Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: DnVRaXBlHXP+L41nZGTl23ASRvklqwoTfL7cN8V19cw=
Subject key identifier: 78:08:0C:71:0E:FB:C2:5B:01:1E:F9:A4:2B:52:79:C1:D9:94:B1:65
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 01A13D80F3114866E1AC1EA3BFB31B4CA5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 03:00:23 +0000
Manifest this update: Thu 15 Oct 2026 03:00:23 +0000
Manifest next update: Fri 16 Oct 2026 03:00:23 +0000
Files and hashes: 1: GvNFYyBUTZVKqfxGJ29AQ8ybUOI.roa (hash: uZnUMOZEaipYyz6w+Q0CeYwOVjF6E1oqOIzqR9nYZ4k=)
2: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: M3HkWh7YZwlyEWtkynprmF5+cBYVeATNFJYtDv45d3g=)
3: nFyJiI2QEmXq35fuiG_EUZU-0Tw.roa (hash: cLxbEZlxAIqYS86le/aYrGcroGy0E1YAeKBMSi+G8Y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:f3:11:48:66:e1:ac:1e:a3:bf:b3:1b:4c:a5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Oct 15 03:00:23 2026 GMT
Not After : Oct 16 03:00:23 2026 GMT
Subject: CN=78080c710efbc25b011ef9a42b5279c1d994b165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:01:2d:15:c6:46:d8:ac:65:c1:98:1d:81:67:
1d:f8:e7:a6:71:8e:6b:ab:8e:b7:58:39:7d:a1:ff:
b2:c7:03:a8:a5:37:c8:34:1e:4a:67:26:91:4a:c4:
af:e3:97:95:11:27:ca:d9:e4:fb:a7:d2:9c:02:6d:
bc:d7:4c:a9:1b:3c:26:b7:39:ca:93:0c:d5:a3:9a:
d5:12:74:b9:f4:5b:86:58:21:37:ef:c8:72:17:59:
fc:5a:39:08:ac:38:6e:51:29:92:2d:7d:f7:f4:84:
51:8a:da:19:62:d8:3c:9c:54:81:f0:91:fc:27:2c:
c7:0f:2f:0a:8d:ba:26:05:e9:ae:5e:72:04:71:b4:
12:fa:fc:94:ec:e4:3c:c0:77:d5:ed:6e:55:d3:d1:
a6:6c:1e:3d:51:35:f2:74:be:a6:1d:13:a6:0b:35:
f8:8d:6a:90:07:98:00:d9:60:7b:2a:a9:eb:30:22:
30:37:71:82:c6:1f:07:bf:6f:26:f6:b9:a5:84:23:
2b:aa:2c:a2:79:f0:23:4d:bc:26:bd:a1:35:97:19:
fd:ba:5b:12:ca:3c:28:9e:0a:01:3a:5d:17:69:d4:
a1:7d:7f:d6:20:9f:94:d8:94:c0:5a:ef:79:b4:6c:
2e:fc:70:1f:54:1a:5a:c6:e3:5e:da:63:4f:b2:3e:
9a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:0C:71:0E:FB:C2:5B:01:1E:F9:A4:2B:52:79:C1:D9:94:B1:65
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:fe:07:39:d5:20:b0:1b:00:a9:43:9a:a5:8c:97:8c:5c:12:
b5:72:9e:4d:b1:ff:60:9b:b4:7f:58:42:53:68:fd:7f:4e:ee:
2d:3d:94:76:b9:6b:ac:fd:73:1b:b3:dd:5f:79:88:9e:7f:6f:
64:9c:05:71:bd:d5:62:67:4e:ef:8e:3c:e4:05:93:7d:98:30:
03:ec:37:18:66:b0:54:0c:23:5e:79:fd:58:7e:b6:e6:a5:90:
d8:e1:47:14:20:b6:a4:8a:44:5c:19:b6:f3:59:8d:78:63:90:
1b:29:1e:13:c7:db:e6:e9:da:c5:5f:79:49:73:d9:82:c9:ea:
fb:0e:03:c2:d8:ad:77:c6:b9:22:66:cd:34:b1:92:85:f1:16:
a6:81:22:87:34:8a:fa:ce:42:ed:20:06:02:50:af:a5:a7:4a:
28:89:c5:3e:d2:89:9b:c9:ff:d2:b6:9e:1f:db:7f:63:e7:a3:
a5:95:56:9f:0f:3a:b9:13:0d:82:bd:fe:e6:05:4d:d1:f4:80:
8f:b3:ef:5c:d1:ed:27:e2:c2:ca:6a:fb:05:0e:96:e9:2c:f8:
f4:e6:78:b4:f5:0e:a5:58:f3:09:72:78:49:a3:6b:65:0a:2c:
a3:4d:e3:4b:c8:de:63:62:bc:c3:22:2a:00:44:e4:41:e5:5d:
5c:72:10:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gPMRSGbhrB6jv7MbTKXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYmUyNTY1NjVlMWMyN2M0YjI2NTYwMTkwZTk5NzgyODZh
ODJiNTIwHhcNMjYxMDE1MDMwMDIzWhcNMjYxMDE2MDMwMDIzWjAzMTEwLwYDVQQD
Eyg3ODA4MGM3MTBlZmJjMjViMDExZWY5YTQyYjUyNzljMWQ5OTRiMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QEtFcZG2KxlwZgdgWcd+OemcY5r
q463WDl9of+yxwOopTfINB5KZyaRSsSv45eVESfK2eT7p9KcAm2810ypGzwmtznK
kwzVo5rVEnS59FuGWCE378hyF1n8WjkIrDhuUSmSLX339IRRitoZYtg8nFSB8JH8
JyzHDy8KjbomBemuXnIEcbQS+vyU7OQ8wHfV7W5V09GmbB49UTXydL6mHROmCzX4
jWqQB5gA2WB7KqnrMCIwN3GCxh8Hv28m9rmlhCMrqiyiefAjTbwmvaE1lxn9ulsS
yjwongoBOl0XadShfX/WIJ+U2JTAWu95tGwu/HAfVBpaxuNe2mNPsj6aEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgIDHEO+8JbAR75pCtSecHZlLFlMB8GA1UdIwQY
MBaAFP++JWVl4cJ8SyZWAZDpl4KGqCtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUt
YjFmYzIwODNjOTA2LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUtYjFmYzIwODNjOTA2
LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEf4HOdUg
sBsAqUOapYyXjFwStXKeTbH/YJu0f1hCU2j9f07uLT2UdrlrrP1zG7PdX3mInn9v
ZJwFcb3VYmdO74485AWTfZgwA+w3GGawVAwjXnn9WH625qWQ2OFHFCC2pIpEXBm2
81mNeGOQGykeE8fb5unaxV95SXPZgsnq+w4Dwtitd8a5ImbNNLGShfEWpoEihzSK
+s5C7SAGAlCvpadKKInFPtKJm8n/0raeH9t/Y+ejpZVWnw86uRMNgr3+5gVN0fSA
j7PvXNHtJ+LCymr7BQ6W6Sz49OZ4tPUOpVjzCXJ4SaNrZQoso03jS8jeY2K8wyIq
AETkQeVdXHIQHg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:42:57 2026 by rpki-client