Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
File: 0RIqXLBkP3NsfseWGAmiWThmjw4.mft (raw, json)
Hash identifier: ngWz8sN27QR+fXHy3dQvvmfJiikrvH6iRIM9cq4OCBE=
Subject key identifier: E1:96:4C:0A:57:D6:01:AB:33:14:73:15:2D:E3:3C:D5:9F:D9:B0:AA
Authority key identifier: D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
Certificate issuer: /CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Certificate serial: 01A12F2186B92470878EE98140945278DF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
Manifest number: 1AA1
Signing time: Mon 12 Oct 2026 08:01:28 +0000
Manifest this update: Mon 12 Oct 2026 08:01:28 +0000
Manifest next update: Tue 13 Oct 2026 08:01:28 +0000
Files and hashes: 1: 0RIqXLBkP3NsfseWGAmiWThmjw4.crl (hash: W6cyKe5B7Gj6hPtnhpFlpMAh9lEoRAZ5Rb1GuQe0Rcc=)
2: ZKAPBlDYrEd2yjmsfMSMceCY9TA.roa (hash: F0+H6qDixU/03vN/UlEJN6xAxFU7ewgK1yqAztFgQS4=)
3: fSmn7fdIQV-BhV-TX9ikmCr8pz0.roa (hash: aPwivrJczNCFzMJcf0LFQLamq3ppdLsG7e6V+tPBFE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:86:b9:24:70:87:8e:e9:81:40:94:52:78:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1122a5cb0643f736c7ec7961809a25938668f0e
Validity
Not Before: Oct 12 08:01:28 2026 GMT
Not After : Oct 13 08:01:28 2026 GMT
Subject: CN=e1964c0a57d601ab331473152de33cd59fd9b0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:de:2e:d7:1b:0a:5b:7c:af:4d:c6:68:03:
71:d3:c6:db:fa:a0:c7:a7:bc:f3:fc:30:8e:dd:1d:
94:cc:72:e0:bf:9b:9c:f5:26:72:40:7e:12:3c:9a:
9d:59:52:bd:70:f1:f3:37:11:21:03:e3:85:57:3f:
a0:7c:13:b6:a4:2a:08:28:c1:f0:24:a7:3a:91:6f:
87:7f:ab:de:f6:4a:25:75:b9:c5:8b:84:e0:74:9c:
00:a2:4f:72:8b:d9:d5:64:ec:b8:49:8a:65:5e:9c:
8f:a9:d6:40:05:29:75:d7:63:a8:57:41:dc:5d:40:
00:07:e2:92:f5:ba:6e:49:e1:13:2e:e3:78:4f:cb:
d0:e1:f0:57:01:b4:c7:77:d4:82:d6:55:38:b2:dd:
9a:cc:18:2c:36:cb:0e:48:76:9f:fc:43:3a:9e:b9:
94:40:e3:00:d4:8a:42:fd:23:92:cd:d1:0f:e7:bb:
3b:8c:0d:51:7f:e6:98:2f:90:3d:41:f4:2b:7c:52:
86:2f:09:12:e3:c0:cd:a0:ab:3a:38:6b:38:dd:34:
b3:8b:d7:47:4b:61:f4:98:63:bc:9e:03:5d:74:7e:
3e:98:02:7a:02:a4:8b:ff:c3:80:c3:1d:3a:20:b3:
de:48:71:2a:f6:46:17:46:3f:b4:a3:9d:ca:15:33:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:96:4C:0A:57:D6:01:AB:33:14:73:15:2D:E3:3C:D5:9F:D9:B0:AA
X509v3 Authority Key Identifier:
