Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json)
Hash identifier: wwAZjVNvfN2PRbslVDkTSQxcA+Ftpqv3sxFOEyZzbfE=
Subject key identifier: 9B:7C:FE:35:95:26:20:8C:ED:6C:C3:31:76:B4:93:84:F2:EA:14:F1
Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Certificate serial: 019CA9B3579C88B88472EB16DE1A75E080D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
Manifest number: 17D8
Signing time: Sun 01 Mar 2026 14:00:28 +0000
Manifest this update: Sun 01 Mar 2026 14:00:28 +0000
Manifest next update: Mon 02 Mar 2026 14:00:28 +0000
Files and hashes: 1: 42Oa6hAtTxZiFbmEwvIO-2OcwoM.roa (hash: SkLlsU0plCQ3OmjzWWaN+6X8mXDGCP5VlIK1uTpu/is=)
2: V0-osk911oZBoXIEbj4rnci62yY.roa (hash: rYxJFA3gAE6iirrxlQ+evDRo4zqxQB5y71GogsBIQ7c=)
3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: th0wq34EyQfrNCj1IqldQSX7okT1cOOOca4gWX+MzAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:57:9c:88:b8:84:72:eb:16:de:1a:75:e0:80:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae
Validity
Not Before: Mar 1 14:00:28 2026 GMT
Not After : Mar 2 14:00:28 2026 GMT
Subject: CN=9b7cfe359526208ced6cc33176b49384f2ea14f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:2b:76:48:f5:61:66:68:e3:6b:ff:82:de:
67:25:b5:38:28:b8:c9:77:4f:88:77:f9:c1:50:0f:
9d:8a:c7:3a:4d:ef:1e:6b:80:81:55:40:bb:fd:52:
0a:28:f9:39:dc:c8:51:93:ea:42:b2:b2:0a:8a:69:
b2:21:7e:5c:05:d6:90:49:66:81:79:e8:84:e6:94:
df:86:0e:9d:2b:30:e2:2d:f1:5d:18:68:32:7d:78:
7b:9e:19:56:1d:17:e8:45:2b:ff:72:5a:57:22:07:
81:62:8c:67:37:41:aa:13:01:5b:18:b0:bf:f7:4f:
2b:a0:0c:a4:cc:56:d6:e0:90:8b:b5:e1:ef:3d:9d:
d6:b8:11:e5:99:a9:5d:65:bc:26:b9:0e:bb:ae:4b:
47:10:dd:57:ee:ae:2f:a1:44:c8:d3:72:52:45:5d:
ed:1c:3b:ed:de:e7:b0:c5:93:8f:2f:b9:e8:a1:55:
dc:7f:a1:52:46:21:55:d2:da:41:af:b3:c6:10:a5:
11:9f:1b:a9:97:99:1c:e2:71:68:71:ab:59:38:7f:
50:5b:25:0e:78:50:44:0e:f7:6c:7c:84:99:ca:63:
18:1e:e6:d7:09:9f:0d:02:9d:f0:72:f4:da:b3:7b:
41:e7:da:90:de:b4:b6:dd:95:39:02:6b:fe:49:9e:
d4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7C:FE:35:95:26:20:8C:ED:6C:C3:31:76:B4:93:84:F2:EA:14:F1
X509v3 Authority Key Identifier:
keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0e:95:3b:51:8b:f8:8a:2f:a6:f2:03:9d:5e:ca:df:5a:eb:
33:7f:f3:2d:97:e4:df:cb:c5:5e:79:44:b9:59:b0:34:ca:94:
87:7e:3b:90:b7:dc:62:59:f1:16:fc:c3:68:d8:04:f6:5d:ad:
74:1e:2f:92:ed:b5:94:21:06:06:d2:6b:b9:5d:76:69:ee:5d:
6e:29:71:4a:f0:c0:c7:b7:d7:a5:c1:73:ac:fb:29:4d:e4:33:
04:9f:ec:fe:b2:25:12:30:18:f5:19:df:ec:98:5c:36:12:6d:
2c:ed:dd:97:2f:af:fc:8b:1a:02:22:8a:a4:ed:a4:90:aa:39:
d6:fa:19:2f:bc:6e:3e:4a:a5:0b:13:83:94:70:45:d8:fb:71:
0e:ba:79:21:fc:4d:ef:7e:9c:fa:4b:f8:95:10:e7:71:29:31:
c6:ad:bf:79:3e:49:2a:6c:3c:37:7d:7e:ce:54:aa:3c:15:8d:
76:84:f8:ab:93:62:7a:0c:87:14:88:0a:82:55:8e:da:78:60:
1a:2d:5a:ff:78:91:7e:1d:d2:3a:a9:b0:a5:99:fc:57:77:ec:
87:f0:af:2f:ff:38:55:aa:37:a9:c9:72:88:33:e8:b1:7c:9b:
78:b7:50:4d:5e:33:98:b0:ca:25:64:44:ed:3c:a6:bd:9d:d5:
cd:91:d2:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps1eciLiEcusW3hp14IDSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4
YWFkYWUwHhcNMjYwMzAxMTQwMDI4WhcNMjYwMzAyMTQwMDI4WjAzMTEwLwYDVQQD
Eyg5YjdjZmUzNTk1MjYyMDhjZWQ2Y2MzMzE3NmI0OTM4NGYyZWExNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD0rdkj1YWZo42v/gt5nJbU4KLjJ
d0+Id/nBUA+disc6Te8ea4CBVUC7/VIKKPk53MhRk+pCsrIKimmyIX5cBdaQSWaB
eeiE5pTfhg6dKzDiLfFdGGgyfXh7nhlWHRfoRSv/clpXIgeBYoxnN0GqEwFbGLC/
908roAykzFbW4JCLteHvPZ3WuBHlmaldZbwmuQ67rktHEN1X7q4voUTI03JSRV3t
HDvt3uewxZOPL7nooVXcf6FSRiFV0tpBr7PGEKURnxupl5kc4nFocatZOH9QWyUO
eFBEDvdsfISZymMYHubXCZ8NAp3wcvTas3tB59qQ3rS23ZU5Amv+SZ7UjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt8/jWVJiCM7WzDMXa0k4Ty6hTxMB8GA1UdIwQY
MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt
YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk
LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0g6VO1GL
+IovpvIDnV7K31rrM3/zLZfk38vFXnlEuVmwNMqUh347kLfcYlnxFvzDaNgE9l2t
dB4vku21lCEGBtJruV12ae5dbilxSvDAx7fXpcFzrPspTeQzBJ/s/rIlEjAY9Rnf
7JhcNhJtLO3dly+v/IsaAiKKpO2kkKo51voZL7xuPkqlCxODlHBF2PtxDrp5IfxN
736c+kv4lRDncSkxxq2/eT5JKmw8N31+zlSqPBWNdoT4q5NiegyHFIgKglWO2nhg
Gi1a/3iRfh3SOqmwpZn8V3fsh/CvL/84Vao3qclyiDPosXybeLdQTV4zmLDKJWRE
7TymvZ3VzZHSqg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:04 2026 by rpki-client