Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: fcDkdKoUfvRhR6vHk/ad1x+4faCBOviCmBodHaxnAWg=
Subject key identifier: 49:8C:BA:FE:DB:99:9C:07:AA:10:81:40:04:DE:09:87:90:71:39:80
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 01A0DF859A74BE759C082BEB14C635775B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0973
Signing time: Sat 26 Sep 2026 21:01:10 +0000
Manifest this update: Sat 26 Sep 2026 21:01:10 +0000
Manifest next update: Sun 27 Sep 2026 21:01:10 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: nM7pz2rjGGc/wSJqXigigY3wK5PImt4y3urxvvmDT4Q=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:9a:74:be:75:9c:08:2b:eb:14:c6:35:77:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Sep 26 21:01:10 2026 GMT
Not After : Sep 27 21:01:10 2026 GMT
Subject: CN=498cbafedb999c07aa10814004de098790713980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:c8:03:8d:de:85:cd:2a:96:f1:0d:8b:d3:
4a:ec:62:eb:73:42:1b:96:a6:cf:99:24:65:a7:d3:
fa:55:f7:d6:a2:fc:cf:76:cc:2c:65:e6:e8:16:0f:
77:e0:9c:7b:b6:f5:5c:ed:35:79:91:1b:76:94:d7:
fc:e2:af:9d:55:25:5a:fe:e1:07:96:1b:50:00:53:
17:0c:cd:29:8a:62:a9:21:0b:c4:d5:9d:80:e6:21:
e4:4c:77:14:ee:09:08:e2:3b:42:0f:19:e2:d8:94:
b7:22:22:b4:8b:00:eb:0e:f2:ee:0b:b3:1a:7e:a9:
06:4c:02:6b:a5:b9:d6:9c:08:c2:d7:7e:65:3c:37:
c5:a2:01:e4:35:c2:97:10:d8:99:d4:2b:9f:d8:63:
2a:10:09:1a:18:e5:a1:7e:53:4b:a2:2a:21:a6:81:
24:c8:89:84:3d:92:d3:4e:9c:1f:97:a5:03:40:37:
37:38:2e:6e:59:ed:a0:6d:be:a8:bd:a7:4e:75:c9:
d3:a1:1f:2d:f8:6e:42:b3:e2:b1:fc:c7:5b:c2:9a:
6b:f8:b3:41:b2:25:11:3f:50:19:14:8d:66:68:f8:
8d:38:71:d8:f5:b9:18:c3:ab:ba:cb:6f:c7:09:4f:
f5:8a:55:ed:76:c4:81:7f:d1:60:13:c6:b9:bd:40:
46:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:BA:FE:DB:99:9C:07:AA:10:81:40:04:DE:09:87:90:71:39:80
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4f:65:e0:ea:24:16:ca:35:2e:eb:db:08:18:29:3c:62:01:
56:c0:c9:96:72:0c:f5:df:fb:c3:87:67:66:ba:c6:4b:8d:b1:
5a:88:7a:8c:8b:b5:16:4e:36:44:73:fa:92:27:0c:e1:0d:be:
0e:3e:72:16:3d:1f:48:9e:d4:ac:2d:26:61:72:77:1c:51:1c:
bb:f5:b1:57:cc:a1:86:eb:c3:a4:db:3f:43:08:be:b1:e4:09:
d3:d4:ca:87:a9:9d:6c:ce:1e:1e:25:f3:02:41:d1:85:09:a0:
3d:0c:66:a9:55:a3:e6:96:92:2b:4b:90:6f:a5:86:e2:1e:ff:
80:94:2a:ab:70:e8:77:3a:6a:a9:5b:29:49:8a:1b:87:33:b8:
b9:0d:27:36:7e:a5:49:b3:e6:14:1d:df:8b:54:0e:e0:11:e6:
54:76:41:46:f4:19:87:03:36:34:60:e6:0c:b2:f2:45:cb:22:
14:b1:0c:16:8e:83:29:8b:f8:02:e4:9a:9f:ca:32:ae:28:9e:
57:27:6e:a5:86:db:f6:bc:94:a0:89:9f:ae:a6:ef:0e:2e:8d:
4a:03:3d:34:2d:79:b7:da:cd:22:03:db:a1:8f:9e:5e:05:c4:
65:4d:90:a4:4b:83:ba:0c:41:a0:93:60:d2:74:8e:21:6b:43:
e1:d0:02:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfhZp0vnWcCCvrFMY1d1uAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi
ZDNjNmUwHhcNMjYwOTI2MjEwMTEwWhcNMjYwOTI3MjEwMTEwWjAzMTEwLwYDVQQD
Eyg0OThjYmFmZWRiOTk5YzA3YWExMDgxNDAwNGRlMDk4NzkwNzEzOTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdfIA43ehc0qlvENi9NK7GLrc0Ib
lqbPmSRlp9P6VffWovzPdswsZeboFg934Jx7tvVc7TV5kRt2lNf84q+dVSVa/uEH
lhtQAFMXDM0pimKpIQvE1Z2A5iHkTHcU7gkI4jtCDxni2JS3IiK0iwDrDvLuC7Ma
fqkGTAJrpbnWnAjC135lPDfFogHkNcKXENiZ1Cuf2GMqEAkaGOWhflNLoiohpoEk
yImEPZLTTpwfl6UDQDc3OC5uWe2gbb6ovadOdcnToR8t+G5Cs+Kx/Mdbwppr+LNB
siURP1AZFI1maPiNOHHY9bkYw6u6y2/HCU/1ilXtdsSBf9FgE8a5vUBGkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEmMuv7bmZwHqhCBQATeCYeQcTmAMB8GA1UdIwQY
MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt
NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1
LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK09l4Ook
Fso1LuvbCBgpPGIBVsDJlnIM9d/7w4dnZrrGS42xWoh6jIu1Fk42RHP6kicM4Q2+
Dj5yFj0fSJ7UrC0mYXJ3HFEcu/WxV8yhhuvDpNs/Qwi+seQJ09TKh6mdbM4eHiXz
AkHRhQmgPQxmqVWj5paSK0uQb6WG4h7/gJQqq3DodzpqqVspSYobhzO4uQ0nNn6l
SbPmFB3fi1QO4BHmVHZBRvQZhwM2NGDmDLLyRcsiFLEMFo6DKYv4AuSan8oyriie
VydupYbb9ryUoImfrqbvDi6NSgM9NC15t9rNIgPboY+eXgXEZU2QpEuDugxBoJNg
0nSOIWtD4dACVw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:47:38 2026 by rpki-client