Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
File: p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft (raw, json)
Hash identifier: ldgqAjvzzxuU6b+383ELtgv9VIhQkj5w1DzjwDxmJlA=
Subject key identifier: 12:20:5D:33:E3:CE:06:5F:FD:28:3E:EB:A6:87:27:35:7F:82:35:A5
Authority key identifier: A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
Certificate issuer: /CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Certificate serial: 01A0C6D8461A740F319AA203BD7CBC7E8178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
Manifest number: 1936
Signing time: Tue 22 Sep 2026 02:00:57 +0000
Manifest this update: Tue 22 Sep 2026 02:00:57 +0000
Manifest next update: Wed 23 Sep 2026 02:00:57 +0000
Files and hashes: 1: 5xWsJLB1rOrqA4DS2BwAZY-uRwg.roa (hash: JIN7iifBaNIG0jSwJOMYaoCb6Od3dAZF5qeWgFbXbiY=)
2: meAessKCpmwe8fOAgZe9YU9MTiw.roa (hash: 50h4K5YSYsz32EpIZ2NW1nDqeDeoSpSQ6hoQmydaO20=)
3: nSbiFuonVVedtf1Mjw5hb4zONuc.roa (hash: J6+zjZkHNoFOiT1a2hQNHKdZUcl8pIjHWjIqVGiuISk=)
4: p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl (hash: fp/hWwBtA41dRl+Pxuk1Zuhz9c4F7C4PAcoeU++lFSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:46:1a:74:0f:31:9a:a2:03:bd:7c:bc:7e:81:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7aee67620d9c0ae63d295785c9d956f063c21c3
Validity
Not Before: Sep 22 02:00:57 2026 GMT
Not After : Sep 23 02:00:57 2026 GMT
Subject: CN=12205d33e3ce065ffd283eeba68727357f8235a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:67:96:e8:62:d0:b8:fd:8c:bb:76:d7:c8:
6b:5c:7e:4a:c1:e3:51:e7:0e:02:50:7b:c9:17:10:
3e:da:40:7d:bc:84:23:db:1e:01:98:19:d1:87:9f:
8b:7c:2f:e1:cd:75:bc:d3:e6:a1:2f:99:d9:df:9a:
7c:32:59:e9:64:50:0b:9e:69:8d:ae:43:31:8f:28:
4c:63:b5:d4:14:ed:18:00:5f:8a:c6:9e:19:a7:a5:
37:90:46:65:69:b2:5c:04:c8:dc:9a:35:ce:0b:a1:
23:5a:9e:7a:9a:0b:de:c9:20:ee:aa:e9:45:97:6c:
c4:0e:de:4e:30:47:e4:78:cc:bc:cd:04:ae:e1:34:
95:28:c8:2c:19:9b:d4:e4:bd:5a:91:3c:0b:ac:8a:
02:14:b3:f5:2a:c3:1f:d8:77:5e:e9:3a:19:8f:71:
d5:25:21:16:54:74:74:f9:69:70:3d:02:6a:b4:7d:
aa:c4:21:c2:bf:96:4e:41:c1:1c:da:d5:6f:60:27:
d3:15:f1:d6:f1:94:ff:6a:e5:14:1e:3b:5b:51:8b:
e5:ce:00:dd:3a:76:fe:de:98:af:29:ba:98:10:97:
05:80:1c:5c:09:96:db:45:c5:a9:33:8f:2f:ff:ef:
19:97:31:b4:b7:ca:cb:59:0b:3e:b0:2b:4f:5d:e0:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:20:5D:33:E3:CE:06:5F:FD:28:3E:EB:A6:87:27:35:7F:82:35:A5
X509v3 Authority Key Identifier:
