Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
File: mi8HAdemPPPRk2lcOV0aH3gzXM8.mft (raw, json)
Hash identifier: cAlFRoooCraxbA+zd0NOJFE95msnrrvf52y6HrbKemI=
Subject key identifier: 8D:74:6F:28:B5:97:D4:14:E2:0D:2E:A0:F5:2B:25:DF:0F:D6:2D:C8
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01A0C332594A9123567783A9FF1DA881A1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
Manifest number: 1757
Signing time: Mon 21 Sep 2026 09:00:51 +0000
Manifest this update: Mon 21 Sep 2026 09:00:51 +0000
Manifest next update: Tue 22 Sep 2026 09:00:51 +0000
Files and hashes: 1: CKCofthc_5QsmvvxxMkq99F6nD8.roa (hash: 2ut3B1GYgmXcwJO530EMSyVMmk7e0gGaaT9X5CFd6t0=)
2: GUeXMFK9SoEQ7EUEYtFFmm87ss0.roa (hash: XHapLYq++Wu54R43JHXxNljb7oNTeSO7iMt9Aug+VYo=)
3: mi8HAdemPPPRk2lcOV0aH3gzXM8.crl (hash: lttUSsDrlbXVCcS1Rc8eU9C2YaPC7RkqC0UKeMkHvec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:59:4a:91:23:56:77:83:a9:ff:1d:a8:81:a1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Sep 21 09:00:51 2026 GMT
Not After : Sep 22 09:00:51 2026 GMT
Subject: CN=8d746f28b597d414e20d2ea0f52b25df0fd62dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:e1:50:7c:5c:71:c6:8a:7e:61:c1:b3:33:
46:05:d5:fa:fa:0d:a0:6a:7d:81:d4:c3:eb:80:ec:
71:55:fb:f1:bb:43:46:42:9b:0d:b9:5c:8c:9b:96:
14:93:00:c8:00:d4:4c:aa:b8:05:f6:bb:b9:06:29:
40:13:f6:30:49:5d:67:19:fa:d2:16:96:ab:b4:65:
2a:7f:20:7e:8a:88:af:1f:36:05:06:aa:8e:05:98:
ba:1b:b4:bc:23:16:dc:c0:8b:45:60:fa:d5:8f:10:
01:c4:49:96:9d:75:39:ba:76:67:96:dc:46:70:41:
75:d5:1a:e1:c5:5a:3e:d2:cc:c1:0a:3d:a1:49:f8:
75:19:60:85:0c:f9:60:4b:b6:0e:e0:19:c3:aa:7c:
db:6e:48:65:70:9d:20:fa:82:a4:e4:a1:a1:9b:a1:
fa:7a:37:2b:ee:fa:32:f4:33:c6:a1:c3:92:47:b2:
90:fd:14:a8:47:87:7e:84:c2:00:a3:46:c1:45:64:
58:5c:a2:ca:07:0e:5a:29:29:1d:ff:ce:a7:9c:4b:
1b:95:8b:4b:12:1d:2e:a2:08:e7:a6:26:dc:63:47:
37:a5:85:54:9f:0a:61:67:b5:b3:b6:68:20:89:76:
1d:08:10:c2:95:69:a3:c5:18:88:9e:8e:53:e7:10:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:74:6F:28:B5:97:D4:14:E2:0D:2E:A0:F5:2B:25:DF:0F:D6:2D:C8
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:21:59:ff:58:25:25:32:e5:ce:fc:c9:62:14:2c:7d:41:ed:
71:1c:67:62:23:ca:a5:cc:a9:a3:e0:35:d7:28:26:98:f1:18:
0b:05:78:17:4d:dd:5d:e9:0d:fe:ac:64:c6:ed:c7:3f:88:31:
86:82:64:18:d0:55:71:a8:31:a3:6f:0f:65:57:d5:c2:40:3c:
e4:21:e9:0e:26:bc:a0:76:6a:0a:33:6b:e5:20:05:f4:bb:6b:
05:10:51:bd:70:40:7f:dd:24:ed:4c:43:cf:13:d4:13:fc:7b:
12:ed:da:57:ab:f8:bd:ce:01:ab:23:26:f9:b6:7e:47:04:0d:
20:10:b8:a7:85:d6:cd:38:37:05:b7:66:8a:a0:c7:1c:8a:53:
ad:90:e6:29:b1:79:06:61:92:51:6c:06:13:a3:33:d8:ae:d1:
72:6b:07:67:d1:45:b5:40:85:1f:77:f5:14:b7:d7:fe:a0:28:
a7:98:c4:cc:5a:aa:62:38:7d:10:14:2b:83:2a:b8:23:4c:dc:
b0:0d:b5:c7:d5:e2:3c:15:ab:29:a0:f5:c1:43:a5:4a:90:42:
06:3d:9a:e6:fb:45:16:6a:b0:9d:98:48:87:60:7e:af:f8:cf:
87:c9:40:e3:36:dc:6a:7c:98:46:22:e8:e1:b1:34:72:56:f2:
fe:b0:8e:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMllKkSNWd4Op/x2ogaGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmYwNzAxZDdhNjNjZjNkMTkzNjk1YzM5NWQxYTFmNzgz
MzVjY2YwHhcNMjYwOTIxMDkwMDUxWhcNMjYwOTIyMDkwMDUxWjAzMTEwLwYDVQQD
Eyg4ZDc0NmYyOGI1OTdkNDE0ZTIwZDJlYTBmNTJiMjVkZjBmZDYyZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v3hUHxcccaKfmHBszNGBdX6+g2g
an2B1MPrgOxxVfvxu0NGQpsNuVyMm5YUkwDIANRMqrgF9ru5BilAE/YwSV1nGfrS
FpartGUqfyB+ioivHzYFBqqOBZi6G7S8IxbcwItFYPrVjxABxEmWnXU5unZnltxG
cEF11RrhxVo+0szBCj2hSfh1GWCFDPlgS7YO4BnDqnzbbkhlcJ0g+oKk5KGhm6H6
ejcr7voy9DPGocOSR7KQ/RSoR4d+hMIAo0bBRWRYXKLKBw5aKSkd/86nnEsblYtL
Eh0uogjnpibcY0c3pYVUnwphZ7WztmggiXYdCBDClWmjxRiIno5T5xBTGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI10byi1l9QU4g0uoPUrJd8P1i3IMB8GA1UdIwQY
MBaAFJovBwHXpjzz0ZNpXDldGh94M1zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjct
NzM3MTdjNTZiNmYzLzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZWZhZDYtYzlhNC00ODM4LWJkNjctNzM3MTdjNTZiNmYz
LzEvbWk4SEFkZW1QUFBSazJsY09WMGFIM2d6WE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyFZ/1gl
JTLlzvzJYhQsfUHtcRxnYiPKpcypo+A11ygmmPEYCwV4F03dXekN/qxkxu3HP4gx
hoJkGNBVcagxo28PZVfVwkA85CHpDia8oHZqCjNr5SAF9LtrBRBRvXBAf90k7UxD
zxPUE/x7Eu3aV6v4vc4BqyMm+bZ+RwQNIBC4p4XWzTg3BbdmiqDHHIpTrZDmKbF5
BmGSUWwGE6Mz2K7RcmsHZ9FFtUCFH3f1FLfX/qAop5jEzFqqYjh9EBQrgyq4I0zc
sA21x9XiPBWrKaD1wUOlSpBCBj2a5vtFFmqwnZhIh2B+r/jPh8lA4zbcanyYRiLo
4bE0clby/rCOvA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:40:34 2026 by rpki-client