keyid:D1:12:2A:5C:B0:64:3F:73:6C:7E:C7:96:18:09:A2:59:38:66:8F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0RIqXLBkP3NsfseWGAmiWThmjw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/accd38-0ae6-4b43-a168-1152f4393020/1/0RIqXLBkP3NsfseWGAmiWThmjw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b0:4d:66:98:6e:c9:13:eb:5b:54:61:6a:a8:fd:f2:97:66:
b9:80:d2:ab:30:ec:60:54:00:67:76:bd:0e:57:af:5f:e1:68:
e3:97:d3:b4:1a:83:33:8c:da:5c:e1:c5:df:30:c1:cd:e4:14:
f1:25:e7:24:36:ba:f5:91:c0:ee:51:04:23:f3:c8:8d:e1:50:
31:e8:bd:99:48:1a:f3:67:5a:bc:d2:4c:1f:92:44:a7:26:45:
19:44:03:3a:1c:f0:be:26:bb:59:06:00:38:d7:23:cd:90:42:
b5:a7:e8:de:58:1e:fe:e1:bf:aa:85:c0:0c:98:13:6f:d4:04:
6f:da:c6:3f:de:9b:b6:f0:27:71:15:10:40:ee:00:80:f5:98:
08:60:dd:72:a9:8d:2c:6d:b5:ae:c6:b7:da:5f:d1:15:76:e9:
93:56:63:48:d7:63:a7:8d:36:0d:a4:22:fe:e2:01:88:25:19:
9a:6e:4b:2b:93:9b:6b:04:7a:b9:8c:6a:b5:0a:7f:98:72:bb:
7f:43:b9:0d:ed:14:ff:07:eb:22:02:8d:f5:68:f4:a2:91:31:
4e:c7:43:f0:69:3c:4e:2f:f6:1d:f5:11:1b:4f:63:85:9e:e4:
05:e8:ab:68:80:c9:1b:9c:72:5f:9f:1d:99:4c:f5:33:b2:4a:
da:01:f7:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvIYa5JHCHjumBQJRSeN8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMTIyYTVjYjA2NDNmNzM2YzdlYzc5NjE4MDlhMjU5Mzg2
NjhmMGUwHhcNMjYxMDEyMDgwMTI4WhcNMjYxMDEzMDgwMTI4WjAzMTEwLwYDVQQD
EyhlMTk2NGMwYTU3ZDYwMWFiMzMxNDczMTUyZGUzM2NkNTlmZDliMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEDeLtcbClt8r03GaANx08bb+qDH
p7zz/DCO3R2UzHLgv5uc9SZyQH4SPJqdWVK9cPHzNxEhA+OFVz+gfBO2pCoIKMHw
JKc6kW+Hf6ve9koldbnFi4TgdJwAok9yi9nVZOy4SYplXpyPqdZABSl112OoV0Hc
XUAAB+KS9bpuSeETLuN4T8vQ4fBXAbTHd9SC1lU4st2azBgsNssOSHaf/EM6nrmU
QOMA1IpC/SOSzdEP57s7jA1Rf+aYL5A9QfQrfFKGLwkS48DNoKs6OGs43TSzi9dH
S2H0mGO8ngNddH4+mAJ6AqSL/8OAwx06ILPeSHEq9kYXRj+0o53KFTPJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOGWTApX1gGrMxRzFS3jPNWf2bCqMB8GA1UdIwQY
MBaAFNESKlywZD9zbH7HlhgJolk4Zo8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgt
MTE1MmY0MzkzMDIwLzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hY2NkMzgtMGFlNi00YjQzLWExNjgtMTE1MmY0MzkzMDIw
LzEvMFJJcVhMQmtQM05zZnNlV0dBbWlXVGhtanc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7BNZphu
yRPrW1Rhaqj98pdmuYDSqzDsYFQAZ3a9DlevX+Fo45fTtBqDM4zaXOHF3zDBzeQU
8SXnJDa69ZHA7lEEI/PIjeFQMei9mUga82davNJMH5JEpyZFGUQDOhzwvia7WQYA
ONcjzZBCtafo3lge/uG/qoXADJgTb9QEb9rGP96btvAncRUQQO4AgPWYCGDdcqmN
LG21rsa32l/RFXbpk1ZjSNdjp402DaQi/uIBiCUZmm5LK5ObawR6uYxqtQp/mHK7
f0O5De0U/wfrIgKN9Wj0opExTsdD8Gk8Ti/2HfURG09jhZ7kBeiraIDJG5xyX58d
mUz1M7JK2gH3sg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 18:37:38 2026 by rpki-client