Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: 1ih/V2HydWZEIB1E4NxObbGpcYlyK5sFOpB/UuhzOVY=
Subject key identifier: 70:C3:52:95:90:79:49:5B:C5:C0:96:F0:C8:CF:34:B4:9F:09:5E:27
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 01A0D26EC0C1DC03E4455A43FA27B47B2467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 08:01:08 +0000
Manifest this update: Thu 24 Sep 2026 08:01:08 +0000
Manifest next update: Fri 25 Sep 2026 08:01:08 +0000
Files and hashes: 1: Qy8kurDk7MrnVCXvuWRCLEiAGdU.roa (hash: QbDgZoN3ZU6/bS/m4FLoXm7lSijDZPcbyRN3YX/mppU=)
2: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: hy86iPBQ0+PZD66qOOGuI+bG+r0mzhdsfNuwbK2F/jA=)
3: hYfmOJAAi6Wk58P0BMQdg0-ETIE.roa (hash: ZhalI/LOgKiAuv67zXxSUEKRpEQkU7//oKdzXd9ydyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:c0:c1:dc:03:e4:45:5a:43:fa:27:b4:7b:24:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Sep 24 08:01:08 2026 GMT
Not After : Sep 25 08:01:08 2026 GMT
Subject: CN=70c352959079495bc5c096f0c8cf34b49f095e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e9:bd:7d:44:df:14:25:99:55:ca:c6:c2:2a:
e1:af:7c:b5:9d:a5:d2:dd:0d:22:0d:cf:7f:13:a6:
55:72:2b:d4:dd:b1:51:0f:fd:ab:24:b3:65:43:bf:
05:0b:75:fd:30:35:c5:ad:6f:ba:d8:db:dd:29:73:
74:f4:80:f7:c3:fe:7b:14:8b:d9:a4:f3:f2:11:ae:
16:4e:69:e1:ce:c1:e1:f1:f8:8a:71:87:fe:4c:83:
69:2c:c6:61:82:d3:c0:ad:9e:42:91:7e:1f:9b:6c:
ba:a7:a6:88:d1:0f:32:23:eb:f1:63:54:42:9b:a1:
29:48:fb:1f:f1:1f:04:87:95:87:e8:13:d4:8a:9d:
b8:a7:d7:e4:fc:67:04:e8:23:b7:87:ea:80:36:e6:
3e:87:8b:f0:27:d0:60:32:79:21:c1:81:1f:06:ea:
dd:da:84:fa:6d:84:2d:1e:45:b7:07:48:f8:f3:2a:
dd:3a:e9:e9:23:0b:32:91:99:db:3d:ff:18:bf:f3:
b6:37:d7:5c:64:7e:3d:bf:18:7a:ff:3d:da:fa:04:
0d:94:f8:de:b4:16:da:2b:60:a2:8d:df:93:a2:c5:
1b:fc:17:f2:46:90:b1:ee:93:bb:cd:61:02:6c:ff:
b9:f4:da:eb:92:c6:f9:6b:a7:50:a3:2d:6a:ed:8e:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:52:95:90:79:49:5B:C5:C0:96:F0:C8:CF:34:B4:9F:09:5E:27
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:23:30:38:9f:94:53:be:0b:a5:45:b3:cf:fa:ba:d6:d5:a5:
d3:85:cc:12:62:64:35:85:58:20:36:5b:3e:42:09:b7:38:ee:
99:5d:09:97:b3:0b:3e:b7:be:e3:25:0e:08:02:a0:a8:ae:6b:
6e:5c:42:e7:bc:22:64:8c:b8:78:36:eb:6f:34:af:06:24:b3:
fe:9e:b3:d5:27:28:72:f3:b7:56:4e:61:f5:ef:8e:86:71:5f:
94:5f:f4:de:d9:7d:23:ae:df:03:ab:6f:35:f5:55:fa:70:2b:
d3:f9:ad:1d:8f:69:d3:22:fb:85:3c:9b:0a:c0:f6:34:47:df:
6b:62:d4:6e:70:e1:7e:01:4c:78:f2:17:fb:47:c6:ea:65:22:
38:b4:b9:ea:c7:2c:05:6c:63:93:ef:a6:6a:9d:d2:b5:b0:19:
16:06:5a:68:62:1c:0a:e0:cc:56:b1:ae:ed:a0:7e:93:00:e3:
89:87:d6:fe:8b:78:69:68:5a:d6:af:4b:bb:59:02:fc:d2:8d:
a6:e0:d0:ce:bc:f9:de:34:a7:54:06:53:27:b8:d0:ee:56:cc:
99:d5:df:b0:34:c0:d9:d7:7c:77:38:68:dd:2f:89:e0:50:27:
54:e5:35:6c:44:32:ca:4b:15:f3:82:3e:ec:a8:a1:28:d9:2b:
e2:6c:f6:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSbsDB3APkRVpD+ie0eyRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2NhYjc0NzlhNGUwZDhhNDE3NzM1MGEwMGE2OWJkODgz
YjA0OGQwHhcNMjYwOTI0MDgwMTA4WhcNMjYwOTI1MDgwMTA4WjAzMTEwLwYDVQQD
Eyg3MGMzNTI5NTkwNzk0OTViYzVjMDk2ZjBjOGNmMzRiNDlmMDk1ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Om9fUTfFCWZVcrGwirhr3y1naXS
3Q0iDc9/E6ZVcivU3bFRD/2rJLNlQ78FC3X9MDXFrW+62NvdKXN09ID3w/57FIvZ
pPPyEa4WTmnhzsHh8fiKcYf+TINpLMZhgtPArZ5CkX4fm2y6p6aI0Q8yI+vxY1RC
m6EpSPsf8R8Eh5WH6BPUip24p9fk/GcE6CO3h+qANuY+h4vwJ9BgMnkhwYEfBurd
2oT6bYQtHkW3B0j48yrdOunpIwsykZnbPf8Yv/O2N9dcZH49vxh6/z3a+gQNlPje
tBbaK2Cijd+TosUb/BfyRpCx7pO7zWECbP+59Nrrksb5a6dQoy1q7Y4HNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDDUpWQeUlbxcCW8MjPNLSfCV4nMB8GA1UdIwQY
MBaAFEbMq3R5pODYpBdzUKAKab2IOwSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgt
MmYzMDI1MmViNDQyLzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kYzUyNDMtYmJhNC00YWNmLWEyMTgtMmYzMDI1MmViNDQy
LzEvUnN5cmRIbWs0TmlrRjNOUW9BcHB2WWc3QkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaiMwOJ+U
U74LpUWzz/q61tWl04XMEmJkNYVYIDZbPkIJtzjumV0Jl7MLPre+4yUOCAKgqK5r
blxC57wiZIy4eDbrbzSvBiSz/p6z1ScocvO3Vk5h9e+OhnFflF/03tl9I67fA6tv
NfVV+nAr0/mtHY9p0yL7hTybCsD2NEffa2LUbnDhfgFMePIX+0fG6mUiOLS56scs
BWxjk++map3StbAZFgZaaGIcCuDMVrGu7aB+kwDjiYfW/ot4aWha1q9Lu1kC/NKN
puDQzrz53jSnVAZTJ7jQ7lbMmdXfsDTA2dd8dzho3S+J4FAnVOU1bEQyyksV84I+
7KihKNkr4mz2xQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:49:09 2026 by rpki-client