Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json)
Hash identifier: XQLDZulhPY/QrVeG8xmw2EY/otC/CGKq4FdgXRdPe2s=
Subject key identifier: 7A:7B:05:AB:D4:F6:3C:47:1F:2F:E9:A4:11:B2:00:D7:F8:1B:FA:41
Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Certificate serial: 01A0C2FACD923F8B7985AF0144D6D5F7B74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
Manifest number: 0AC9
Signing time: Mon 21 Sep 2026 08:00:11 +0000
Manifest this update: Mon 21 Sep 2026 08:00:11 +0000
Manifest next update: Tue 22 Sep 2026 08:00:11 +0000
Files and hashes: 1: 0DAQlpT9x-QaKyJ8cOE4xeRFybQ.roa (hash: cLzURrgNbzm6pPzLt8hQc5OKqgGCPtGdJQ9/RRN5LZU=)
2: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: SUqBhuzhG/QDO67QI5lkLCVdgqe48ym8jxJXgnl/BoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fa:cd:92:3f:8b:79:85:af:01:44:d6:d5:f7:b7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9
Validity
Not Before: Sep 21 08:00:11 2026 GMT
Not After : Sep 22 08:00:11 2026 GMT
Subject: CN=7a7b05abd4f63c471f2fe9a411b200d7f81bfa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:15:ca:83:83:52:57:ce:b8:d0:7c:c2:fd:
16:68:08:cd:71:e4:ac:50:84:38:bb:f4:dd:cc:76:
e8:11:92:a5:d1:89:a8:eb:6b:99:45:20:f7:f7:08:
2e:3b:78:82:b9:34:b3:1b:8f:cd:13:df:5e:c7:3d:
68:6c:dd:8f:f4:d4:a8:f9:5e:17:66:81:48:29:c4:
07:e5:e1:f2:0f:88:07:04:39:28:65:21:2a:47:30:
a6:88:51:50:ae:4f:d2:26:f4:2c:18:27:41:4c:8f:
26:e4:fe:2c:86:fe:23:34:bf:47:eb:32:7e:6b:72:
11:7f:6f:22:f2:1d:24:58:31:94:36:c3:20:b8:88:
3e:5a:4a:2e:bc:be:9b:c0:a4:d7:2a:59:62:ab:8d:
e4:d1:30:10:51:8f:61:cc:ca:ac:48:62:93:1e:86:
60:34:31:4b:bc:1c:b3:59:e9:87:75:80:d4:a5:f8:
4a:ce:93:14:2a:7d:4f:00:42:e3:23:72:7c:1f:4b:
5a:6d:69:65:14:78:31:24:c1:73:7e:92:9e:6e:fc:
40:84:a0:b1:3e:8b:b1:8b:f4:0a:a6:6c:ed:9d:f4:
d4:19:f0:84:7a:77:55:c1:13:47:34:4e:52:50:d8:
a9:e0:cd:4e:bb:4d:52:da:bf:e7:20:5f:17:e7:4e:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:05:AB:D4:F6:3C:47:1F:2F:E9:A4:11:B2:00:D7:F8:1B:FA:41
X509v3 Authority Key Identifier:
keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a6:e8:0e:a1:19:c7:1e:5e:62:2d:73:75:fa:65:85:95:73:
67:6e:91:7f:b7:18:ca:ef:24:9f:e1:29:3c:91:fd:42:3e:e2:
89:24:f7:a3:c3:31:8d:6c:57:af:9f:5d:ae:a7:bf:20:40:a9:
b5:e8:59:88:f1:88:40:e2:d0:7e:b1:ec:f8:09:5b:e4:11:1c:
b1:40:ef:94:fc:fe:3f:e3:5b:9b:da:14:f9:46:64:7c:dc:66:
ec:3f:4c:ca:af:34:c1:da:d7:97:17:58:35:26:00:d9:2f:aa:
83:5e:a5:ba:3c:84:50:17:9f:e5:84:73:cd:d0:3f:5e:36:dc:
f7:11:47:d8:80:17:f0:66:be:ce:9d:fb:a7:79:c2:89:11:3b:
9c:ea:b2:e0:88:fa:a6:b6:b9:77:ea:83:73:b8:82:ff:79:e1:
53:37:79:b2:c6:79:8a:68:59:b6:2b:6a:e9:ca:9d:01:08:5d:
cd:f8:31:2e:29:f5:ac:e9:85:f5:aa:ae:05:ea:42:f5:44:38:
8e:8b:e4:58:0a:52:92:51:62:48:ad:bd:ca:12:d6:f3:c7:bc:
2d:c3:3b:36:99:c0:5e:41:02:aa:24:ee:c1:5a:d8:8b:71:d1:
42:9b:06:87:b7:2c:65:0e:3c:ff:97:84:a4:24:53:e3:83:a8:
8c:ae:1c:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+s2SP4t5ha8BRNbV97dLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5
MjlhYzkwHhcNMjYwOTIxMDgwMDExWhcNMjYwOTIyMDgwMDExWjAzMTEwLwYDVQQD
Eyg3YTdiMDVhYmQ0ZjYzYzQ3MWYyZmU5YTQxMWIyMDBkN2Y4MWJmYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEIVyoODUlfOuNB8wv0WaAjNceSs
UIQ4u/TdzHboEZKl0Ymo62uZRSD39wguO3iCuTSzG4/NE99exz1obN2P9NSo+V4X
ZoFIKcQH5eHyD4gHBDkoZSEqRzCmiFFQrk/SJvQsGCdBTI8m5P4shv4jNL9H6zJ+
a3IRf28i8h0kWDGUNsMguIg+WkouvL6bwKTXKlliq43k0TAQUY9hzMqsSGKTHoZg
NDFLvByzWemHdYDUpfhKzpMUKn1PAELjI3J8H0tabWllFHgxJMFzfpKebvxAhKCx
Pouxi/QKpmztnfTUGfCEendVwRNHNE5SUNip4M1Ou01S2r/nIF8X504TeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHp7BavU9jxHHy/ppBGyANf4G/pBMB8GA1UdIwQY
MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt
ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1
LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKboDqEZ
xx5eYi1zdfplhZVzZ26Rf7cYyu8kn+EpPJH9Qj7iiST3o8MxjWxXr59drqe/IECp
tehZiPGIQOLQfrHs+Alb5BEcsUDvlPz+P+Nbm9oU+UZkfNxm7D9Myq80wdrXlxdY
NSYA2S+qg16lujyEUBef5YRzzdA/Xjbc9xFH2IAX8Ga+zp37p3nCiRE7nOqy4Ij6
pra5d+qDc7iC/3nhUzd5ssZ5imhZtitq6cqdAQhdzfgxLin1rOmF9aquBepC9UQ4
jovkWApSklFiSK29yhLW88e8LcM7NpnAXkECqiTuwVrYi3HRQpsGh7csZQ48/5eE
pCRT44OojK4cUw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:10:01 2026 by rpki-client