Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File: rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier: XH0TdgV2pat+1AnOQUIXVP9Uh9C2z7vJFzJJD3hTi5c=
Subject key identifier: 74:CA:28:72:77:1E:53:44:71:14:5D:04:8C:82:2A:FD:AF:6D:D1:55
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer: /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial: 01A0CA46863C5FB1D1002805B035A1D51F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number: 0F82
Signing time: Tue 22 Sep 2026 18:00:14 +0000
Manifest this update: Tue 22 Sep 2026 18:00:14 +0000
Manifest next update: Wed 23 Sep 2026 18:00:14 +0000
Files and hashes: 1: SzookzV0kvbV2uV2WuzBzsdzDN0.roa (hash: 305744fYy853yhsc/+Jcw6ozr6ihNDOG9TribOS/z2s=)
2: TWCjy8hYVvxSie77cpH2Pet8J70.roa (hash: UosiAuR+zQzxXxFaYN3sf+bjMmm4ozCxMZtIycUu35w=)
3: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: fXA2EuMUDPkw4o3v6bKcKbKZthS/lWG4CeKWfy4mYh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:86:3c:5f:b1:d1:00:28:05:b0:35:a1:d5:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Validity
Not Before: Sep 22 18:00:14 2026 GMT
Not After : Sep 23 18:00:14 2026 GMT
Subject: CN=74ca2872771e534471145d048c822afdaf6dd155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:d2:ad:74:63:27:ce:e0:38:7a:80:4f:b8:
cc:b4:83:86:4c:20:10:9d:b5:f8:e9:8a:93:85:56:
d2:35:f5:4d:7f:29:0e:1e:71:ef:ff:96:0d:36:94:
f7:70:73:bd:de:44:7d:a2:93:d9:01:9a:9c:a5:79:
ce:2c:f8:9c:72:1d:5d:28:54:c9:f4:e6:75:27:37:
26:4c:53:f0:64:70:15:9e:89:db:4a:41:0d:65:ea:
ce:26:f4:db:21:3d:f7:11:a6:22:da:ab:e4:84:5f:
86:a6:d9:dd:f2:36:17:fd:47:22:de:15:5f:7f:53:
50:64:f9:35:db:d5:25:51:03:3a:cf:f2:2f:09:11:
44:0d:aa:ce:39:97:55:fc:c8:28:ba:91:92:b3:7f:
0f:6d:3f:ce:bd:c8:ab:9f:f4:4a:91:d7:b5:91:80:
be:2c:79:31:68:46:f1:60:90:4f:09:43:2a:fb:90:
a1:a0:bb:c6:93:50:12:73:df:da:04:c9:d9:42:84:
d0:18:c9:88:37:1f:96:a5:db:6a:8f:59:bc:ec:c8:
56:36:44:5a:98:4a:1a:b3:20:dc:1a:07:96:a7:3e:
55:7b:ca:b2:6d:6a:a3:79:d6:2a:76:45:b7:86:6a:
0c:0c:4b:b7:2b:a6:f7:7d:76:e6:d2:3e:c9:b9:73:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CA:28:72:77:1E:53:44:71:14:5D:04:8C:82:2A:FD:AF:6D:D1:55
X509v3 Authority Key Identifier:
keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:bc:6f:fc:49:9f:6e:44:c3:cf:7e:5a:eb:1b:ff:94:9d:03:
48:c2:69:d9:3f:80:21:24:1e:fa:08:b6:76:56:fc:16:1e:51:
c1:33:b5:f5:1f:f6:9a:83:dd:39:f7:61:95:04:95:02:64:d6:
05:6c:02:08:d3:a5:b0:d9:2b:dc:8d:df:b4:8d:9f:c4:c1:4c:
57:c1:35:0d:b5:9f:4b:f6:20:07:6e:a5:d4:86:db:27:ff:77:
39:dc:9a:6e:11:3a:2c:c0:df:10:ba:87:fb:1a:9d:b2:f1:ef:
dc:ba:8b:0c:f0:fb:b6:ad:98:8f:bf:5a:8d:3c:33:35:58:a8:
fb:3c:6c:3e:63:c6:68:1f:54:6c:da:2e:71:82:fc:66:cb:a6:
15:57:f4:f3:a0:70:85:95:9f:f1:67:e2:34:44:2e:63:b2:4d:
65:f4:94:7f:71:95:d4:65:62:f1:d8:ae:4a:bd:65:a3:ac:82:
00:7c:85:f7:26:df:86:13:a0:af:0c:60:bd:b4:52:3d:ab:5f:
b2:16:1f:a3:f2:b8:96:68:ff:05:0e:44:3f:32:13:7d:9a:29:
48:e2:15:b1:99:26:5d:05:73:49:15:50:41:b3:34:d3:4a:33:
02:75:2f:f8:7b:cd:4a:11:8b:a9:63:77:ff:81:1b:0b:cb:dd:
f0:a6:49:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRoY8X7HRACgFsDWh1R8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMWQyYTU2MmM3ZGIyMTE1MWI0YTA5MjZiOGQ2ZmVlYWNl
Zjg4NTcwHhcNMjYwOTIyMTgwMDE0WhcNMjYwOTIzMTgwMDE0WjAzMTEwLwYDVQQD
Eyg3NGNhMjg3Mjc3MWU1MzQ0NzExNDVkMDQ4YzgyMmFmZGFmNmRkMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3unSrXRjJ87gOHqAT7jMtIOGTCAQ
nbX46YqThVbSNfVNfykOHnHv/5YNNpT3cHO93kR9opPZAZqcpXnOLPicch1dKFTJ
9OZ1JzcmTFPwZHAVnonbSkENZerOJvTbIT33EaYi2qvkhF+Gptnd8jYX/Uci3hVf
f1NQZPk129UlUQM6z/IvCRFEDarOOZdV/MgoupGSs38PbT/Ovcirn/RKkde1kYC+
LHkxaEbxYJBPCUMq+5ChoLvGk1ASc9/aBMnZQoTQGMmINx+Wpdtqj1m87MhWNkRa
mEoasyDcGgeWpz5Ve8qybWqjedYqdkW3hmoMDEu3K6b3fXbm0j7JuXOPAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTKKHJ3HlNEcRRdBIyCKv2vbdFVMB8GA1UdIwQY
MBaAFK0dKlYsfbIRUbSgkmuNb+6s74hXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDkt
MzI5MzZjM2E0YTlkLzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS84M2FjZDctNWUxYS00OWY5LWI0MDktMzI5MzZjM2E0YTlk
LzEvclIwcVZpeDlzaEZSdEtDU2E0MXY3cXp2aUZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerxv/Emf
bkTDz35a6xv/lJ0DSMJp2T+AISQe+gi2dlb8Fh5RwTO19R/2moPdOfdhlQSVAmTW
BWwCCNOlsNkr3I3ftI2fxMFMV8E1DbWfS/YgB26l1IbbJ/93OdyabhE6LMDfELqH
+xqdsvHv3LqLDPD7tq2Yj79ajTwzNVio+zxsPmPGaB9UbNoucYL8ZsumFVf086Bw
hZWf8WfiNEQuY7JNZfSUf3GV1GVi8diuSr1lo6yCAHyF9ybfhhOgrwxgvbRSPatf
shYfo/K4lmj/BQ5EPzITfZopSOIVsZkmXQVzSRVQQbM000ozAnUv+HvNShGLqWN3
/4EbC8vd8KZJKw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:49:35 2026 by rpki-client