Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.mft (raw, json)
Hash identifier: d1c2pw3leqcKK1MviFfSKA8Yq9r3YToiapjURJtPBeI=
Subject key identifier: B4:07:02:1F:09:35:70:FF:79:7B:FF:B0:4A:B3:98:E3:EC:6B:CE:4B
Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Certificate serial: 01A102494C3E470146F13C52F7E8669753D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
Manifest number: 1B40
Signing time: Sat 03 Oct 2026 15:02:00 +0000
Manifest this update: Sat 03 Oct 2026 15:02:00 +0000
Manifest next update: Sun 04 Oct 2026 15:02:00 +0000
Files and hashes: 1: 9LNb_9PZbve_OomIaChtCM3k4so.roa (hash: sE6lgMqZnhOrphKgsrZ4WG0emFX/4GnVx3HFaE7J0Qo=)
2: FlNvIBDOBdonn3aaFX3mtfoEgdY.roa (hash: NV4aCXfghszJfOz/yii1kdXVIUYUXdQt970ZYxOTSP8=)
3: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (hash: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok=)
4: TIqSysADxONI-e4Fp_M_6SFBM2w.roa (hash: A665VAKSazGUi81WSJfVeWUCAVUVIKN1Dr/P8sIzfrM=)
5: Z9v03Glll_6U7rPnPHeeMtOaRwo.roa (hash: MIONyPy9xxM9PP/Mww4JUQcmmXncwxAen4eKUZkPg6g=)
6: fnyIa8mLQHVgiXE89bhVVM5Yl9g.roa (hash: 691/vGayPBHXYDVauvoERip3QUP0hLW5nqwZdaTBTmc=)
7: pjXUNlwuTozhGGgjxXS6q27O-Fk.roa (hash: fiwhOZAS8BnkvaKiYOb9zby/Luddgw3KLJYUYwjn0M8=)
8: puc6OmG1OuK-1tdDeaTEBhl4xAM.roa (hash: OTGPHJHXp9Xi8w0pLop8Pbhr1rg2m2dafkxwzmiiPJI=)
9: rKZqWTivVnqeKbT3bxFWB8K4qiA.crl (hash: sD3PRVOj54R6kBw6ixR2O13IbsnE90anTh7OhRxt1ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:49:4c:3e:47:01:46:f1:3c:52:f7:e8:66:97:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Validity
Not Before: Oct 3 15:02:00 2026 GMT
Not After : Oct 4 15:02:00 2026 GMT
Subject: CN=b407021f093570ff797bffb04ab398e3ec6bce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fe:cf:e0:58:ce:68:f2:ee:30:2e:e9:ef:95:
6e:9c:fb:fb:8a:b7:3b:59:1f:96:be:38:f0:33:4b:
bf:50:d9:e8:6e:a3:dc:44:08:da:c7:07:dc:36:02:
c6:cd:58:20:f8:46:65:94:57:1d:37:97:14:5e:13:
dd:e7:25:13:05:27:af:8a:6e:2a:41:43:1a:05:4b:
dc:8f:c4:26:58:a2:c1:f4:6f:82:78:37:d9:3b:2e:
bd:76:0f:bd:fe:70:6d:1f:32:49:bd:d0:6a:6f:3f:
ea:1e:ca:8c:9a:28:63:73:f7:36:8b:1c:db:72:50:
fd:f3:12:2f:88:f7:b5:46:0c:6c:01:8e:73:4e:98:
b3:05:46:c3:13:68:f7:3f:58:2d:0e:92:2f:b5:ba:
f6:11:a5:20:77:c3:66:05:42:c9:1e:d5:1c:f2:11:
b5:78:44:32:ca:39:a6:2b:8c:78:31:bc:cc:7f:a8:
cc:7d:69:0d:a8:87:50:d2:dc:d2:89:b6:d4:35:1e:
1f:e7:30:4e:16:39:e7:d6:a1:d8:f1:61:a9:dc:ed:
90:e8:a8:c3:35:59:da:87:47:33:2a:3e:3e:1f:68:
