Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
File: mM0-vWXtPZquB5oOJNcTLZpxqrg.mft (raw, json)
Hash identifier: sA/EveTxHUHrxCWuobu5ft22e6Kwm/f8dmZgVhNJrLM=
Subject key identifier: B2:49:FD:46:86:AC:0F:4A:5E:43:B5:C7:8B:4A:A1:CE:AB:D0:7B:E3
Authority key identifier: 98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
Certificate issuer: /CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Certificate serial: 01A13C6ED4C2370CCDB5E4D626137B7241EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
Manifest number: 1AA7
Signing time: Wed 14 Oct 2026 22:00:58 +0000
Manifest this update: Wed 14 Oct 2026 22:00:58 +0000
Manifest next update: Thu 15 Oct 2026 22:00:58 +0000
Files and hashes: 1: WHwPKWlS1MbhHwPa_EcSvzO973g.roa (hash: ZJla+7f5axXV/6uT6lJ/b0sWEBJptZZvhKtPIna394I=)
2: mM0-vWXtPZquB5oOJNcTLZpxqrg.crl (hash: uNOCWfjPBOCSQ+c7t2Mx7GwBqZPXHs1Yd9juD+MhI7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:d4:c2:37:0c:cd:b5:e4:d6:26:13:7b:72:41:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98cd3ebd65ed3d9aae079a0e24d7132d9a71aab8
Validity
Not Before: Oct 14 22:00:58 2026 GMT
Not After : Oct 15 22:00:58 2026 GMT
Subject: CN=b249fd4686ac0f4a5e43b5c78b4aa1ceabd07be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:59:fa:0a:70:76:8f:30:a7:f5:f5:e6:a6:
58:25:dc:3b:fa:ab:7e:1f:e9:a9:40:ed:f9:6d:b6:
ac:89:63:b4:88:cd:12:e3:5b:6e:a0:f4:a6:7e:9b:
d4:01:3f:fa:c5:ef:a9:be:6d:a3:d6:43:0a:7b:ba:
72:db:97:71:ee:db:71:62:58:1e:d3:5a:a4:8e:d4:
c7:e5:4f:fb:cb:a3:9e:bb:53:94:25:62:0e:b6:75:
03:b3:19:92:e3:1a:4b:78:29:cd:77:26:16:fb:55:
89:de:04:f0:fe:31:c3:99:66:30:cf:52:a0:27:c0:
86:70:06:2c:f0:42:7c:76:2b:2c:2b:9f:1a:e8:58:
a8:11:e1:00:bd:07:da:76:6f:23:04:9d:06:18:8f:
c4:07:ed:86:2d:3f:cb:70:2b:3b:97:2e:ad:46:ad:
f5:3f:fb:63:52:05:42:a6:28:58:5c:24:06:62:d8:
2b:60:68:5c:7e:cc:0d:a3:56:96:14:22:46:b5:f7:
8f:07:ad:90:8d:8b:22:c1:c2:59:b3:38:a4:15:63:
37:b5:66:4c:99:4c:7d:e4:76:8f:4a:e4:8a:67:e6:
99:5d:f7:93:4a:7f:1f:6c:1a:6e:d3:9b:33:ac:a3:
30:b2:1b:91:a6:3c:b0:81:e8:1c:de:82:03:f4:ce:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:FD:46:86:AC:0F:4A:5E:43:B5:C7:8B:4A:A1:CE:AB:D0:7B:E3
X509v3 Authority Key Identifier:
keyid:98:CD:3E:BD:65:ED:3D:9A:AE:07:9A:0E:24:D7:13:2D:9A:71:AA:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mM0-vWXtPZquB5oOJNcTLZpxqrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ccc645-5323-4b20-b475-f37705361cf8/1/mM0-vWXtPZquB5oOJNcTLZpxqrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:82:d5:59:17:5d:67:98:66:04:0d:52:e1:74:c6:f8:5e:79:
