Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
File: clC6rf8sKGxguWEH0sZNU37ArKY.mft (raw, json)
Hash identifier: Mhs61P0OlfgHStw265Ih9TLOPKcMIpxDeoi9ls5tL2Q=
Subject key identifier: 5D:5F:EF:81:C2:1D:1B:86:27:A4:04:8E:E9:2B:BA:8B:E1:20:F1:19
Authority key identifier: 72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
Certificate issuer: /CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Certificate serial: 01A0C96B535144EFE456BDD767D805AC7FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 14:00:49 +0000
Manifest this update: Tue 22 Sep 2026 14:00:49 +0000
Manifest next update: Wed 23 Sep 2026 14:00:49 +0000
Files and hashes: 1: 0oe_lYqhqfWPj1_Z9cf3I0XuBc4.asa (hash: 6KuQFoMyFoqYvRnIbS2lO87lEEY0GqUNL5F5S6mix1w=)
2: clC6rf8sKGxguWEH0sZNU37ArKY.crl (hash: ceVjlWHOEQyXAH9uRmxxnUOcEBA3JGTBbEOOIgO+hCk=)
3: hbeIEnlJLGCUvc-bfFDQtYlNuoI.roa (hash: lsxRlcpEOwKSepvmoUR1XtdYnRnB8rc4Z/mYeHXQHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:53:51:44:ef:e4:56:bd:d7:67:d8:05:ac:7f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7250baadff2c286c60b96107d2c64d537ec0aca6
Validity
Not Before: Sep 22 14:00:49 2026 GMT
Not After : Sep 23 14:00:49 2026 GMT
Subject: CN=5d5fef81c21d1b8627a4048ee92bba8be120f119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:97:a2:f7:a2:ca:da:8f:4b:c5:bb:af:89:
94:b6:c8:30:8c:f4:34:b8:bc:69:34:7d:cd:5a:ce:
56:97:d9:b9:11:d9:70:18:a2:71:1e:cb:3a:70:2a:
ad:70:73:36:f7:b0:00:1a:5e:29:59:9f:fa:b9:f5:
c5:c5:96:a9:ea:2b:31:60:9b:a7:e0:55:f0:77:6f:
a1:46:01:80:f5:1a:90:87:f8:a1:8f:24:0d:4f:e2:
e6:cc:8c:bd:dd:5b:7e:24:0d:2a:70:14:4a:3c:ba:
ad:ce:48:c6:0e:b9:2b:f0:91:58:d8:36:d2:dd:ea:
28:a2:e3:d5:3e:f2:0a:e1:1c:d1:fa:6c:d5:55:7c:
3a:79:db:93:67:7e:ad:62:b5:69:25:2b:1f:e8:cd:
79:93:1d:2c:4e:aa:43:ad:9e:96:aa:e9:80:3f:53:
f8:dc:81:4d:9f:ca:c8:bb:cf:18:96:1f:06:95:c2:
69:03:44:b3:43:98:42:69:49:80:91:98:17:a9:1a:
68:47:b8:04:e8:fb:d8:e4:8e:bc:a5:11:e7:0d:9d:
46:9b:9d:cf:b0:77:e6:b5:51:ca:d7:28:6d:db:e1:
a4:3c:9b:b2:75:94:7c:b0:71:9d:b8:ed:af:57:b2:
d7:26:6b:29:a6:e8:9a:84:54:75:d4:cb:71:9c:1c:
4e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:5F:EF:81:C2:1D:1B:86:27:A4:04:8E:E9:2B:BA:8B:E1:20:F1:19
X509v3 Authority Key Identifier:
keyid:72:50:BA:AD:FF:2C:28:6C:60:B9:61:07:D2:C6:4D:53:7E:C0:AC:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clC6rf8sKGxguWEH0sZNU37ArKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/27e031-1386-4fca-bbe1-8e9b511cac1a/1/clC6rf8sKGxguWEH0sZNU37ArKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:0c:23:09:d0:9a:cc:9d:f8:a8:11:ff:df:24:40:1e:0e:ef:
