Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
File: 9I-TynzhxFjLZG83ocligAjtlek.mft (raw, json)
Hash identifier: ilUxD7ZTEK/SKs2HCz49ZFju3iDm+t3/xDBRRcpnOUc=
Subject key identifier: E4:9A:46:FC:B7:5E:C8:7B:54:E6:CC:30:2D:BD:22:EB:68:CA:45:8E
Authority key identifier: F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
Certificate issuer: /CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Certificate serial: 01A0BFC2FD79CD33950307187E8C1B05A771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
Manifest number: 0118
Signing time: Sun 20 Sep 2026 17:00:22 +0000
Manifest this update: Sun 20 Sep 2026 17:00:22 +0000
Manifest next update: Mon 21 Sep 2026 17:00:22 +0000
Files and hashes: 1: 14IQa4YJx07aw3R2c8Wa0alO5tE.asa (hash: p3I3ibR75QpSLRLyKUWYy3n3ScI7ed7lUSMpaavT+mE=)
2: 9I-TynzhxFjLZG83ocligAjtlek.crl (hash: GsQFZ0bjJBm8v3KMErcB8wFQXPBy5ddlLmtXYPKK06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c2:fd:79:cd:33:95:03:07:18:7e:8c:1b:05:a7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Validity
Not Before: Sep 20 17:00:22 2026 GMT
Not After : Sep 21 17:00:22 2026 GMT
Subject: CN=e49a46fcb75ec87b54e6cc302dbd22eb68ca458e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:c5:f0:06:86:af:a9:6b:c9:b1:b2:d0:cc:
a0:4b:d3:2d:6a:2f:89:8f:56:d8:b0:78:19:8b:15:
ca:20:c3:3e:b8:cc:a1:b9:9c:d7:f8:57:28:29:c8:
da:61:3e:1e:12:32:26:69:50:fa:c0:24:df:d7:81:
89:06:13:0b:17:dd:3e:8f:dc:08:52:22:6a:e3:92:
fe:a5:e8:2e:74:72:38:d4:80:06:56:ef:ff:2f:30:
fd:b1:09:9e:f3:25:9b:d4:12:de:d5:4a:3e:8e:3d:
b5:d3:1f:ce:50:98:fc:04:ed:4f:ab:f0:2c:f6:d0:
0a:30:07:7e:de:af:1e:f2:fc:02:a0:e0:76:3b:c9:
24:3c:0b:16:cd:7b:3b:db:48:56:2d:4e:c6:9b:bb:
06:a1:1d:39:d1:c4:6f:38:d7:cb:81:81:28:74:e7:
8f:ad:bb:e0:41:a3:90:df:20:fd:67:ec:48:49:5f:
07:6b:16:76:39:db:ff:c5:60:fd:29:32:b0:34:11:
11:b9:d4:50:9e:da:51:9b:47:48:c1:04:bf:f2:71:
34:89:9b:5c:40:a1:3d:4c:97:36:0f:a0:b9:37:7d:
ed:a1:69:c4:90:c7:b6:6d:7a:3f:e6:26:85:97:a7:
7b:e3:46:7e:62:e4:34:0a:1b:f9:00:fe:02:7e:f0:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:46:FC:B7:5E:C8:7B:54:E6:CC:30:2D:BD:22:EB:68:CA:45:8E
X509v3 Authority Key Identifier:
keyid:F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:03:7b:9d:49:26:96:74:32:29:a0:07:1b:c5:a0:14:3f:83:
53:83:b0:70:56:be:ea:95:c0:e7:77:be:08:d5:ff:09:1d:89:
4c:e8:59:25:c2:7c:1e:cc:a0:af:7e:7a:4e:82:b6:18:a6:0c:
a1:ee:01:f1:7a:c0:8c:94:47:19:5b:10:7a:95:18:aa:ad:eb:
b4:1d:d1:ee:9b:6f:37:32:24:46:16:2f:e8:42:a7:68:75:de:
61:dd:4e:44:b0:54:80:6f:44:79:62:43:d5:c9:cb:10:10:03:
7b:37:38:1f:43:71:56:48:24:5c:9c:ee:92:37:20:bf:37:55:
40:09:99:34:c3:ea:7e:34:1b:04:ab:dd:65:b0:e1:fd:85:83:
37:f6:bd:a7:3c:66:eb:50:5b:65:9d:19:e4:74:b3:3e:0d:54:
3b:12:1f:94:1b:28:c9:7b:37:c4:a0:46:c5:4f:f1:8d:79:0a:
82:18:ed:24:cc:89:95:ea:c5:5f:a4:98:6b:bf:75:72:ec:80:
e7:b8:86:c0:ae:44:14:45:29:76:97:57:4a:63:a7:81:d4:3b:
a5:08:11:24:02:72:69:a7:7e:57:c9:0f:fe:d6:e7:2a:97:1c:
dd:0e:69:e8:ee:3a:80:ae:9a:78:ef:ea:1a:e2:10:82:b6:d9:
a8:9f:96:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/wv15zTOVAwcYfowbBadxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OGY5M2NhN2NlMWM0NThjYjY0NmYzN2ExYzk2MjgwMDhl
ZDk1ZTkwHhcNMjYwOTIwMTcwMDIyWhcNMjYwOTIxMTcwMDIyWjAzMTEwLwYDVQQD
EyhlNDlhNDZmY2I3NWVjODdiNTRlNmNjMzAyZGJkMjJlYjY4Y2E0NThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/rF8AaGr6lrybGy0MygS9Mtai+J
j1bYsHgZixXKIMM+uMyhuZzX+FcoKcjaYT4eEjImaVD6wCTf14GJBhMLF90+j9wI
UiJq45L+pegudHI41IAGVu//LzD9sQme8yWb1BLe1Uo+jj210x/OUJj8BO1Pq/As
9tAKMAd+3q8e8vwCoOB2O8kkPAsWzXs720hWLU7Gm7sGoR050cRvONfLgYEodOeP
rbvgQaOQ3yD9Z+xISV8HaxZ2Odv/xWD9KTKwNBERudRQntpRm0dIwQS/8nE0iZtc
QKE9TJc2D6C5N33toWnEkMe2bXo/5iaFl6d740Z+YuQ0Chv5AP4CfvC07wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSaRvy3Xsh7VObMMC29IutoykWOMB8GA1UdIwQY
MBaAFPSPk8p84cRYy2RvN6HJYoAI7ZXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82OGUzYTgtZDE1NC00OWZjLWFjYTEt
ZDJmYzdmMWNiYzIzLzEvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82OGUzYTgtZDE1NC00OWZjLWFjYTEtZDJmYzdmMWNiYzIz
LzEvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgN7nUkm
lnQyKaAHG8WgFD+DU4OwcFa+6pXA53e+CNX/CR2JTOhZJcJ8Hsygr356ToK2GKYM
oe4B8XrAjJRHGVsQepUYqq3rtB3R7ptvNzIkRhYv6EKnaHXeYd1ORLBUgG9EeWJD
1cnLEBADezc4H0NxVkgkXJzukjcgvzdVQAmZNMPqfjQbBKvdZbDh/YWDN/a9pzxm
61BbZZ0Z5HSzPg1UOxIflBsoyXs3xKBGxU/xjXkKghjtJMyJlerFX6SYa791cuyA
57iGwK5EFEUpdpdXSmOngdQ7pQgRJAJyaad+V8kP/tbnKpcc3Q5p6O46gK6aeO/q
GuIQgrbZqJ+WBQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:14:00 2026 by rpki-client