Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json)
Hash identifier: erXiQUpeM2212f0j54GI6kNuaT7hrGnNajbeatyqxRI=
Subject key identifier: 1A:35:EF:6D:94:D9:EF:AC:B3:E3:2E:5D:5B:53:DA:75:52:83:7F:03
Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Certificate serial: 01A12DD73DEA470E2777D5DD7E6DAEBDFEB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
Manifest number: 0DE4
Signing time: Mon 12 Oct 2026 02:00:43 +0000
Manifest this update: Mon 12 Oct 2026 02:00:43 +0000
Manifest next update: Tue 13 Oct 2026 02:00:43 +0000
Files and hashes: 1: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: eGi/3+Yp/IdHmQMOIHxKWgxYqT85f576c1bVqvZMujk=)
2: ap4mFp5Ya-kxrNe_lxyXrrfAkKo.roa (hash: 9On1ASESGdKkJZcGpCsLA2Kb7s/ei4zrGMGE+Hcy6Qg=)
3: kXUNqa6NU2CIrEc-7iSS_F04l8w.roa (hash: dMuT5b6Qv7WJg47jG6wYoMPrghKZhlkojTQssXVjOAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:3d:ea:47:0e:27:77:d5:dd:7e:6d:ae:bd:fe:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2
Validity
Not Before: Oct 12 02:00:43 2026 GMT
Not After : Oct 13 02:00:43 2026 GMT
Subject: CN=1a35ef6d94d9efacb3e32e5d5b53da7552837f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:66:67:5d:37:89:99:18:fe:b6:3c:f9:66:
f6:11:a4:86:f3:71:f2:0b:42:31:61:4a:11:fd:ec:
fa:88:7e:e6:f7:32:fe:01:f7:dc:42:dc:24:6f:4a:
a6:b4:fb:9d:69:99:f7:99:91:54:3c:c6:40:24:52:
4c:da:75:88:be:07:d6:7e:b9:79:0e:c8:9a:96:67:
18:f8:b6:b5:9c:6e:58:dc:c0:ee:7a:ca:1c:3e:19:
3b:fc:d9:ef:b8:68:9d:8b:76:6c:e7:b1:de:9c:12:
e3:e4:a2:c5:49:69:0e:6e:59:e8:ea:89:51:51:d0:
9c:44:08:0f:d8:3c:97:f7:3d:74:07:80:85:9c:a9:
7f:54:eb:15:dc:95:78:fe:e0:22:ae:58:61:b2:cf:
89:fb:c6:4d:46:cd:e2:22:5a:09:65:a7:7b:38:d6:
3a:f1:cd:2a:b8:0b:d3:b0:29:b9:0c:5c:a0:8a:73:
28:b5:f1:3a:1c:1d:2a:d4:ab:2e:bb:9d:08:24:2a:
54:aa:3f:90:c9:21:fa:66:2e:50:33:7b:2f:a3:e1:
65:c3:84:01:6a:1a:27:18:02:50:09:fc:c0:87:c2:
74:a1:88:cf:eb:2d:6d:00:a7:2c:f4:2d:f3:fe:3c:
3d:0f:32:60:ac:16:29:34:42:0f:a3:ef:e6:d9:8c:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:EF:6D:94:D9:EF:AC:B3:E3:2E:5D:5B:53:DA:75:52:83:7F:03
X509v3 Authority Key Identifier:
keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:71:76:02:f7:b5:15:d8:8c:0d:d2:21:d0:82:bb:dd:44:e9:
ed:4c:e2:68:1b:0b:94:ab:e7:90:68:8a:3e:cb:35:f8:c8:64:
fc:a0:b9:d0:1b:0e:67:a9:c8:1d:5d:8b:e9:fc:b9:2b:04:b1:
01:93:8b:dd:69:0f:66:ba:dc:ed:da:0b:de:fe:5a:96:46:49:
6d:a0:72:31:d3:bb:a7:8b:5e:21:b7:6c:f1:ff:97:f3:17:93:
9a:e3:7c:d5:29:57:14:9f:81:34:b1:95:79:fe:52:5f:d6:3c:
36:9e:ae:46:94:46:c3:7d:1b:dd:3f:f3:30:02:f2:e8:be:ed:
a9:ff:86:32:90:7d:15:d3:e3:6e:cf:48:93:86:9a:2a:6e:02:
49:91:86:c9:55:e6:dd:a9:ac:4b:30:df:fa:86:d7:dd:44:49:
62:0c:23:b4:d1:3d:c1:9c:93:41:54:95:59:37:15:df:da:4a:
aa:6b:bb:90:18:f5:c5:ca:f5:7a:0b:81:be:3f:18:d2:36:66:
2a:2e:0b:9d:28:d6:0a:68:6c:86:f8:db:58:3d:26:74:71:0c:
09:e6:01:67:28:22:f9:79:db:d2:f2:63:fc:0f:44:dd:be:c9:
94:21:f9:e1:c6:05:30:7b:d0:1c:b8:c8:a7:f5:a9:80:78:3f:
67:a2:6f:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEt1z3qRw4nd9Xdfm2uvf6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzM2NWFhZmJlMGU0NWEwNGRkMTVlOWMyMzExMjFlOWVh
ZWE4ZjIwHhcNMjYxMDEyMDIwMDQzWhcNMjYxMDEzMDIwMDQzWjAzMTEwLwYDVQQD
EygxYTM1ZWY2ZDk0ZDllZmFjYjNlMzJlNWQ1YjUzZGE3NTUyODM3ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C9mZ103iZkY/rY8+Wb2EaSG83Hy
C0IxYUoR/ez6iH7m9zL+AffcQtwkb0qmtPudaZn3mZFUPMZAJFJM2nWIvgfWfrl5
DsialmcY+La1nG5Y3MDuesocPhk7/NnvuGidi3Zs57HenBLj5KLFSWkOblno6olR
UdCcRAgP2DyX9z10B4CFnKl/VOsV3JV4/uAirlhhss+J+8ZNRs3iIloJZad7ONY6
8c0quAvTsCm5DFyginMotfE6HB0q1Ksuu50IJCpUqj+QySH6Zi5QM3svo+Flw4QB
ahonGAJQCfzAh8J0oYjP6y1tAKcs9C3z/jw9DzJgrBYpNEIPo+/m2YxP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo1722U2e+ss+MuXVtT2nVSg38DMB8GA1UdIwQY
MBaAFP3DZar74ORaBN0V6cIxEh6erqjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMt
YWJkZTdhNjVlMDRhLzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMtYWJkZTdhNjVlMDRh
LzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3F2Ave1
FdiMDdIh0IK73UTp7UziaBsLlKvnkGiKPss1+Mhk/KC50BsOZ6nIHV2L6fy5KwSx
AZOL3WkPZrrc7doL3v5alkZJbaByMdO7p4teIbds8f+X8xeTmuN81SlXFJ+BNLGV
ef5SX9Y8Np6uRpRGw30b3T/zMALy6L7tqf+GMpB9FdPjbs9Ik4aaKm4CSZGGyVXm
3amsSzDf+obX3URJYgwjtNE9wZyTQVSVWTcV39pKqmu7kBj1xcr1eguBvj8Y0jZm
Ki4LnSjWCmhshvjbWD0mdHEMCeYBZygi+Xnb0vJj/A9E3b7JlCH54cYFMHvQHLjI
p/WpgHg/Z6JvjQ==
-----END CERTIFICATE-----
Generated at Mon Oct 12 09:11:00 2026 by rpki-client