Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json)
Hash identifier: j2SC4m01UklKyYyvo3lvoeRsiFYUNgvZ41wiIClmAOw=
Subject key identifier: B7:52:00:3B:C5:AC:F0:77:3C:A3:03:4B:36:5D:15:BA:5D:0C:1E:9E
Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Certificate serial: 01A0BE42A1C0DAD1DEE78D0FF0BEA92477BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
Manifest number: 0A07
Signing time: Sun 20 Sep 2026 10:00:32 +0000
Manifest this update: Sun 20 Sep 2026 10:00:32 +0000
Manifest next update: Mon 21 Sep 2026 10:00:32 +0000
Files and hashes: 1: 1r95LK4HWizqALUZJhEWO2mRfys.roa (hash: a7n3lQCzMluTfryIIH6MTnQ1x4Z9vPgOFoHPe0ckSs8=)
2: 2nwagyLqxJwRqLdgTLA7_n4lSs8.roa (hash: 4fgPknlaVUuj1rnAi5TgALYEc9dAtHGP5otC5r0jNlo=)
3: 6N3xoZPe2eQVbNsjIZFngGfa3VM.roa (hash: tFoFVqeUGxu4Apov92KrkjVc4GER0DpKn92wl0890bo=)
4: 7MPluVravo2Zg570yKX0YG2N3n8.roa (hash: 1uXMPGhv4RMa4aedR0mQyuAIi9Pi5joQGyAwvqPRBLA=)
5: 8tSEwUH0JKaj9-b78A6P1HNWucA.roa (hash: /2i4x0ciVTUv5ry6RgoyWYRvzmYenJ7v0fQyaaOhTzk=)
6: D4d_4pxCPjZEGl90vALx44fXxu8.roa (hash: nJq9NCViYi/1CQ0r2u9R6OYAeLLC1B3FaJoObbBwLb8=)
7: XiJSnqUnbwsKfWxUtA9oWKzznIk.roa (hash: il5+2Wom7vPDCFPGBRmCP1wr3fGf4op2yuM4yZALCHs=)
8: ZoZb90LpJA9Ip-2MHkdgs69BJlw.roa (hash: Vsdm6rW7baX27WeKyLbDvpzx2QoVqvnpUMNu9ywBMO4=)
9: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: eKr05l5H91Egb9w8cgps183zhB+LTsdtWRhOddaUhlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:a1:c0:da:d1:de:e7:8d:0f:f0:be:a9:24:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d
Validity
Not Before: Sep 20 10:00:32 2026 GMT
Not After : Sep 21 10:00:32 2026 GMT
Subject: CN=b752003bc5acf0773ca3034b365d15ba5d0c1e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:17:b7:97:99:3e:1c:20:53:e2:9a:a4:9a:76:
41:ec:1d:69:37:32:4b:33:cc:21:ab:1a:e4:60:bd:
ad:7a:96:31:0e:b2:f9:de:7d:0a:42:5d:e0:13:13:
a9:ea:5a:05:13:d1:2f:c4:d7:dd:4b:fb:0a:e8:8d:
ab:7b:05:62:c8:3d:9e:cc:c1:36:eb:a7:ef:5a:d4:
39:97:8e:ba:31:d2:c8:b0:30:e6:ef:09:63:b9:86:
3b:37:91:1d:28:d7:11:16:1d:e1:ba:ae:a3:ff:b4:
91:0d:ab:df:a9:3d:b5:40:85:38:ba:74:48:64:86:
d8:82:d1:17:69:a0:c5:34:a0:b4:fb:d9:bc:4a:19:
00:93:4b:7d:a5:a8:63:1a:d5:cf:15:3b:ee:f8:e4:
1c:87:76:f2:1d:00:23:70:9f:d1:bf:b1:0a:b2:cc:
46:f5:d8:ae:66:bf:62:bf:44:28:e1:aa:08:14:fc:
7d:c9:26:c1:bf:f7:9a:7e:a7:3e:ba:cf:1e:49:f2:
39:2a:55:93:38:61:24:6d:d5:fa:27:46:a9:b0:b3:
33:bc:e5:02:97:00:cc:8c:13:e0:65:7b:ec:e0:c9:
8f:dc:05:7a:2f:24:12:0a:fa:9e:f4:32:d9:ef:16:
27:2e:22:9d:a8:a5:a5:36:ac:13:83:83:63:95:d0:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:00:3B:C5:AC:F0:77:3C:A3:03:4B:36:5D:15:BA:5D:0C:1E:9E
X509v3 Authority Key Identifier:
keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7d:dd:bd:a5:86:59:25:9c:b4:39:5d:dc:27:e8:11:e9:79:
fb:c5:60:83:9e:c0:07:9c:04:dd:34:2a:2e:d4:d2:51:fb:40:
34:ea:68:0a:08:3c:bd:e5:8b:e2:5b:d4:d4:62:15:04:33:3f:
4c:64:71:f7:df:68:37:aa:63:ba:ba:f9:7d:0b:3c:fb:5f:ec:
b4:48:74:83:89:32:3c:14:20:c8:57:86:d1:72:fc:cd:5e:4b:
e6:86:87:1b:05:38:bd:18:31:92:25:09:cf:28:42:f1:d1:cf:
94:91:4b:9c:36:dc:60:7f:52:90:9e:0e:d4:ec:cd:b1:d3:f9:
a8:d6:a6:61:55:34:97:db:5b:65:03:19:0e:b2:fd:69:d8:df:
b2:ca:0f:24:29:fc:12:66:9c:33:43:26:38:25:aa:7e:45:db:
53:f4:40:c9:4c:eb:be:f8:04:e8:62:80:de:b3:a5:45:d1:0d:
aa:17:96:47:13:d5:55:a2:6d:a0:a0:88:d4:7e:dd:63:d8:f6:
4f:b6:d6:87:37:0f:2d:84:c5:62:68:66:64:c9:64:22:a2:dc:
aa:71:bf:e1:54:65:f4:e9:32:b0:5d:4e:93:41:e0:36:86:37:
2d:81:47:5d:52:db:e1:b4:44:2a:76:5b:c1:0f:d0:41:fd:08:
79:b9:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:27:27 2026 by rpki-client