Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
File: eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft (raw, json)
Hash identifier: omOKR29Kq8dxTho7yNPVyQ3NYGwER943fMFLQjRbYWA=
Subject key identifier: 70:B5:CF:24:21:B3:DE:5B:5A:4F:C6:B0:EA:F2:D2:FE:72:0C:D4:64
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 01A12DA05D13C8C74EB63D0D8EA9044589C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
Manifest number: 0AA1
Signing time: Mon 12 Oct 2026 01:00:46 +0000
Manifest this update: Mon 12 Oct 2026 01:00:46 +0000
Manifest next update: Tue 13 Oct 2026 01:00:46 +0000
Files and hashes: 1: AmpembMZnQ3F11s0E_0dYki25Mc.roa (hash: WDbKJoErc1LVQLx62LO/KjvhetUehDjF17FpYSbvL/4=)
2: PKXuRc_5_wM56Jttnq1znbxTNrM.roa (hash: wNBNrg7iwt49739UTs0ZF6veqyOIJdBVUfKeZkV8DDw=)
3: eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl (hash: 8QRpvMEzRlIQSRTwQ9EzEhqZr6RlWINOH0g2WDRcp5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:a0:5d:13:c8:c7:4e:b6:3d:0d:8e:a9:04:45:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Oct 12 01:00:46 2026 GMT
Not After : Oct 13 01:00:46 2026 GMT
Subject: CN=70b5cf2421b3de5b5a4fc6b0eaf2d2fe720cd464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:ea:2b:52:2c:c3:10:56:57:d3:35:3d:68:
03:c0:84:fe:e5:dc:da:a1:b1:ce:3a:bc:6a:b3:68:
8b:63:73:cc:4c:af:3c:da:e3:4f:66:38:6f:08:70:
1e:4a:85:2b:d2:e8:6d:f2:b4:bb:a6:3e:7b:2d:25:
68:3e:40:32:b4:17:33:69:da:1c:0c:ce:9f:c5:03:
ec:eb:2b:60:5c:94:ac:f9:5d:6c:1c:8b:8c:04:51:
41:da:fa:17:42:4b:28:f6:8e:76:05:b3:64:56:f0:
7c:92:ff:1f:30:15:00:96:fc:3e:1e:72:27:32:3a:
47:1a:4a:b5:ad:2a:d7:f6:4e:77:d7:f9:aa:d3:3a:
52:1d:fd:52:f9:fa:90:c1:53:0b:0b:c9:f3:5c:b0:
82:a1:c4:f6:e1:7d:b7:dd:1b:5d:23:37:41:6c:dc:
3c:9f:34:59:68:85:8a:cc:ee:c6:f5:1c:17:d0:fe:
a7:a0:9a:1f:c4:c6:fb:9c:db:f4:00:5c:43:16:ab:
b3:06:d0:a5:70:eb:8c:e1:f7:12:be:4d:c4:f1:9a:
b1:1a:a5:ca:bb:73:29:c1:ec:6c:6d:da:99:28:ef:
bd:ac:a1:d6:7a:82:7d:02:b5:50:cb:2e:3f:7f:0f:
c3:1e:74:f6:f0:8e:bb:50:aa:1b:58:b0:e7:a9:e2:
24:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:CF:24:21:B3:DE:5B:5A:4F:C6:B0:EA:F2:D2:FE:72:0C:D4:64
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:26:4e:18:48:53:1a:9f:08:0f:c6:f5:e5:62:6b:0d:a7:4c:
bd:35:00:4e:1b:17:ca:07:14:60:74:a2:ae:2e:b2:e9:2c:2c:
e0:ff:32:5e:1b:f5:15:82:85:57:02:88:7c:40:3f:11:3c:79:
46:91:be:b4:7a:56:2a:db:c4:bf:cc:dd:ba:c9:55:4f:24:fc:
34:05:c9:b0:74:1d:86:1f:b6:90:8d:02:34:d7:fe:92:c7:e8:
38:d5:44:0a:e7:99:70:b2:b2:e5:b0:8b:40:cd:5b:a5:0a:b5:
d5:4a:c3:ed:d6:7d:4e:d2:f9:32:4b:1a:bd:e0:3c:d4:a3:05:
42:0f:65:f2:42:42:97:06:c6:2e:ab:46:6d:17:a5:53:40:d7:
fc:21:54:d2:39:4c:80:a8:cc:36:96:ae:30:6a:82:95:07:c1:
7d:cd:db:ec:16:4c:94:2c:54:1a:16:66:aa:fc:97:dc:74:7a:
31:a4:7f:3f:86:b5:52:51:26:bf:ac:64:8e:25:52:69:75:78:
51:42:03:21:d4:4f:cf:61:1b:e5:08:a9:89:ba:32:b0:c8:4a:
ab:dc:f2:4d:d8:a9:d5:05:50:40:ab:cd:5e:fb:a0:38:d9:29:
84:0f:7e:bb:6d:e6:3d:67:31:45:73:12:bf:db:a6:14:91:91:
15:8a:30:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEtoF0TyMdOtj0NjqkERYnJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjYxMDEyMDEwMDQ2WhcNMjYxMDEzMDEwMDQ2WjAzMTEwLwYDVQQD
Eyg3MGI1Y2YyNDIxYjNkZTViNWE0ZmM2YjBlYWYyZDJmZTcyMGNkNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLDqK1IswxBWV9M1PWgDwIT+5dza
obHOOrxqs2iLY3PMTK882uNPZjhvCHAeSoUr0uht8rS7pj57LSVoPkAytBczadoc
DM6fxQPs6ytgXJSs+V1sHIuMBFFB2voXQkso9o52BbNkVvB8kv8fMBUAlvw+HnIn
MjpHGkq1rSrX9k531/mq0zpSHf1S+fqQwVMLC8nzXLCCocT24X233RtdIzdBbNw8
nzRZaIWKzO7G9RwX0P6noJofxMb7nNv0AFxDFquzBtClcOuM4fcSvk3E8ZqxGqXK
u3MpwexsbdqZKO+9rKHWeoJ9ArVQyy4/fw/DHnT28I67UKobWLDnqeIkUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHC1zyQhs95bWk/GsOry0v5yDNRkMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCZOGEhT
Gp8ID8b15WJrDadMvTUAThsXygcUYHSiri6y6Sws4P8yXhv1FYKFVwKIfEA/ETx5
RpG+tHpWKtvEv8zduslVTyT8NAXJsHQdhh+2kI0CNNf+ksfoONVECueZcLKy5bCL
QM1bpQq11UrD7dZ9TtL5MksaveA81KMFQg9l8kJClwbGLqtGbRelU0DX/CFU0jlM
gKjMNpauMGqClQfBfc3b7BZMlCxUGhZmqvyX3HR6MaR/P4a1UlEmv6xkjiVSaXV4
UUIDIdRPz2Eb5QipiboysMhKq9zyTdip1QVQQKvNXvugONkphA9+u23mPWcxRXMS
v9umFJGRFYowag==
-----END CERTIFICATE-----
Generated at Mon Oct 12 07:12:31 2026 by rpki-client