Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: ykHcd25MSG4Pe+ywyqGXiV9Uft0p08wFYKT5xwdC1T0=
Subject key identifier: 91:A4:62:77:FA:A2:17:D2:AC:84:42:1A:08:BF:48:24:F1:B0:6A:DB
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 01A13E5CF81C3DF0DEA2F6596725BD7D37EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 07:00:42 +0000
Manifest this update: Thu 15 Oct 2026 07:00:42 +0000
Manifest next update: Fri 16 Oct 2026 07:00:42 +0000
Files and hashes: 1: Kj2nJpqI7GEu-K-TsbARVzYFqTM.roa (hash: l5siJkXM+WfWhL0L8OL/uvl+AJmTO8+Cpk3bOaW4F7E=)
2: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: 1T0lEQb43HLD4OT9Rjdl9a/CasGZucwNBzufurLjiCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5c:f8:1c:3d:f0:de:a2:f6:59:67:25:bd:7d:37:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Oct 15 07:00:42 2026 GMT
Not After : Oct 16 07:00:42 2026 GMT
Subject: CN=91a46277faa217d2ac84421a08bf4824f1b06adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:59:fc:77:9a:40:6c:8f:54:55:26:89:1f:
7b:0a:0b:71:f6:53:97:e5:f1:98:cd:1b:2e:ee:bc:
10:51:19:b3:15:67:d6:95:1c:05:29:4d:30:08:25:
36:1e:df:53:be:83:78:38:a8:5b:dd:c2:a4:7f:99:
da:8d:d6:e2:d6:81:70:3c:b0:de:3c:cc:8f:97:9b:
1c:27:f7:7e:d0:c1:37:16:bf:81:bf:a6:f6:00:45:
b9:a4:24:d6:69:47:29:4f:8b:47:26:77:ae:12:5e:
b0:9c:a8:26:c4:db:16:4f:77:4c:e1:ca:1c:8b:85:
df:e3:a1:6d:2c:c3:e1:e2:cc:7e:41:60:09:33:45:
77:58:a5:bc:47:78:a8:05:15:72:f0:08:ed:e5:5c:
40:0b:d2:fc:9a:19:b4:c3:9c:c9:6d:1e:16:6d:30:
6d:45:65:86:dd:2c:35:ed:7f:2b:44:ff:5c:ca:2a:
bd:09:1a:3f:76:9c:cf:61:c9:a0:60:67:93:6b:31:
02:fe:3c:1c:54:2c:d8:af:98:a5:d6:65:6b:bd:5f:
99:7b:94:b6:5d:90:e6:27:21:18:39:3e:68:e7:f7:
8e:9d:8f:a0:04:05:fd:4f:0a:12:07:0b:e7:8f:21:
c3:b4:f9:62:51:1f:4e:c6:61:aa:38:d9:e1:d9:57:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A4:62:77:FA:A2:17:D2:AC:84:42:1A:08:BF:48:24:F1:B0:6A:DB
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:65:a7:4c:81:9a:0e:d4:64:5a:4b:ea:07:73:d2:ac:b7:77:
d7:29:79:b4:67:20:7c:06:e2:38:76:41:32:88:d1:b2:97:04:
ce:2d:97:b5:cf:ef:59:bb:34:da:c1:fc:6f:b1:57:d6:5a:b5:
3c:e8:45:84:03:be:dc:78:37:a5:0a:fd:d0:6b:8d:15:69:82:
fa:60:c0:85:a4:14:94:30:1c:c9:dc:4a:f9:55:b6:f6:8e:54:
8f:98:97:1b:b0:00:fd:15:b0:ad:a8:0a:76:0f:5c:17:50:7b:
17:6a:a2:f9:18:1e:ea:2f:4c:11:cb:56:af:7c:a7:97:4a:1c:
43:d5:bc:6c:2f:b7:70:66:1c:a2:c4:11:bc:a0:8d:20:3e:16:
69:6f:86:e0:70:e4:e0:7f:ad:da:e9:6f:e8:35:fe:df:68:46:
ec:e8:83:ab:ad:72:d9:72:58:c8:92:83:66:70:3c:0c:30:8c:
e5:25:1a:0d:aa:1e:03:7f:5d:8b:af:9a:8c:b1:ca:00:69:68:
3d:36:f7:e2:3f:5d:90:a7:6a:c1:7f:30:d4:ae:0d:2a:0e:0f:
82:fa:5c:18:c0:97:88:63:66:dc:ff:d2:aa:e0:69:18:26:e3:
72:08:02:27:d3:9a:a1:03:f3:47:df:b2:fb:93:59:0f:cf:29:
a5:c8:e5:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+XPgcPfDeovZZZyW9fTfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MjdmMjFkNDA2MjFlNTgxM2U0YTA2OTIxMTk0N2UyNGQw
MGU3OTcwHhcNMjYxMDE1MDcwMDQyWhcNMjYxMDE2MDcwMDQyWjAzMTEwLwYDVQQD
Eyg5MWE0NjI3N2ZhYTIxN2QyYWM4NDQyMWEwOGJmNDgyNGYxYjA2YWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUVZ/HeaQGyPVFUmiR97Cgtx9lOX
5fGYzRsu7rwQURmzFWfWlRwFKU0wCCU2Ht9TvoN4OKhb3cKkf5najdbi1oFwPLDe
PMyPl5scJ/d+0ME3Fr+Bv6b2AEW5pCTWaUcpT4tHJneuEl6wnKgmxNsWT3dM4coc
i4Xf46FtLMPh4sx+QWAJM0V3WKW8R3ioBRVy8Ajt5VxAC9L8mhm0w5zJbR4WbTBt
RWWG3Sw17X8rRP9cyiq9CRo/dpzPYcmgYGeTazEC/jwcVCzYr5il1mVrvV+Ze5S2
XZDmJyEYOT5o5/eOnY+gBAX9TwoSBwvnjyHDtPliUR9OxmGqONnh2VeODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGkYnf6ohfSrIRCGgi/SCTxsGrbMB8GA1UdIwQY
MBaAFEUn8h1AYh5YE+SgaSEZR+JNAOeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYt
ZjA4NmU2Zjk2Y2JiLzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83ZDc3NDQtZjM2Ny00MmNjLWE5MjYtZjA4NmU2Zjk2Y2Ji
LzEvUlNmeUhVQmlIbGdUNUtCcElSbEg0azBBNTVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGWnTIGa
DtRkWkvqB3PSrLd31yl5tGcgfAbiOHZBMojRspcEzi2Xtc/vWbs02sH8b7FX1lq1
POhFhAO+3Hg3pQr90GuNFWmC+mDAhaQUlDAcydxK+VW29o5Uj5iXG7AA/RWwragK
dg9cF1B7F2qi+Rge6i9MEctWr3ynl0ocQ9W8bC+3cGYcosQRvKCNID4WaW+G4HDk
4H+t2ulv6DX+32hG7OiDq61y2XJYyJKDZnA8DDCM5SUaDaoeA39di6+ajLHKAGlo
PTb34j9dkKdqwX8w1K4NKg4PgvpcGMCXiGNm3P/SquBpGCbjcggCJ9OaoQPzR9+y
+5NZD88ppcjleQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:32:54 2026 by rpki-client