Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json)
Hash identifier: FMp97omt+l1mKYtQZOoJEhyhu8X9cCuzMG6v2iz6Kh4=
Subject key identifier: 62:F5:60:79:10:69:42:4D:49:66:B6:A4:14:C2:16:2D:23:E5:C4:9D
Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Certificate serial: 01A13F024EBD8606BC98158FC8B8EA8E10C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 10:01:18 +0000
Manifest this update: Thu 15 Oct 2026 10:01:18 +0000
Manifest next update: Fri 16 Oct 2026 10:01:18 +0000
Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: 3sLf7TbmD8xCFgKe14zRMdtjsSe5zYTDFcj7A9LsnfE=)
2: smlZ7JTHvm4P3nZNzZsryZ_yA5A.roa (hash: +VBNM06YqR+uhNJp3b1HBKPNStgs2sJGwRLlTNxj+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:4e:bd:86:06:bc:98:15:8f:c8:b8:ea:8e:10:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72
Validity
Not Before: Oct 15 10:01:18 2026 GMT
Not After : Oct 16 10:01:18 2026 GMT
Subject: CN=62f560791069424d4966b6a414c2162d23e5c49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:63:35:2e:25:77:f6:8a:2c:b4:17:34:61:
09:74:cf:99:c4:39:c3:08:12:5c:a1:f3:06:e8:87:
75:93:8c:e1:07:b6:6f:2e:14:2c:ec:b8:2c:2a:ca:
d9:8e:eb:6f:99:d7:31:f7:13:57:d9:4a:10:96:2e:
2a:17:05:75:b3:69:a3:81:a7:4e:b3:8c:27:e8:90:
69:98:52:e0:aa:13:a9:63:ce:9c:00:05:f7:72:fc:
6c:6a:d2:aa:f3:68:2a:46:2c:17:69:32:2e:3e:fd:
62:8c:2a:25:b8:86:78:62:52:d7:12:a4:20:74:1d:
d7:2b:d4:df:d2:f5:4a:3d:97:a5:79:9d:d5:92:ae:
e1:92:18:84:ba:9b:b6:ef:13:dd:27:7e:67:60:6a:
13:26:5b:5c:39:f6:cd:05:03:d4:bd:c3:fe:65:ef:
53:67:22:ae:94:84:8f:77:0b:3f:bc:cc:2c:1d:da:
cc:19:63:d1:77:a4:0a:2a:a2:34:c9:04:d4:82:19:
ea:28:6a:3c:f0:a8:b3:28:21:7c:ed:1a:22:54:00:
5d:9c:2a:21:fa:81:c0:42:3f:88:65:93:d7:28:88:
4f:9e:23:82:20:d3:08:32:90:89:39:bb:d0:6f:46:
5d:67:19:68:5d:e9:ca:b6:97:fd:36:ab:c9:f7:17:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F5:60:79:10:69:42:4D:49:66:B6:A4:14:C2:16:2D:23:E5:C4:9D
X509v3 Authority Key Identifier:
keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6e:16:97:d4:aa:3a:f3:57:73:7d:b7:c8:8d:6d:f4:0c:fa:
12:97:cc:5c:ca:53:52:a5:45:3a:85:5a:9d:32:c3:df:08:2c:
b6:2d:d7:9c:de:58:68:93:8b:9d:10:bd:9e:f7:a8:b1:1a:44:
60:d2:2b:fd:7f:2e:74:25:14:b8:e9:6f:9c:eb:8d:dc:a2:90:
a5:ba:7f:22:fc:2d:d2:43:dc:df:0c:51:bc:60:f6:b5:c6:1a:
51:fd:4e:c3:82:9a:16:1e:4a:2f:6a:26:7e:6f:82:85:b1:e6:
53:64:63:d9:a8:c0:c3:68:4e:9b:4e:31:0c:f5:f0:e1:f4:43:
56:f2:d6:6a:04:d4:ba:01:a8:cc:5f:e0:62:4d:7f:23:1c:79:
43:a7:05:f5:16:cc:02:a9:80:03:ae:a7:fd:3d:30:a7:21:71:
91:a5:f5:21:a0:b3:fc:c2:af:b6:bc:44:ac:28:a5:9b:8d:c4:
35:c3:4d:1d:b3:53:67:22:b7:a0:d5:51:51:6e:3a:ae:a3:e5:
4f:a2:32:70:e0:c4:08:ec:9e:8e:c6:3e:c4:e8:81:af:88:c2:
72:b4:94:8b:ac:03:ac:b3:ef:8d:27:fb:9d:c3:78:ad:3b:a5:
fb:47:b9:77:f5:50:98:15:d8:0b:c9:be:dd:d7:c1:80:43:f6:
0f:f1:2c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/Ak69hga8mBWPyLjqjhDAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2JjN2YyZWFmMGNhZmE2OWJlZTVmYWJlNjcxMjJiNDM2
M2ZlNzIwHhcNMjYxMDE1MTAwMTE4WhcNMjYxMDE2MTAwMTE4WjAzMTEwLwYDVQQD
Eyg2MmY1NjA3OTEwNjk0MjRkNDk2NmI2YTQxNGMyMTYyZDIzZTVjNDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX5jNS4ld/aKLLQXNGEJdM+ZxDnD
CBJcofMG6Id1k4zhB7ZvLhQs7LgsKsrZjutvmdcx9xNX2UoQli4qFwV1s2mjgadO
s4wn6JBpmFLgqhOpY86cAAX3cvxsatKq82gqRiwXaTIuPv1ijColuIZ4YlLXEqQg
dB3XK9Tf0vVKPZeleZ3Vkq7hkhiEupu27xPdJ35nYGoTJltcOfbNBQPUvcP+Ze9T
ZyKulISPdws/vMwsHdrMGWPRd6QKKqI0yQTUghnqKGo88KizKCF87RoiVABdnCoh
+oHAQj+IZZPXKIhPniOCINMIMpCJObvQb0ZdZxloXenKtpf9NqvJ9xebgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGL1YHkQaUJNSWa2pBTCFi0j5cSdMB8GA1UdIwQY
MBaAFPV7x/Lq8Mr6ab7l+r5nEitDY/5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTkt
MTAxMDQ3M2Y0ZmU4LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTktMTAxMDQ3M2Y0ZmU4
LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW4Wl9Sq
OvNXc323yI1t9Az6EpfMXMpTUqVFOoVanTLD3wgsti3XnN5YaJOLnRC9nveosRpE
YNIr/X8udCUUuOlvnOuN3KKQpbp/Ivwt0kPc3wxRvGD2tcYaUf1Ow4KaFh5KL2om
fm+ChbHmU2Rj2ajAw2hOm04xDPXw4fRDVvLWagTUugGozF/gYk1/Ixx5Q6cF9RbM
AqmAA66n/T0wpyFxkaX1IaCz/MKvtrxErCilm43ENcNNHbNTZyK3oNVRUW46rqPl
T6IycODECOyejsY+xOiBr4jCcrSUi6wDrLPvjSf7ncN4rTul+0e5d/VQmBXYC8m+
3dfBgEP2D/EsTQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:19:42 2026 by rpki-client