
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
File: 9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json)
Hash identifier: JgZXO6cfk5UvmcZQrDW2g6yzyt7crHSKlJvqfhaSUVQ=
Subject key identifier: 30:6B:CB:53:32:A7:D7:B0:9B:65:1F:52:3A:36:68:1B:8B:E7:78:F5
Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Certificate serial: 01A0C33204BD43F8E2F4E7B18F34A670C755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
Manifest number: 1A8A
Signing time: Mon 21 Sep 2026 09:00:30 +0000
Manifest this update: Mon 21 Sep 2026 09:00:30 +0000
Manifest next update: Tue 22 Sep 2026 09:00:30 +0000
Files and hashes: 1: 8fe7vh9jlC7sRb2AcledmmwLoTI.roa (hash: XpslvQuy8ogh+8d35d9QaAhjHcrSzIzGG1EtFja7tAo=)
2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: aXfsMA0gCcjXJyTTPbj6um39zIFbaS0yk6TmuHz47GQ=)
3: MNQFqrdvbEoxedHfrXynKifNGnY.roa (hash: O31r8g9C5kBDn8OSezJHwFB/Y59lZjW3Z0fIfncmogI=)
4: VUzs5PHBwv_IZAQ0YfQuuthXe9o.roa (hash: VhBI1T/5AecSPfuyckIzymKWt28IdtuZyGt1Fke7X9o=)
5: caVc06HNLW27H40D2ZS_Rm7EWak.roa (hash: fii3aeyQKBbFgN7LjEGw9LVQBRaholnm8HqVAqTYdaM=)
6: uKVnkxpc55UHCp4G3gmfBYK9lgA.roa (hash: Yl+4aX3AL4iwnArD6mGCgp0IBTVDchipN4aGOMzOCE4=)
7: xqtPQpmSw8BM5RyqcwITHIfXLSc.roa (hash: hGp4Jg8lf+rbg8QFIZWOCXC5lP9F5Y5cQtGXi8sQzqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:04:bd:43:f8:e2:f4:e7:b1:8f:34:a6:70:c7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba
Validity
Not Before: Sep 21 09:00:30 2026 GMT
Not After : Sep 22 09:00:30 2026 GMT
Subject: CN=306bcb5332a7d7b09b651f523a36681b8be778f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:e6:7a:b2:87:e4:aa:eb:ea:6b:55:27:36:
eb:87:d6:2c:60:fb:92:66:41:3f:7d:65:f7:69:ee:
c4:27:8e:90:55:02:25:1e:73:90:aa:47:16:89:fb:
0d:ad:b9:c3:30:01:1e:59:e6:fb:f1:55:b6:ff:73:
be:8a:20:ef:29:4d:28:fc:a0:f6:95:8d:28:8d:db:
8f:68:d9:22:94:92:65:e0:32:a8:78:2d:fe:d1:c2:
46:2b:2b:8c:f4:61:ae:20:48:10:5c:f9:9f:24:84:
19:66:c5:aa:da:8b:3b:52:91:01:2a:2c:cc:07:c3:
a5:e3:43:d3:a1:3f:0e:b5:ff:bc:da:c5:a1:c0:2c:
32:02:16:c5:47:f8:a8:5a:1e:5d:62:ee:dc:62:fc:
0e:d0:e7:2b:e5:12:68:6a:be:71:e9:ff:32:cf:79:
b9:77:c3:37:3c:a7:0e:cf:b0:5b:7b:90:9c:96:54:
89:d9:46:bd:1f:68:37:ec:8b:a5:24:bd:6f:24:8d:
79:88:1a:7d:20:05:7b:2b:1b:4b:98:60:3e:90:f9:
fc:39:f8:36:32:55:73:4b:a4:05:03:aa:8f:85:7d:
4b:77:51:0b:2b:dd:f2:2b:06:af:35:1c:77:7d:f0:
