Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier: dd+x0dP0aW2W3Xi1C1arN0X4fHV+Mh4zQXhW++NEDmE=
Subject key identifier: 68:0A:E7:AD:A7:18:F3:B6:C2:35:C7:DD:54:5D:72:B4:23:0E:0C:33
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial: 01A0CA0F94A3EB1B45A8029B12E9A20DEFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number: 0782
Signing time: Tue 22 Sep 2026 17:00:13 +0000
Manifest this update: Tue 22 Sep 2026 17:00:13 +0000
Manifest next update: Wed 23 Sep 2026 17:00:13 +0000
Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: KToRPzEae/1Ll5zc00HAtxaSNtP8QHjcE0t9fkeBOH4=)
2: Fnxy3WJWYvuek9Fr0KYOmQUUsw4.roa (hash: Ch+0FQEjljg05e4GEw4ZsydId/PhinfJoSdNkBFbTQc=)
3: YFcRJIWw3vxIzvkY-8u-8c691f8.roa (hash: THB+jxktyZjvUxZ1NJSg5XToUQ22aa8mKJXvRtR7GBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:94:a3:eb:1b:45:a8:02:9b:12:e9:a2:0d:ef:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Validity
Not Before: Sep 22 17:00:13 2026 GMT
Not After : Sep 23 17:00:13 2026 GMT
Subject: CN=680ae7ada718f3b6c235c7dd545d72b4230e0c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a1:27:17:0c:d5:4e:ee:14:45:c3:2c:f0:bf:
b0:28:6f:9e:46:19:95:07:28:21:47:1b:d2:1e:f3:
6f:76:e0:f4:cc:b7:35:fc:ac:41:5b:ba:31:a7:80:
37:23:51:92:34:f2:c2:07:fa:d6:d2:6b:a6:56:fe:
a7:63:7d:a0:94:51:30:11:1a:27:fb:ac:93:8d:7a:
ac:24:1e:37:d7:8e:34:f7:21:d6:c3:22:45:0a:eb:
d6:d2:d1:e6:49:af:7f:ed:a8:42:65:d7:ba:55:a0:
d4:6b:6f:54:b4:df:9e:0b:50:af:96:be:ed:7e:41:
7a:0c:f4:4d:1b:fd:6d:58:d6:f9:ac:76:4f:fc:22:
d9:cf:3b:29:72:d6:02:20:28:f1:43:8e:e3:9f:a6:
a7:21:21:bb:2f:f8:31:46:f8:06:b1:ee:6e:ad:3b:
1d:7d:fa:f4:21:f8:49:fa:37:cd:cc:41:2b:f5:b1:
2d:18:ce:0f:11:e8:80:1e:73:8a:aa:86:1f:7f:de:
f7:26:4d:45:96:1c:7a:e4:e4:39:12:5f:96:a3:39:
0c:a6:5a:95:b7:82:17:14:99:7d:fe:df:50:fc:83:
69:bc:fe:a0:93:ca:20:44:9b:dd:0b:ec:09:ac:6d:
43:60:c0:be:60:1c:72:69:d9:00:d1:cf:3a:03:e1:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:E7:AD:A7:18:F3:B6:C2:35:C7:DD:54:5D:72:B4:23:0E:0C:33
X509v3 Authority Key Identifier:
keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f4:98:42:cb:25:73:03:13:0e:c1:13:a4:99:b8:28:d8:9f:
86:b9:ca:19:4a:e8:bc:b8:a1:25:f5:b5:ab:66:4b:0b:6e:71:
12:0a:2a:65:51:f5:bc:81:c6:fe:e0:73:5e:1b:bb:7f:00:57:
8c:41:c5:2b:f3:8b:2d:80:11:48:24:0f:c8:31:ec:2b:c1:c7:
15:f7:76:91:eb:cf:60:74:df:d5:90:b9:d1:93:96:37:97:bd:
77:1a:7f:ba:f4:43:17:72:aa:d1:13:92:bf:fa:73:bb:dc:0e:
51:2d:ef:f6:86:d6:75:ea:30:6d:cd:39:d0:15:c2:07:4d:7c:
d8:f0:de:e8:96:0f:fe:65:22:09:a7:78:9a:5f:c0:24:92:6a:
25:74:c9:fd:cd:29:32:83:04:fd:81:11:02:e1:d8:26:9b:00:
da:0c:a8:8c:e0:52:41:59:da:3d:da:ed:3a:04:53:86:70:ce:
d1:67:37:3a:7d:f3:cb:d5:7d:98:b7:a1:b5:c8:0a:da:87:88:
a5:39:89:ad:71:be:2d:62:58:ff:55:c5:54:6b:8f:5f:91:6c:
2b:1c:bd:5e:eb:1a:5b:b4:21:d6:b5:3a:3b:a2:16:94:30:32:
08:a5:61:87:d4:5e:97:49:53:ef:3d:e2:5f:5b:9b:2a:17:58:
73:8c:ff:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKD5Sj6xtFqAKbEumiDe/sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ODgyZjMzZjc0ODBkY2M3Yjg3NjM3YWVhNzYzNjgyODlk
NzVjMmQwHhcNMjYwOTIyMTcwMDEzWhcNMjYwOTIzMTcwMDEzWjAzMTEwLwYDVQQD
Eyg2ODBhZTdhZGE3MThmM2I2YzIzNWM3ZGQ1NDVkNzJiNDIzMGUwYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qEnFwzVTu4URcMs8L+wKG+eRhmV
ByghRxvSHvNvduD0zLc1/KxBW7oxp4A3I1GSNPLCB/rW0mumVv6nY32glFEwERon
+6yTjXqsJB4314409yHWwyJFCuvW0tHmSa9/7ahCZde6VaDUa29UtN+eC1Cvlr7t
fkF6DPRNG/1tWNb5rHZP/CLZzzspctYCICjxQ47jn6anISG7L/gxRvgGse5urTsd
ffr0IfhJ+jfNzEEr9bEtGM4PEeiAHnOKqoYff973Jk1Flhx65OQ5El+WozkMplqV
t4IXFJl9/t9Q/INpvP6gk8ogRJvdC+wJrG1DYMC+YBxyadkA0c86A+HqnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgK562nGPO2wjXH3VRdcrQjDgwzMB8GA1UdIwQY
MBaAFPWILzP3SA3Me4djeup2NoKJ11wtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjIt
YTk1MTA1ZjE2ZTY2LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjItYTk1MTA1ZjE2ZTY2
LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/SYQssl
cwMTDsETpJm4KNifhrnKGUrovLihJfW1q2ZLC25xEgoqZVH1vIHG/uBzXhu7fwBX
jEHFK/OLLYARSCQPyDHsK8HHFfd2kevPYHTf1ZC50ZOWN5e9dxp/uvRDF3Kq0ROS
v/pzu9wOUS3v9obWdeowbc050BXCB0182PDe6JYP/mUiCad4ml/AJJJqJXTJ/c0p
MoME/YERAuHYJpsA2gyojOBSQVnaPdrtOgRThnDO0Wc3On3zy9V9mLehtcgK2oeI
pTmJrXG+LWJY/1XFVGuPX5FsKxy9XusaW7Qh1rU6O6IWlDAyCKVhh9Rel0lT7z3i
X1ubKhdYc4z/pA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:25:10 2026 by rpki-client