv8m0jFW8wMB8GA1UdIwQY
MBaAFEvRnVS4F65zyIheHPSenm4EE1c5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzlHZFZMZ1hyblBJaUY0YzlKNmViZ1FUVnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2Et
MmFlNDQwYTVjY2IwLzEvUzlHZFZMZ1hyblBJaUY0YzlKNmViZ1FUVnprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9iYmVlNWUtZGRiZC00Yjg1LWI0Y2EtMmFlNDQwYTVjY2Iw
LzEvUzlHZFZMZ1hyblBJaUY0YzlKNmViZ1FUVnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVaA9IHe
WphkEZ+ouIXDO1hrStzHEyWbzW4uBnfXeXpCA00HmZVcZo1QNel0/wB19aZXN/Um
TSKKNrgRwRa2igz+JucXRkK/b6JbXlLdvKeXitGWEPj6Ncjvd5PcGSkXdVxz06wX
QFxDhSJfY71/EMjfN3f11JAt4EvHrX75f5qIbo3KQM5M/xNJQkJm3bmQCbd9+Dc/
R5pV5Rt9l80CjcXMte05Kd1CT4MEbm2ssIBOQztyOu/smn7u90hfIJW2N5+y9Acl
ezaa4sqZW+FVJuNHxkiiM7vMkqz9V7r7lL49+r0CfIPFKnHdv2aUUlfTu2rX5rut
bbUBdU6gYjK6SQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:37:44 2026 by rpki-client