Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: jXfvqBQnsGwKQZ1lOTBUHdAEK7JMGo5ibkDqNhBq4M0=
Subject key identifier: A7:AF:96:CC:2C:1E:FF:C1:7C:74:6E:8B:54:2C:EA:2C:2C:39:E4:20
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 01A0CA46DF9D20A43F3096D37FBCA4106457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0A2B
Signing time: Tue 22 Sep 2026 18:00:37 +0000
Manifest this update: Tue 22 Sep 2026 18:00:37 +0000
Manifest next update: Wed 23 Sep 2026 18:00:37 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: EgAAIypUrCuAdwqtxOFH4gFaqKZChfFjN0AqYZTwVdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:df:9d:20:a4:3f:30:96:d3:7f:bc:a4:10:64:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Sep 22 18:00:37 2026 GMT
Not After : Sep 23 18:00:37 2026 GMT
Subject: CN=a7af96cc2c1effc17c746e8b542cea2c2c39e420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:27:ea:38:45:ee:b1:60:3f:7a:c9:34:c5:c6:
c6:2c:ea:1d:1e:2d:74:18:48:04:3b:78:27:53:8c:
16:9d:72:1a:42:64:70:63:23:61:25:11:7f:40:cf:
12:63:48:a4:59:f8:ab:de:94:da:e0:ef:09:a6:1d:
c5:bb:80:26:f3:f9:6e:78:fe:45:02:be:3e:aa:fc:
c6:53:46:07:34:25:3f:78:07:e0:9d:ba:95:f8:d7:
d7:48:93:47:1b:99:7c:85:ad:92:81:49:c9:c7:af:
de:f4:85:39:5a:b2:72:b0:f3:12:9a:6d:f7:1e:59:
93:fa:69:1e:2f:86:4b:8a:ad:96:9a:b8:e7:e1:50:
80:c8:50:a8:da:47:bb:dd:98:c7:23:8b:8d:f8:bd:
fb:04:78:99:c6:1f:91:c6:d7:b8:c3:9b:2a:4b:6f:
d1:06:d0:ad:2b:f5:85:9d:73:38:c0:21:ea:99:17:
28:7c:25:6a:fb:71:36:f6:10:71:76:9d:d0:14:b5:
9d:12:1d:e3:65:51:0f:2b:35:95:a3:2c:df:d3:e5:
2e:6c:7d:b4:61:92:54:0f:bb:7c:1c:35:44:52:2f:
cb:bb:07:be:1b:9f:d3:c1:f6:08:ac:2d:58:27:e9:
f8:12:25:ba:bd:c9:8d:0f:47:89:3d:a0:43:53:f4:
06:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AF:96:CC:2C:1E:FF:C1:7C:74:6E:8B:54:2C:EA:2C:2C:39:E4:20
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:5d:48:92:48:62:71:d0:49:89:7f:49:a3:cc:ba:3f:f5:
ae:86:0a:ac:94:46:bf:5f:b7:52:38:ed:d5:d6:23:86:eb:48:
7a:6d:68:29:dd:38:09:4c:36:1f:3e:7d:a1:90:36:ca:1d:64:
2b:8a:5a:d9:fd:fe:f1:43:63:4b:17:0a:46:ac:b2:6c:4e:10:
ab:d6:07:95:0e:b3:41:b8:2b:42:1e:35:01:29:e7:12:b3:19:
9d:75:15:94:62:e8:fe:29:9d:9b:0d:31:20:d6:8d:84:8a:63:
77:58:f9:65:9e:c7:70:08:de:72:ea:1e:d9:33:fd:22:15:58:
75:ca:74:73:60:78:2e:d7:cd:35:5f:01:6c:21:14:ef:7b:f3:
e1:0d:9a:12:f5:51:28:a0:88:aa:ea:46:4e:db:6d:41:9a:1e:
a5:ea:e9:93:63:b0:58:41:6a:5c:64:ba:b3:7e:8a:24:2c:0c:
77:68:fc:a5:14:6c:5b:32:02:d7:3c:b6:82:45:b4:e5:a2:c5:
d5:b8:08:f3:53:2d:cb:4b:5c:b4:2e:dc:a1:64:a7:b7:01:3b:
31:ec:72:a2:7a:eb:b1:08:f0:08:4e:41:77:9d:71:4e:46:f1:
72:f3:ac:93:8a:0b:f5:34:da:89:40:e7:14:79:21:c1:f2:ae:
9e:39:3d:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRt+dIKQ/MJbTf7ykEGRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2
NTFiZjcwHhcNMjYwOTIyMTgwMDM3WhcNMjYwOTIzMTgwMDM3WjAzMTEwLwYDVQQD
EyhhN2FmOTZjYzJjMWVmZmMxN2M3NDZlOGI1NDJjZWEyYzJjMzllNDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCfqOEXusWA/esk0xcbGLOodHi10
GEgEO3gnU4wWnXIaQmRwYyNhJRF/QM8SY0ikWfir3pTa4O8Jph3Fu4Am8/lueP5F
Ar4+qvzGU0YHNCU/eAfgnbqV+NfXSJNHG5l8ha2SgUnJx6/e9IU5WrJysPMSmm33
HlmT+mkeL4ZLiq2Wmrjn4VCAyFCo2ke73ZjHI4uN+L37BHiZxh+Rxte4w5sqS2/R
BtCtK/WFnXM4wCHqmRcofCVq+3E29hBxdp3QFLWdEh3jZVEPKzWVoyzf0+UubH20
YZJUD7t8HDVEUi/Luwe+G5/TwfYIrC1YJ+n4EiW6vcmND0eJPaBDU/QGQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKevlswsHv/BfHRui1Qs6iwsOeQgMB8GA1UdIwQY
MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct
OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1
LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHThdSJJI
YnHQSYl/SaPMuj/1roYKrJRGv1+3Ujjt1dYjhutIem1oKd04CUw2Hz59oZA2yh1k
K4pa2f3+8UNjSxcKRqyybE4Qq9YHlQ6zQbgrQh41ASnnErMZnXUVlGLo/imdmw0x
INaNhIpjd1j5ZZ7HcAjecuoe2TP9IhVYdcp0c2B4LtfNNV8BbCEU73vz4Q2aEvVR
KKCIqupGTtttQZoeperpk2OwWEFqXGS6s36KJCwMd2j8pRRsWzIC1zy2gkW05aLF
1bgI81Mty0tctC7coWSntwE7MexyonrrsQjwCE5Bd51xTkbxcvOsk4oL9TTaiUDn
FHkhwfKunjk9bg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:12:36 2026 by rpki-client