Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File: m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier: I5ueo061roDdhEsjzEhCa5131MVOHfy1C82I/LNMm3o=
Subject key identifier: FA:3D:F5:4F:AE:01:00:DA:B4:07:3F:6F:17:D2:45:2C:D7:09:C9:E5
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial: 01A0C632C8E9B23DCF086D7800F2DACF7D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number: 13AE
Signing time: Mon 21 Sep 2026 23:00:11 +0000
Manifest this update: Mon 21 Sep 2026 23:00:11 +0000
Manifest next update: Tue 22 Sep 2026 23:00:11 +0000
Files and hashes: 1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
2: IhZOkFGwlkPZaXkWZYfG9spp4fc.roa (hash: qCEy/Um8M7C4bgM3+k6M7uqAWAjO5DdffVhom4uQ+CM=)
3: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
4: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
5: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: 2BKCAk15d2qThhl40ArwfoXRcTawQ3bwVwBz7Lsi6Ys=)
6: vYpajsmf80MiyIj2QQ8skH6FUNs.roa (hash: pxdMLgEV+GE8y/CZ5aq08lqIZDvAwUSQwzOUir0h/FI=)
7: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=)
8: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:c8:e9:b2:3d:cf:08:6d:78:00:f2:da:cf:7d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Validity
Not Before: Sep 21 23:00:11 2026 GMT
Not After : Sep 22 23:00:11 2026 GMT
Subject: CN=fa3df54fae0100dab4073f6f17d2452cd709c9e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:76:2f:d2:68:6a:7f:fc:08:fa:51:98:d5:a3:
f6:75:c8:0e:be:bd:31:27:5c:d5:ff:0c:3e:39:6f:
55:08:8f:f0:38:b6:2c:77:a4:15:f8:a6:d3:ef:1a:
a3:d1:fc:a5:ba:2d:a7:69:31:4f:44:18:92:bb:70:
fd:f6:5d:5d:5b:8b:40:75:f1:ed:fe:fa:21:0d:a7:
3a:9e:dd:c8:37:a6:cb:33:65:34:05:9c:68:be:49:
42:f7:f1:5e:c8:14:67:f1:b9:b2:f8:b2:46:f0:8b:
40:fc:02:87:ce:f3:97:38:04:0a:e0:b8:00:4c:7a:
13:32:38:37:02:fd:a2:cf:b5:87:fe:5f:f5:0b:28:
a5:61:44:18:88:54:1f:fa:d8:fe:39:99:42:89:1b:
3e:53:20:0a:13:5c:66:5c:99:f7:2b:61:71:99:4d:
a3:7c:94:cf:53:b4:1b:c3:86:00:cf:98:32:3a:c7:
ac:46:3d:7f:ef:c8:a7:bd:7c:f6:b4:30:28:93:3a:
5e:0e:6e:40:53:9e:97:3c:33:6b:26:99:bb:46:9b:
99:db:19:93:21:9d:64:22:f1:49:87:14:6f:dc:71:
c8:7a:0b:f4:b8:7e:9e:ea:75:97:ec:38:df:2f:ef:
ca:f7:ac:a9:77:65:55:f1:03:71:d0:20:0a:3d:de:
1a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3D:F5:4F:AE:01:00:DA:B4:07:3F:6F:17:D2:45:2C:D7:09:C9:E5
X509v3 Authority Key Identifier:
keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d8:43:e9:fd:a0:37:b4:7f:5f:c9:40:18:d6:ef:f4:88:b5:
2c:c7:1b:52:23:b4:b9:6c:a3:c2:7d:6e:0e:86:49:8c:9b:8a:
fe:05:00:bc:b8:dc:99:35:01:3c:13:11:7d:26:04:b4:a0:48:
ab:2d:fd:74:3d:f5:de:ca:4c:2b:d7:3a:a5:a8:c9:dc:80:21:
68:57:b0:43:ea:5c:49:71:a5:ac:44:ca:48:c8:a2:db:22:9b:
e2:ff:b4:7a:b8:7a:37:ea:0a:18:3c:ea:fe:c9:51:1e:d2:19:
22:bb:90:dd:97:f4:e5:64:3f:4a:34:24:33:b7:c8:b5:f1:79:
9e:e0:2b:69:5f:98:d3:c1:5f:36:7d:8f:58:61:48:5f:9e:45:
bf:1c:07:fe:85:98:5f:24:43:a8:00:51:ac:0a:8e:c8:47:b7:
58:f5:bf:9e:a5:b0:f6:08:3e:d3:fc:93:84:8b:cc:0b:e8:c2:
56:9d:43:ff:e6:5a:e7:32:24:a5:4e:5e:ed:db:c8:32:06:22:
ef:3e:8f:d2:a2:b1:a3:1b:57:03:06:aa:a4:b1:72:32:3c:d2:
ab:8c:7a:f5:1c:82:66:93:23:85:88:b3:c8:26:13:aa:43:c1:
3a:1c:d7:41:b1:cb:92:a5:f8:64:d6:c9:6a:c1:b6:e0:74:c3:
c2:32:bf:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMsjpsj3PCG14APLaz312MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0
ZmJkOTQwHhcNMjYwOTIxMjMwMDExWhcNMjYwOTIyMjMwMDExWjAzMTEwLwYDVQQD
EyhmYTNkZjU0ZmFlMDEwMGRhYjQwNzNmNmYxN2QyNDUyY2Q3MDljOWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXYv0mhqf/wI+lGY1aP2dcgOvr0x
J1zV/ww+OW9VCI/wOLYsd6QV+KbT7xqj0fylui2naTFPRBiSu3D99l1dW4tAdfHt
/vohDac6nt3IN6bLM2U0BZxovklC9/FeyBRn8bmy+LJG8ItA/AKHzvOXOAQK4LgA
THoTMjg3Av2iz7WH/l/1CyilYUQYiFQf+tj+OZlCiRs+UyAKE1xmXJn3K2FxmU2j
fJTPU7Qbw4YAz5gyOsesRj1/78invXz2tDAokzpeDm5AU56XPDNrJpm7RpuZ2xmT
IZ1kIvFJhxRv3HHIegv0uH6e6nWX7DjfL+/K96ypd2VV8QNx0CAKPd4aAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo99U+uAQDatAc/bxfSRSzXCcnlMB8GA1UdIwQY
MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt
NTY5NzI0OWY1MTI0LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0
LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNhD6f2g
N7R/X8lAGNbv9Ii1LMcbUiO0uWyjwn1uDoZJjJuK/gUAvLjcmTUBPBMRfSYEtKBI
qy39dD313spMK9c6pajJ3IAhaFewQ+pcSXGlrETKSMii2yKb4v+0erh6N+oKGDzq
/slRHtIZIruQ3Zf05WQ/SjQkM7fItfF5nuAraV+Y08FfNn2PWGFIX55FvxwH/oWY
XyRDqABRrAqOyEe3WPW/nqWw9gg+0/yThIvMC+jCVp1D/+Za5zIkpU5e7dvIMgYi
7z6P0qKxoxtXAwaqpLFyMjzSq4x69RyCZpMjhYizyCYTqkPBOhzXQbHLkqX4ZNbJ
asG24HTDwjK/Fg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:22:16 2026 by rpki-client