keyid:A7:AE:E6:76:20:D9:C0:AE:63:D2:95:78:5C:9D:95:6F:06:3C:21:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p67mdiDZwK5j0pV4XJ2VbwY8IcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2ba25a-0abd-4550-bca4-0b7f15b509cb/1/p67mdiDZwK5j0pV4XJ2VbwY8IcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:50:da:a1:66:1a:66:7e:0e:d5:85:92:12:7a:d1:bb:15:
ce:82:88:fa:51:67:d2:3c:1d:90:c9:66:9a:63:59:6a:1c:2d:
b3:f4:22:d2:4a:69:cb:e3:75:12:3f:22:32:d0:26:04:12:2e:
be:71:7a:a4:9b:2c:84:2b:f0:1e:c0:15:b3:fb:17:89:2e:3d:
de:bb:63:b1:d9:e4:aa:b6:ae:37:d9:2c:d0:6e:b5:cc:a7:43:
2d:8e:84:48:f1:20:7d:df:32:13:90:f6:89:35:45:e2:6a:99:
08:1b:59:ea:e6:61:e6:ec:4e:82:e6:c3:df:e8:d4:99:95:ca:
f9:86:17:5f:b3:35:7f:bc:35:87:73:7e:30:f2:2c:7e:69:05:
4b:57:8c:e5:cb:9a:ad:4d:08:b4:85:d5:f6:d5:cc:a9:00:10:
24:43:83:6b:13:1d:bd:b8:fe:32:07:0f:62:2f:0a:80:7b:a1:
af:0b:3a:2c:1c:4d:79:1a:12:0b:62:c4:b4:93:3f:ec:a2:63:
33:f4:3d:a8:b0:7b:1b:86:db:2c:b4:24:ab:f8:ee:75:af:80:
25:84:90:28:45:98:19:42:4e:f3:5f:59:5a:aa:32:1f:97:5d:
19:70:1a:4f:ee:c2:8b:82:ff:48:2b:fa:15:7a:81:29:b1:80:
a7:c3:0a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2EYadA8xmqIDvXy8foF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YWVlNjc2MjBkOWMwYWU2M2QyOTU3ODVjOWQ5NTZmMDYz
YzIxYzMwHhcNMjYwOTIyMDIwMDU3WhcNMjYwOTIzMDIwMDU3WjAzMTEwLwYDVQQD
EygxMjIwNWQzM2UzY2UwNjVmZmQyODNlZWJhNjg3MjczNTdmODIzNWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCdnluhi0Lj9jLt218hrXH5KweNR
5w4CUHvJFxA+2kB9vIQj2x4BmBnRh5+LfC/hzXW80+ahL5nZ35p8MlnpZFALnmmN
rkMxjyhMY7XUFO0YAF+Kxp4Zp6U3kEZlabJcBMjcmjXOC6EjWp56mgveySDuqulF
l2zEDt5OMEfkeMy8zQSu4TSVKMgsGZvU5L1akTwLrIoCFLP1KsMf2Hde6ToZj3HV
JSEWVHR0+WlwPQJqtH2qxCHCv5ZOQcEc2tVvYCfTFfHW8ZT/auUUHjtbUYvlzgDd
Onb+3pivKbqYEJcFgBxcCZbbRcWpM48v/+8ZlzG0t8rLWQs+sCtPXeDcKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBIgXTPjzgZf/Sg+66aHJzV/gjWlMB8GA1UdIwQY
MBaAFKeu5nYg2cCuY9KVeFydlW8GPCHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQt
MGI3ZjE1YjUwOWNiLzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yYmEyNWEtMGFiZC00NTUwLWJjYTQtMGI3ZjE1YjUwOWNi
LzEvcDY3bWRpRFp3SzVqMHBWNFhKMlZid1k4SWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMxQ2qFm
GmZ+DtWFkhJ60bsVzoKI+lFn0jwdkMlmmmNZahwts/Qi0kppy+N1Ej8iMtAmBBIu
vnF6pJsshCvwHsAVs/sXiS493rtjsdnkqrauN9ks0G61zKdDLY6ESPEgfd8yE5D2
iTVF4mqZCBtZ6uZh5uxOgubD3+jUmZXK+YYXX7M1f7w1h3N+MPIsfmkFS1eM5cua
rU0ItIXV9tXMqQAQJEODaxMdvbj+MgcPYi8KgHuhrws6LBxNeRoSC2LEtJM/7KJj
M/Q9qLB7G4bbLLQkq/juda+AJYSQKEWYGUJO819ZWqoyH5ddGXAaT+7Ci4L/SCv6
FXqBKbGAp8MKZA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:36:17 2026 by rpki-client