Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: 8fn03r80DFkJLNdA9Q8egkNmLZFY+98hO1O++ikhYLQ=
Subject key identifier: 44:68:09:E0:D9:FB:A6:06:01:CB:47:8E:C2:43:DC:FD:CF:1E:35:45
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 01A1366D2EC7577961CFA830CB10EDB022F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 18:01:27 +0000
Manifest this update: Tue 13 Oct 2026 18:01:27 +0000
Manifest next update: Wed 14 Oct 2026 18:01:27 +0000
Files and hashes: 1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: EEHBGI/I+2myguU9lcoi6GvIqsarAnIz9IFeufpWK9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6d:2e:c7:57:79:61:cf:a8:30:cb:10:ed:b0:22:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Oct 13 18:01:27 2026 GMT
Not After : Oct 14 18:01:27 2026 GMT
Subject: CN=446809e0d9fba60601cb478ec243dcfdcf1e3545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:99:f5:45:96:4f:9c:ad:f9:cc:8c:9b:7e:
d2:47:91:ac:b0:c9:ae:67:4d:6c:d4:58:03:bc:b4:
f2:72:88:3f:e1:f0:84:d0:e9:74:74:24:84:58:7a:
00:bb:4d:a4:e2:92:5a:37:ee:d0:b3:df:1a:39:18:
9c:b6:15:e0:0e:f5:e2:a5:fe:66:eb:7f:1a:2e:7b:
23:0c:8f:f7:c2:6e:09:35:ea:14:48:cb:20:ec:ea:
ff:11:63:d3:83:6b:ee:8e:f0:08:09:4e:bf:2c:36:
f1:8d:7e:97:08:cb:85:00:4f:6d:60:b7:21:d2:44:
1f:db:2d:3c:b0:d5:5c:9e:91:d2:00:3c:a5:2d:a7:
40:4b:bd:71:7a:06:a5:c9:8f:08:6f:a7:2a:cd:ca:
2e:f4:3a:be:37:cd:48:e7:2d:f5:8f:80:6a:5f:39:
df:89:e8:cf:ef:95:e6:39:a4:0d:92:5d:53:28:32:
a9:b1:07:b2:f6:de:a4:20:5f:47:50:aa:cc:24:4e:
e7:ee:4d:13:7d:99:2b:d2:02:cc:e6:ae:2f:aa:16:
c4:e3:42:37:a7:e9:01:25:63:6e:61:23:9b:f0:9e:
ae:f9:4c:29:bf:84:62:b0:8c:5b:86:63:89:d4:fd:
76:73:e5:aa:ba:df:96:c1:d8:09:7a:98:61:6f:4b:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:09:E0:D9:FB:A6:06:01:CB:47:8E:C2:43:DC:FD:CF:1E:35:45
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3f:ea:1f:51:7a:89:04:4f:fb:ce:ee:07:51:fc:ec:1c:32:
4c:0b:3f:91:32:f3:8b:58:71:2c:1b:32:3e:c8:cd:70:b7:72:
26:ed:ed:9e:cc:c5:14:e7:68:56:82:11:fd:cf:ee:9d:b0:d4:
29:ff:90:c7:cc:30:cd:3b:ce:9a:af:99:90:6d:de:31:60:e3:
ea:f3:03:30:f2:d7:46:90:ca:be:63:e6:86:76:46:96:1d:07:
21:8a:bf:c5:5c:89:e9:c0:d8:e7:4e:a4:54:c9:6f:86:23:fd:
18:42:3d:a1:97:4c:00:61:7f:77:cc:80:71:b6:50:af:b8:b1:
cf:94:31:e8:53:0b:96:1a:02:51:24:00:19:8f:99:f9:eb:bd:
a1:ac:fb:3b:8b:b0:a4:c6:66:22:80:ef:d0:f0:59:c3:f2:34:
4f:03:d5:7e:3c:04:1d:e5:57:1e:b2:50:9d:2d:d3:d9:91:0e:
a5:26:bc:6f:b6:49:9f:b4:82:c6:ef:a5:53:f4:ca:7a:50:2b:
66:a7:6c:96:19:e7:d6:69:93:6a:7a:c9:c3:2d:55:f6:07:30:
1b:e9:9d:07:3c:11:20:76:41:d5:0b:b8:0d:1e:b8:db:aa:c3:
7d:2e:6d:54:da:79:02:58:cd:0c:74:bc:a5:d7:4f:d1:38:7b:
60:de:fc:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2bS7HV3lhz6gwyxDtsCL4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0
NmE0ZGQwHhcNMjYxMDEzMTgwMTI3WhcNMjYxMDE0MTgwMTI3WjAzMTEwLwYDVQQD
Eyg0NDY4MDllMGQ5ZmJhNjA2MDFjYjQ3OGVjMjQzZGNmZGNmMWUzNTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dqZ9UWWT5yt+cyMm37SR5GssMmu
Z01s1FgDvLTycog/4fCE0Ol0dCSEWHoAu02k4pJaN+7Qs98aORicthXgDvXipf5m
638aLnsjDI/3wm4JNeoUSMsg7Or/EWPTg2vujvAICU6/LDbxjX6XCMuFAE9tYLch
0kQf2y08sNVcnpHSADylLadAS71xegalyY8Ib6cqzcou9Dq+N81I5y31j4BqXznf
iejP75XmOaQNkl1TKDKpsQey9t6kIF9HUKrMJE7n7k0TfZkr0gLM5q4vqhbE40I3
p+kBJWNuYSOb8J6u+Uwpv4RisIxbhmOJ1P12c+Wqut+WwdgJephhb0t1/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERoCeDZ+6YGActHjsJD3P3PHjVFMB8GA1UdIwQY
MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt
MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4
LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFj/qH1F6
iQRP+87uB1H87BwyTAs/kTLzi1hxLBsyPsjNcLdyJu3tnszFFOdoVoIR/c/unbDU
Kf+Qx8wwzTvOmq+ZkG3eMWDj6vMDMPLXRpDKvmPmhnZGlh0HIYq/xVyJ6cDY506k
VMlvhiP9GEI9oZdMAGF/d8yAcbZQr7ixz5Qx6FMLlhoCUSQAGY+Z+eu9oaz7O4uw
pMZmIoDv0PBZw/I0TwPVfjwEHeVXHrJQnS3T2ZEOpSa8b7ZJn7SCxu+lU/TKelAr
Zqdslhnn1mmTanrJwy1V9gcwG+mdBzwRIHZB1Qu4DR6426rDfS5tVNp5AljNDHS8
pddP0Th7YN784Q==
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:31:40 2026 by rpki-client