Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: zusBR8xUVc9ZlIybnoMGePlYyERc/wOxdiIMsFoPnzg=
Subject key identifier: 87:35:29:36:AA:EC:CC:27:48:76:57:C5:FF:87:FE:CA:BC:DD:6F:24
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 01A1C4E7DB523EA3F7BE3FA2227ADDC32AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0E46
Signing time: Tue 10 Nov 2026 10:01:31 +0000
Manifest this update: Tue 10 Nov 2026 10:01:31 +0000
Manifest next update: Wed 11 Nov 2026 10:01:31 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: 9ASOqiSoQp9oK6xSF5szVB2QfSWcPqxkJu4OnDFEaQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e7:db:52:3e:a3:f7:be:3f:a2:22:7a:dd:c3:2a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Nov 10 10:01:31 2026 GMT
Not After : Nov 11 10:01:31 2026 GMT
Subject: CN=87352936aaeccc27487657c5ff87fecabcdd6f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:45:3f:3b:55:48:fd:a6:13:7f:22:68:f6:28:
d0:44:0a:b1:a3:cb:65:ce:c6:93:b1:a6:d5:b2:99:
f2:30:1f:f2:c4:24:1c:8e:ef:75:ee:4f:e1:cd:52:
52:71:e6:cf:d6:fa:70:dc:12:7b:6a:e5:82:03:a6:
87:cb:47:b4:74:9d:70:a8:a5:2a:29:a2:23:1f:ab:
3e:1c:4b:46:0a:b4:5a:81:ce:51:d2:9f:e3:2b:0e:
c5:3b:27:86:b6:cd:02:0d:5a:fc:85:5b:c6:da:95:
1a:09:d5:89:42:82:09:ad:02:a0:09:f2:23:93:d6:
61:14:c9:cd:3d:31:81:21:e6:36:b5:45:f1:66:78:
96:04:43:4e:36:83:79:93:27:11:48:3b:bc:ac:33:
5d:69:96:fe:3a:6e:64:4c:ee:3d:ed:d1:02:7d:b1:
38:95:39:d5:5d:0d:c2:c3:51:12:df:f7:75:ad:20:
a2:14:8a:5e:27:cc:cd:1f:ce:32:b7:3c:76:21:a2:
81:ad:98:bb:49:d3:0f:09:48:f0:3b:30:ac:83:5b:
18:f6:ea:a7:22:9f:6b:3d:bb:74:43:c6:d0:85:ae:
33:7c:6a:35:bf:65:98:69:6d:13:8a:38:6b:d3:4c:
fa:d2:fb:17:b9:64:3e:66:d8:12:fd:c6:93:5a:85:
22:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:35:29:36:AA:EC:CC:27:48:76:57:C5:FF:87:FE:CA:BC:DD:6F:24
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:db:d5:d1:9b:97:11:e5:b5:da:6f:18:b8:50:95:eb:79:46:
1e:44:be:99:5b:67:c7:43:dc:24:95:b3:0a:d7:ba:f8:36:6d:
78:5d:dc:23:2f:34:95:51:09:42:10:93:0d:71:e6:47:89:f3:
98:ff:ee:e8:b5:3b:4e:0c:96:d0:6d:18:08:43:a4:b7:9c:e4:
55:ed:fa:2e:4b:0a:14:77:09:4d:af:05:1a:16:7b:36:1b:11:
35:6d:74:7c:6b:11:cb:da:73:4d:a5:6e:e7:70:b1:bb:e8:40:
ae:92:55:4a:75:bd:e0:2b:4c:c8:13:a7:7b:0e:71:9d:ee:af:
c7:45:6d:df:8d:8b:10:d0:f0:e7:23:ca:fa:bd:e7:2b:35:cd:
dc:1a:d5:4f:b4:67:2e:51:54:ac:c4:83:18:37:50:f7:27:9f:
b1:ba:82:ad:4e:7d:6d:83:bf:2f:e9:94:47:dc:5b:96:a8:cb:
b4:7c:b0:b7:d9:05:59:12:98:c7:84:e6:e7:ae:27:a2:12:f5:
d2:73:8b:ae:72:fc:5d:47:62:54:34:e5:ab:24:05:bd:3c:e8:
00:4f:6d:43:27:e4:12:c8:ed:ac:5f:e1:16:35:b1:2f:67:11:
9d:7f:a3:58:04:08:0f:ae:00:a2:06:46:47:3d:f2:ca:35:c6:
e6:7e:d0:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHE59tSPqP3vj+iInrdwyr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWYxODc3NDNhN2EwNzdmNmExZTA2NjVmZGRhYWVmNGQx
MjQ5ZmIwHhcNMjYxMTEwMTAwMTMxWhcNMjYxMTExMTAwMTMxWjAzMTEwLwYDVQQD
Eyg4NzM1MjkzNmFhZWNjYzI3NDg3NjU3YzVmZjg3ZmVjYWJjZGQ2ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEU/O1VI/aYTfyJo9ijQRAqxo8tl
zsaTsabVspnyMB/yxCQcju917k/hzVJScebP1vpw3BJ7auWCA6aHy0e0dJ1wqKUq
KaIjH6s+HEtGCrRagc5R0p/jKw7FOyeGts0CDVr8hVvG2pUaCdWJQoIJrQKgCfIj
k9ZhFMnNPTGBIeY2tUXxZniWBENONoN5kycRSDu8rDNdaZb+Om5kTO497dECfbE4
lTnVXQ3Cw1ES3/d1rSCiFIpeJ8zNH84ytzx2IaKBrZi7SdMPCUjwOzCsg1sY9uqn
Ip9rPbt0Q8bQha4zfGo1v2WYaW0Tijhr00z60vsXuWQ+ZtgS/caTWoUieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIc1KTaq7MwnSHZXxf+H/sq83W8kMB8GA1UdIwQY
MBaAFOOvGHdDp6B39qHgZl/dqu9NEkn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgt
NDFlYmU2OWUzMDMxLzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9jZjZiY2UtMTIzNy00NDBjLWEzYzgtNDFlYmU2OWUzMDMx
LzEvNDY4WWQwT25vSGYyb2VCbVg5MnE3MDBTU2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNvV0ZuX
EeW12m8YuFCV63lGHkS+mVtnx0PcJJWzCte6+DZteF3cIy80lVEJQhCTDXHmR4nz
mP/u6LU7TgyW0G0YCEOkt5zkVe36LksKFHcJTa8FGhZ7NhsRNW10fGsRy9pzTaVu
53Cxu+hArpJVSnW94CtMyBOnew5xne6vx0Vt342LENDw5yPK+r3nKzXN3BrVT7Rn
LlFUrMSDGDdQ9yefsbqCrU59bYO/L+mUR9xblqjLtHywt9kFWRKYx4Tm564nohL1
0nOLrnL8XUdiVDTlqyQFvTzoAE9tQyfkEsjtrF/hFjWxL2cRnX+jWAQID64AogZG
Rz3yyjXG5n7QwA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 14:52:13 2026 by rpki-client