78:6a:78:2c:4d:c9:e0:5c:4f:5a:70:f9:91:7c:92:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6B:CB:53:32:A7:D7:B0:9B:65:1F:52:3A:36:68:1B:8B:E7:78:F5
X509v3 Authority Key Identifier:
keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:41:39:1f:16:9c:cc:94:48:d9:0e:56:b7:66:24:21:bb:9d:
5f:40:64:b9:2d:56:cc:bb:cf:2e:6c:25:03:fe:7c:d3:f1:ff:
82:66:7e:52:93:f5:00:e5:31:7f:91:72:b5:07:31:a2:5d:60:
0d:5e:f8:20:01:4a:ba:63:c6:49:41:9f:af:5b:9d:63:ee:9d:
e3:e3:d6:b9:b9:3f:cd:60:bc:98:f9:fe:a7:3d:19:6f:29:1f:
75:00:45:41:9f:3d:80:20:4d:d3:a3:88:39:e6:6f:b6:5e:83:
f3:4e:48:bd:2c:59:05:76:9e:7f:df:9d:87:58:eb:49:16:20:
88:ca:29:2e:9f:07:ac:95:51:ff:72:11:41:4c:35:90:76:be:
26:5e:89:e2:c1:30:98:19:4b:ff:31:2b:50:f4:8c:c2:c2:bf:
1e:49:d1:fb:4b:8b:0d:2b:d2:07:4d:b0:0d:b2:a2:1a:66:ef:
f1:92:e3:e7:4b:f1:1d:82:5d:57:ed:14:92:ec:1f:0c:a7:a4:
20:40:3e:6e:3e:a7:94:b7:d6:89:24:5c:35:4e:87:25:2d:51:
29:1a:af:54:5a:1a:d1:74:45:d1:4b:6d:9f:49:9f:47:82:1e:
b4:2f:2f:c7:11:e2:44:de:12:2b:e3:09:c2:cc:1e:aa:88:2f:
0c:a3:79:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMgS9Q/ji9OexjzSmcMdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5
YzJkYmEwHhcNMjYwOTIxMDkwMDMwWhcNMjYwOTIyMDkwMDMwWjAzMTEwLwYDVQQD
EygzMDZiY2I1MzMyYTdkN2IwOWI2NTFmNTIzYTM2NjgxYjhiZTc3OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7M/merKH5Krr6mtVJzbrh9YsYPuS
ZkE/fWX3ae7EJ46QVQIlHnOQqkcWifsNrbnDMAEeWeb78VW2/3O+iiDvKU0o/KD2
lY0ojduPaNkilJJl4DKoeC3+0cJGKyuM9GGuIEgQXPmfJIQZZsWq2os7UpEBKizM
B8Ol40PToT8Otf+82sWhwCwyAhbFR/ioWh5dYu7cYvwO0Ocr5RJoar5x6f8yz3m5
d8M3PKcOz7Bbe5CcllSJ2Ua9H2g37IulJL1vJI15iBp9IAV7KxtLmGA+kPn8Ofg2
MlVzS6QFA6qPhX1Ld1ELK93yKwavNRx3ffB4angsTcngXE9acPmRfJLNwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBry1Myp9ewm2UfUjo2aBuL53j1MB8GA1UdIwQY
MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt
ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3
LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEE5Hxac
zJRI2Q5Wt2YkIbudX0BkuS1WzLvPLmwlA/580/H/gmZ+UpP1AOUxf5FytQcxol1g
DV74IAFKumPGSUGfr1udY+6d4+PWubk/zWC8mPn+pz0ZbykfdQBFQZ89gCBN06OI
OeZvtl6D805IvSxZBXaef9+dh1jrSRYgiMopLp8HrJVR/3IRQUw1kHa+Jl6J4sEw
mBlL/zErUPSMwsK/HknR+0uLDSvSB02wDbKiGmbv8ZLj50vxHYJdV+0UkuwfDKek
IEA+bj6nlLfWiSRcNU6HJS1RKRqvVFoa0XRF0Uttn0mfR4IetC8vxxHiRN4SK+MJ
wsweqogvDKN58A==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:52:12 2026 by rpki-client