a6:6b:91:df:3e:27:bd:fd:91:fe:8f:4d:39:02:ce:
2d:b8:7e:31:83:6b:63:c3:c6:80:ad:c8:b6:a9:66:
f1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:02:1F:09:35:70:FF:79:7B:FF:B0:4A:B3:98:E3:EC:6B:CE:4B
X509v3 Authority Key Identifier:
keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:09:44:7e:5f:74:78:d4:0a:87:2e:c8:31:46:92:6a:ab:b3:
05:8e:e5:86:82:4d:78:6f:a7:8b:2c:57:33:a1:59:8f:bb:1d:
3e:14:c5:73:30:12:d4:f2:d7:6e:b2:82:45:e9:60:38:6a:be:
6a:6c:e7:05:2f:8f:7c:64:9f:69:bd:d8:85:58:a0:d6:0b:ff:
a4:ad:2f:c4:71:9a:45:ad:50:1f:8c:97:b3:32:b8:c0:c8:e6:
e9:28:e7:26:d8:b6:73:b1:99:66:64:c7:df:e3:18:fa:87:8a:
c1:a9:7a:51:0b:98:5e:d4:b0:76:b3:10:7d:79:48:9a:20:ba:
8b:15:ca:4b:d9:f8:cd:6a:a5:23:f0:81:8c:a4:0f:bf:1b:a9:
92:a4:44:03:bb:6f:eb:d1:43:f6:e0:c0:35:ae:30:c8:2d:11:
48:7f:5f:fe:cd:56:3d:88:65:15:23:66:43:ac:b1:c9:12:cc:
37:3c:d7:7d:3e:ab:2e:4a:84:ce:46:a5:17:97:79:39:83:7d:
f4:d1:20:17:c3:72:c0:f2:ef:c3:d3:98:41:df:2d:86:08:d9:
58:37:f2:c2:03:6e:44:82:82:b7:72:11:e6:d3:58:21:dc:09:
f7:81:1d:fd:73:6e:65:4e:86:68:81:0f:1c:33:36:ee:4e:e9:
78:91:1a:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECSUw+RwFG8TxS9+hml1PUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi
OGFhMjAwHhcNMjYxMDAzMTUwMjAwWhcNMjYxMDA0MTUwMjAwWjAzMTEwLwYDVQQD
EyhiNDA3MDIxZjA5MzU3MGZmNzk3YmZmYjA0YWIzOThlM2VjNmJjZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP7P4FjOaPLuMC7p75VunPv7irc7
WR+WvjjwM0u/UNnobqPcRAjaxwfcNgLGzVgg+EZllFcdN5cUXhPd5yUTBSevim4q
QUMaBUvcj8QmWKLB9G+CeDfZOy69dg+9/nBtHzJJvdBqbz/qHsqMmihjc/c2ixzb
clD98xIviPe1RgxsAY5zTpizBUbDE2j3P1gtDpIvtbr2EaUgd8NmBULJHtUc8hG1
eEQyyjmmK4x4MbzMf6jMfWkNqIdQ0tzSibbUNR4f5zBOFjnn1qHY8WGp3O2Q6KjD
NVnah0czKj4+H2ima5HfPie9/ZH+j005As4tuH4xg2tjw8aArci2qWbxfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQHAh8JNXD/eXv/sEqzmOPsa85LMB8GA1UdIwQY
MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt
YjliNjU0MDJiOTI4LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4
LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQlEfl90
eNQKhy7IMUaSaquzBY7lhoJNeG+niyxXM6FZj7sdPhTFczAS1PLXbrKCRelgOGq+
amznBS+PfGSfab3YhVig1gv/pK0vxHGaRa1QH4yXszK4wMjm6SjnJti2c7GZZmTH
3+MY+oeKwal6UQuYXtSwdrMQfXlImiC6ixXKS9n4zWqlI/CBjKQPvxupkqREA7tv
69FD9uDANa4wyC0RSH9f/s1WPYhlFSNmQ6yxyRLMNzzXfT6rLkqEzkalF5d5OYN9
9NEgF8NywPLvw9OYQd8thgjZWDfywgNuRIKCt3IR5tNYIdwJ94Ed/XNuZU6GaIEP
HDM27k7peJEa7g==
-----END CERTIFICATE-----
Generated at Sun Oct 4 00:26:27 2026 by rpki-client