Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: 8Q46rDueFqzSS8HD/ipGgNTHDS9CvRfAKIGu/BcRN/E=
Subject key identifier: 59:49:BE:23:7B:EF:1E:E3:05:D8:AD:2F:39:A9:51:7F:C6:D3:7F:AC
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 01A115981613F4586DC7D346D8598788E7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 0BEF
Signing time: Wed 07 Oct 2026 09:00:50 +0000
Manifest this update: Wed 07 Oct 2026 09:00:50 +0000
Manifest next update: Thu 08 Oct 2026 09:00:50 +0000
Files and hashes: 1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=)
2: U1jyhx8j_nvKcfk3KhbdWc9bhC8.asa (hash: ILl2CBQ+zUjpqpbOucbHOIyx0PlfJ9zR6X32LAUCxD0=)
3: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: S1xglBtd6PYQgv66w9SaUUB+WE+dCI/vmM+pR/w842Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:16:13:f4:58:6d:c7:d3:46:d8:59:87:88:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Oct 7 09:00:50 2026 GMT
Not After : Oct 8 09:00:50 2026 GMT
Subject: CN=5949be237bef1ee305d8ad2f39a9517fc6d37fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:42:04:f9:36:f9:36:0a:5d:dc:06:ff:44:
6f:9f:43:86:23:a1:3a:69:7f:e0:e0:dd:75:93:9d:
85:fe:72:79:6f:23:78:42:7e:75:7b:65:c9:18:21:
19:14:fb:0b:b4:c5:38:08:57:90:42:6c:33:ce:c6:
a6:b3:f3:c1:3b:00:a1:49:fb:ec:cf:41:1c:93:05:
74:45:bd:19:ae:46:42:e0:ae:83:c0:8c:a7:21:cb:
59:e5:60:68:bd:96:08:fd:0a:33:0c:5f:1c:a2:73:
fd:20:6e:66:d5:ea:07:70:52:35:b9:ee:31:4e:52:
ae:df:e5:51:2d:c9:12:a9:e3:a1:3f:98:0c:83:32:
22:a7:f0:1e:74:57:de:95:d3:8a:14:06:fa:91:dc:
64:f3:2b:9f:50:b1:19:7e:44:bf:da:1c:04:5f:98:
d2:58:d2:c5:57:14:f3:9a:40:67:02:d6:f1:e6:99:
4f:3f:59:0e:e4:6b:40:5a:db:7f:11:b6:2c:c8:38:
f9:2f:54:59:da:b0:36:06:50:ae:32:20:6d:de:ee:
76:c3:f3:8f:90:cf:25:fd:a8:1e:ea:8a:02:82:0f:
c9:7b:dd:c1:4b:c0:fd:b2:a3:1f:f1:9b:e8:82:76:
bc:f4:a1:ab:8e:a7:74:b0:7e:1d:bc:4d:10:d3:82:
b2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:49:BE:23:7B:EF:1E:E3:05:D8:AD:2F:39:A9:51:7F:C6:D3:7F:AC
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:61:ce:90:60:24:01:0b:0c:30:c2:69:81:1b:a7:65:12:b7:
c0:70:20:6d:41:b8:9a:76:a5:a4:84:69:64:76:fb:09:e1:1a:
a9:31:9e:18:a8:24:e3:c4:65:ab:04:f9:ed:84:91:ef:d7:dc:
ce:e6:29:9a:d8:71:21:c9:fe:9d:df:3f:73:b7:9d:94:39:4f:
95:13:8f:a8:a9:ac:a0:e1:13:be:89:36:83:f4:29:ca:8a:49:
40:1f:cd:53:38:41:91:72:fa:eb:3e:1c:ad:e3:5b:6d:9e:63:
df:be:c3:38:2f:68:af:72:f5:47:bf:32:1a:4a:b8:b6:e6:81:
cc:b1:15:34:16:c7:59:00:04:e1:0b:7d:6b:eb:db:b9:8c:7d:
27:ed:07:35:c7:2d:72:bf:80:e4:de:20:8c:21:4c:99:e8:76:
5a:a5:42:77:d6:ac:59:63:2f:4c:c2:1c:e0:14:88:5c:aa:86:
54:c9:6f:6a:b7:3e:e9:77:0d:12:94:3e:c5:ac:98:60:cd:59:
7c:5c:92:61:16:89:99:5d:22:96:1d:5b:41:66:42:7c:69:b1:
c9:af:22:92:56:dd:b4:05:ff:31:5f:a2:cd:cb:b3:a1:5e:0e:
28:13:06:3b:90:2d:97:a5:99:9a:c4:06:86:e3:91:a9:f4:69:
32:18:22:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEVmBYT9Fhtx9NG2FmHiOfHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzOGEyZDcyZTc5MDI2ZjUyYmY1NjU3ZTk3ZmZkMWIxMWJl
ODg2NDEwHhcNMjYxMDA3MDkwMDUwWhcNMjYxMDA4MDkwMDUwWjAzMTEwLwYDVQQD
Eyg1OTQ5YmUyMzdiZWYxZWUzMDVkOGFkMmYzOWE5NTE3ZmM2ZDM3ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS9CBPk2+TYKXdwG/0Rvn0OGI6E6
aX/g4N11k52F/nJ5byN4Qn51e2XJGCEZFPsLtMU4CFeQQmwzzsams/PBOwChSfvs
z0EckwV0Rb0ZrkZC4K6DwIynIctZ5WBovZYI/QozDF8conP9IG5m1eoHcFI1ue4x
TlKu3+VRLckSqeOhP5gMgzIip/AedFfeldOKFAb6kdxk8yufULEZfkS/2hwEX5jS
WNLFVxTzmkBnAtbx5plPP1kO5GtAWtt/EbYsyDj5L1RZ2rA2BlCuMiBt3u52w/OP
kM8l/age6ooCgg/Je93BS8D9sqMf8Zvogna89KGrjqd0sH4dvE0Q04KyFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlJviN77x7jBditLzmpUX/G03+sMB8GA1UdIwQY
MBaAFJOKLXLnkCb1K/Vlfpf/0bEb6IZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAt
YzM2OTc2MzYzOTY4LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ZjdkMzctYTc0MC00MmIwLWFjZDAtYzM2OTc2MzYzOTY4
LzEvazRvdGN1ZVFKdlVyOVdWLWxfX1JzUnZvaGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWHOkGAk
AQsMMMJpgRunZRK3wHAgbUG4mnalpIRpZHb7CeEaqTGeGKgk48RlqwT57YSR79fc
zuYpmthxIcn+nd8/c7edlDlPlROPqKmsoOETvok2g/QpyopJQB/NUzhBkXL66z4c
reNbbZ5j377DOC9or3L1R78yGkq4tuaBzLEVNBbHWQAE4Qt9a+vbuYx9J+0HNcct
cr+A5N4gjCFMmeh2WqVCd9asWWMvTMIc4BSIXKqGVMlvarc+6XcNEpQ+xayYYM1Z
fFySYRaJmV0ilh1bQWZCfGmxya8iklbdtAX/MV+izcuzoV4OKBMGO5Atl6WZmsQG
huORqfRpMhgiyA==
-----END CERTIFICATE-----
Generated at Wed Oct 7 17:08:02 2026 by rpki-client