d9:a4:28:0f:41:b5:d2:c7:0c:9b:ad:2d:c0:ab:0f:01:75:ab:
f0:21:10:b9:52:2e:1e:75:77:93:cc:6c:aa:81:e7:67:f6:fa:
a5:df:60:1c:cf:c6:43:3f:85:0d:d9:18:e9:c2:ca:7c:5b:0f:
30:88:2c:1a:8e:47:96:2d:31:4b:49:99:dd:1c:6f:b6:89:c6:
13:35:e9:37:0d:57:0a:b5:92:f9:6a:8b:af:9a:72:3a:9f:63:
90:3e:d3:4a:14:05:a2:2d:48:28:7b:dd:5b:d1:6e:ba:ae:48:
c6:42:70:3c:2b:4b:65:6c:e2:47:4b:a4:8c:95:12:17:19:08:
ca:3c:47:e8:53:35:da:63:2a:22:96:0a:c6:a1:23:97:b8:4a:
0a:c8:8f:b6:fc:b2:43:3c:5f:5f:8f:6f:9e:14:35:d6:8a:68:
a1:7d:20:fa:1d:d6:8f:0a:e3:96:fc:39:f5:e4:c5:82:4e:6b:
db:9d:89:3a:10:5c:ca:8a:e5:e5:f7:a5:3f:13:0f:47:3e:fc:
fd:19:c1:a4:24:be:2f:31:a9:68:76:3d:ef:c7:ee:1d:b8:41:
12:fa:76:f5:ea:07:0f:d5:96:2e:2c:1b:b7:5a:0d:fb:f9:d8:
bd:dd:be:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8btTCNwzNteTWJhN7ckHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Y2QzZWJkNjVlZDNkOWFhZTA3OWEwZTI0ZDcxMzJkOWE3
MWFhYjgwHhcNMjYxMDE0MjIwMDU4WhcNMjYxMDE1MjIwMDU4WjAzMTEwLwYDVQQD
EyhiMjQ5ZmQ0Njg2YWMwZjRhNWU0M2I1Yzc4YjRhYTFjZWFiZDA3YmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUBZ+gpwdo8wp/X15qZYJdw7+qt+
H+mpQO35bbasiWO0iM0S41tuoPSmfpvUAT/6xe+pvm2j1kMKe7py25dx7ttxYlge
01qkjtTH5U/7y6Oeu1OUJWIOtnUDsxmS4xpLeCnNdyYW+1WJ3gTw/jHDmWYwz1Kg
J8CGcAYs8EJ8dissK58a6FioEeEAvQfadm8jBJ0GGI/EB+2GLT/LcCs7ly6tRq31
P/tjUgVCpihYXCQGYtgrYGhcfswNo1aWFCJGtfePB62QjYsiwcJZszikFWM3tWZM
mUx95HaPSuSKZ+aZXfeTSn8fbBpu05szrKMwshuRpjywgegc3oID9M7vnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJJ/UaGrA9KXkO1x4tKoc6r0HvjMB8GA1UdIwQY
MBaAFJjNPr1l7T2argeaDiTXEy2acaq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUt
ZjM3NzA1MzYxY2Y4LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jY2M2NDUtNTMyMy00YjIwLWI0NzUtZjM3NzA1MzYxY2Y4
LzEvbU0wLXZXWHRQWnF1QjVvT0pOY1RMWnB4cXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABILVWRdd
Z5hmBA1S4XTG+F552aQoD0G10scMm60twKsPAXWr8CEQuVIuHnV3k8xsqoHnZ/b6
pd9gHM/GQz+FDdkY6cLKfFsPMIgsGo5Hli0xS0mZ3RxvtonGEzXpNw1XCrWS+WqL
r5pyOp9jkD7TShQFoi1IKHvdW9Fuuq5IxkJwPCtLZWziR0ukjJUSFxkIyjxH6FM1
2mMqIpYKxqEjl7hKCsiPtvyyQzxfX49vnhQ11opooX0g+h3Wjwrjlvw59eTFgk5r
252JOhBcyorl5felPxMPRz78/RnBpCS+LzGpaHY978fuHbhBEvp29eoHD9WWLiwb
t1oN+/nYvd2+Rg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 04:00:44 2026 by rpki-client