a7:7e:7e:d9:b7:b9:ff:1b:29:3e:4b:21:5b:76:d2:dd:bd:6d:
2b:f1:88:eb:5a:4f:09:44:c6:82:dd:e8:cc:8b:38:d1:c3:49:
82:29:0f:a2:22:c4:a8:60:59:5f:6a:a1:08:9c:73:86:22:60:
c2:a3:cf:7d:0c:48:77:4a:5e:b3:cb:35:f3:10:ef:65:d6:87:
af:eb:35:aa:ff:49:c7:14:d1:70:24:7b:07:10:b0:90:b5:3b:
42:db:9a:01:02:02:76:70:08:43:c7:4b:61:5d:06:a7:7e:00:
0a:5e:34:6d:9f:b8:d9:b4:0f:7c:03:de:04:87:d2:5f:17:4a:
fa:89:e1:9a:31:5c:c8:20:a3:51:48:28:6b:9a:b8:0d:c6:6d:
1e:0b:0b:bb:44:3a:19:95:4f:fe:6f:1d:87:c3:d3:cb:8a:69:
75:53:f1:cb:0b:cb:4b:eb:b7:58:89:36:4d:51:8e:f9:1b:e8:
c0:d1:aa:39:23:08:c2:4b:0f:a8:0b:83:26:ec:97:a3:05:9e:
73:30:5f:1d:cb:2d:04:e0:f0:40:ef:2a:a0:20:23:cb:26:84:
ae:11:d8:83:17:53:62:be:2f:9d:1e:99:71:8c:57:44:ce:d8:
fa:f4:f3:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa1NRRO/kVr3XZ9gFrH+5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNTBiYWFkZmYyYzI4NmM2MGI5NjEwN2QyYzY0ZDUzN2Vj
MGFjYTYwHhcNMjYwOTIyMTQwMDQ5WhcNMjYwOTIzMTQwMDQ5WjAzMTEwLwYDVQQD
Eyg1ZDVmZWY4MWMyMWQxYjg2MjdhNDA0OGVlOTJiYmE4YmUxMjBmMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLqXoveiytqPS8W7r4mUtsgwjPQ0
uLxpNH3NWs5Wl9m5EdlwGKJxHss6cCqtcHM297AAGl4pWZ/6ufXFxZap6isxYJun
4FXwd2+hRgGA9RqQh/ihjyQNT+LmzIy93Vt+JA0qcBRKPLqtzkjGDrkr8JFY2DbS
3eooouPVPvIK4RzR+mzVVXw6eduTZ36tYrVpJSsf6M15kx0sTqpDrZ6WqumAP1P4
3IFNn8rIu88Ylh8GlcJpA0SzQ5hCaUmAkZgXqRpoR7gE6PvY5I68pRHnDZ1Gm53P
sHfmtVHK1yht2+GkPJuydZR8sHGduO2vV7LXJmsppuiahFR11MtxnBxOMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1f74HCHRuGJ6QEjukruovhIPEZMB8GA1UdIwQY
MBaAFHJQuq3/LChsYLlhB9LGTVN+wKymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEt
OGU5YjUxMWNhYzFhLzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8yN2UwMzEtMTM4Ni00ZmNhLWJiZTEtOGU5YjUxMWNhYzFh
LzEvY2xDNnJmOHNLR3hndVdFSDBzWk5VMzdBcktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1AwjCdCa
zJ34qBH/3yRAHg7vp35+2be5/xspPkshW3bS3b1tK/GI61pPCUTGgt3ozIs40cNJ
gikPoiLEqGBZX2qhCJxzhiJgwqPPfQxId0pes8s18xDvZdaHr+s1qv9JxxTRcCR7
BxCwkLU7QtuaAQICdnAIQ8dLYV0Gp34ACl40bZ+42bQPfAPeBIfSXxdK+onhmjFc
yCCjUUgoa5q4DcZtHgsLu0Q6GZVP/m8dh8PTy4ppdVPxywvLS+u3WIk2TVGO+Rvo
wNGqOSMIwksPqAuDJuyXowWeczBfHcstBODwQO8qoCAjyyaErhHYgxdTYr4vnR6Z
cYxXRM7Y+vTzgA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:37:05 2026 by rpki-client