Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File: 9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier: 7qE0xmDu8Nv1anNCjoxRE6H/IiMwFhDt9/UAG3+13ps=
Subject key identifier: 71:A7:74:B2:29:AA:59:85:2C:2E:4D:CE:62:0B:74:29:47:44:D3:C4
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer: /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial: 01A10F2843718207DCAD7A39954F1BE9E327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number: 1A89
Signing time: Tue 06 Oct 2026 03:00:59 +0000
Manifest this update: Tue 06 Oct 2026 03:00:59 +0000
Manifest next update: Wed 07 Oct 2026 03:00:59 +0000
Files and hashes: 1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: FodovOM2eYcDuR3+bgxnfI9pNLTl8fU3Swea9Ja0tqY=)
2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
3: VRJ4Vc94OyT64lapMXpmOD1B3Wc.roa (hash: Ky32PchK8c9vLn0orEiQizK102tpl+arDsTOuP7+gVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:28:43:71:82:07:dc:ad:7a:39:95:4f:1b:e9:e3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Validity
Not Before: Oct 6 03:00:59 2026 GMT
Not After : Oct 7 03:00:59 2026 GMT
Subject: CN=71a774b229aa59852c2e4dce620b74294744d3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:1e:c7:a5:1a:99:c3:a0:95:5c:3c:5e:2c:
1e:eb:38:c6:0d:18:d7:10:d3:50:f2:e5:1f:cc:ec:
28:68:78:75:29:d6:a2:cd:76:44:51:c6:4e:34:a1:
44:ce:94:96:b6:1f:6e:e0:e7:45:cd:c4:9c:48:68:
32:4e:20:75:65:17:41:1f:bc:db:85:62:b5:6b:08:
d9:46:bd:d1:cc:4e:61:d7:fa:d0:84:5f:e1:25:0c:
75:42:d5:b4:1e:5e:d4:40:b1:77:fe:e4:21:07:f5:
c3:4a:60:92:69:4b:0e:b7:e6:cd:24:b2:a5:c6:44:
5a:bf:4a:60:db:35:f6:50:1e:58:f0:47:fc:dc:e6:
18:29:33:ca:12:82:9b:75:9d:f4:50:fe:5d:59:5a:
20:18:82:e0:84:88:3c:6c:76:4e:06:88:7b:98:b5:
8a:72:08:81:fc:28:25:42:98:81:d7:28:85:7f:d6:
8f:f5:88:1f:df:d5:8d:ab:a4:5a:f1:3b:dd:7d:16:
be:61:e9:c2:06:05:cd:5e:a5:81:e0:97:3a:40:b3:
bc:29:08:87:0f:ac:0b:57:25:0d:94:09:08:98:5b:
2c:15:6b:35:9a:7c:4c:1f:7c:61:9e:b2:21:f2:4c:
19:5c:b8:02:27:54:c0:b5:96:15:04:29:ef:d2:be:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A7:74:B2:29:AA:59:85:2C:2E:4D:CE:62:0B:74:29:47:44:D3:C4
X509v3 Authority Key Identifier:
keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7d:00:98:18:1b:78:9b:ca:be:b2:d3:2c:1d:bb:64:27:bb:
37:08:0e:12:f6:45:e7:0e:c1:c5:89:ac:79:58:5a:d6:cd:9b:
5e:47:81:69:e2:bd:04:c6:b8:ee:66:4c:8d:c0:7d:7b:6e:14:
35:fc:01:75:dd:c2:99:d3:8c:da:2f:71:38:93:66:c9:ea:2f:
63:48:46:fb:48:a0:f5:c3:dd:6c:56:4d:38:c1:7e:b9:f7:ff:
69:eb:2a:75:3f:37:7f:88:1a:86:38:a3:f4:8d:62:3d:3b:b6:
2e:ec:7f:b1:11:1b:13:0c:b1:26:34:d9:94:42:1c:7b:4a:69:
d5:a9:e1:f5:45:25:99:1c:10:37:b0:eb:eb:47:ff:b2:0c:be:
29:c7:77:68:30:c7:2b:c5:54:85:09:56:49:d3:17:7b:31:81:
65:49:56:6d:99:0c:dd:b1:a3:26:8b:3c:b5:f6:45:28:eb:0b:
78:18:af:70:b3:68:57:92:e7:8f:26:ef:b2:ab:54:a0:3a:bc:
2f:9b:70:ab:f9:ea:b8:fc:dd:66:41:22:07:ac:18:c9:95:03:
44:f0:a1:0f:cd:ab:d3:4f:e1:c2:1e:cd:68:2a:8a:d0:63:c1:
06:7e:88:86:37:93:93:56:26:46:e6:d7:2b:ae:03:72:da:52:
6e:76:b0:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPKENxggfcrXo5lU8b6eMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MDU2ZGFiYjlhNDcwMTBjZDFiNGVmMjc0YmMzZDJmNGE1
OWU5M2EwHhcNMjYxMDA2MDMwMDU5WhcNMjYxMDA3MDMwMDU5WjAzMTEwLwYDVQQD
Eyg3MWE3NzRiMjI5YWE1OTg1MmMyZTRkY2U2MjBiNzQyOTQ3NDRkM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWAex6UamcOglVw8Xiwe6zjGDRjX
ENNQ8uUfzOwoaHh1KdaizXZEUcZONKFEzpSWth9u4OdFzcScSGgyTiB1ZRdBH7zb
hWK1awjZRr3RzE5h1/rQhF/hJQx1QtW0Hl7UQLF3/uQhB/XDSmCSaUsOt+bNJLKl
xkRav0pg2zX2UB5Y8Ef83OYYKTPKEoKbdZ30UP5dWVogGILghIg8bHZOBoh7mLWK
cgiB/CglQpiB1yiFf9aP9Ygf39WNq6Ra8TvdfRa+YenCBgXNXqWB4Jc6QLO8KQiH
D6wLVyUNlAkImFssFWs1mnxMH3xhnrIh8kwZXLgCJ1TAtZYVBCnv0r4N2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGndLIpqlmFLC5NzmILdClHRNPEMB8GA1UdIwQY
MBaAFPUFbau5pHAQzRtO8nS8PS9KWek6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMt
ZGUwZWM3NmE0NjcyLzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8wYWM0NjMtODY4Yy00MTE1LWI1ODMtZGUwZWM3NmE0Njcy
LzEvOVFWdHE3bWtjQkRORzA3eWRMdzlMMHBaNlRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE30AmBgb
eJvKvrLTLB27ZCe7NwgOEvZF5w7BxYmseVha1s2bXkeBaeK9BMa47mZMjcB9e24U
NfwBdd3CmdOM2i9xOJNmyeovY0hG+0ig9cPdbFZNOMF+uff/aesqdT83f4gahjij
9I1iPTu2Lux/sREbEwyxJjTZlEIce0pp1anh9UUlmRwQN7Dr60f/sgy+Kcd3aDDH
K8VUhQlWSdMXezGBZUlWbZkM3bGjJos8tfZFKOsLeBivcLNoV5LnjybvsqtUoDq8
L5twq/nquPzdZkEiB6wYyZUDRPChD82r00/hwh7NaCqK0GPBBn6IhjeTk1YmRubX
K64DctpSbnaw8A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 07:05:28 2026 by rpki-client