Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier: KWmrV00+zkSmdbu6ZH4GjiKQB4ZTIxE0DIXSiEqc5ks=
Subject key identifier: 43:8D:98:68:B3:A4:20:BD:BB:EB:63:09:B4:C2:B7:2B:33:28:6E:9D
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial: 01A0CEC80C3D64DA54345C51974320F6DBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 15:00:11 +0000
Manifest this update: Wed 23 Sep 2026 15:00:11 +0000
Manifest next update: Thu 24 Sep 2026 15:00:11 +0000
Files and hashes: 1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: 1CPblNsKgMQZdvVG5q3AawxiIBe2f0BVt7mAJaRlMdU=)
3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:0c:3d:64:da:54:34:5c:51:97:43:20:f6:db:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
Validity
Not Before: Sep 23 15:00:11 2026 GMT
Not After : Sep 24 15:00:11 2026 GMT
Subject: CN=438d9868b3a420bdbbeb6309b4c2b72b33286e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:1a:13:2c:d3:e2:04:fa:0a:7d:66:f6:c0:
69:6c:2b:d9:2c:a7:c1:11:c7:32:49:08:fb:80:ec:
9c:e1:27:58:b9:00:1f:ec:ff:63:ac:39:d7:1c:b5:
34:0a:90:c1:7d:9f:eb:8b:bb:1f:47:f6:be:50:1a:
08:cf:a3:25:62:b2:0c:f3:68:5f:4a:43:94:78:04:
b9:ca:3b:2f:c5:1f:85:5a:b7:ea:e1:1f:66:bf:88:
ca:85:97:31:b7:b3:16:49:53:91:8c:c6:09:d6:65:
57:7c:08:78:56:ea:22:3e:76:2f:74:7e:f2:0a:50:
42:ed:d3:d2:20:7c:4b:10:40:5b:1b:dd:4d:fb:a1:
33:32:05:58:c3:c0:a9:21:6d:cc:be:89:53:b3:ce:
93:6d:97:03:8b:c6:76:93:04:a8:14:74:09:f2:be:
42:71:11:55:2e:61:a8:1b:2f:d6:c9:6e:9c:f8:02:
9e:d5:b4:25:29:6c:6f:4b:44:9a:ff:b8:c2:8c:0d:
b2:fe:77:f5:c1:6b:b0:93:a3:17:d3:30:ee:88:f4:
10:3e:6e:76:56:5e:e2:5c:ea:7d:27:ce:8f:8f:b3:
c0:ad:73:5f:ea:0b:00:d8:91:d1:3c:cf:58:7d:f9:
73:10:4c:79:49:e8:e0:98:fa:d6:2c:d8:c9:4c:8f:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:98:68:B3:A4:20:BD:BB:EB:63:09:B4:C2:B7:2B:33:28:6E:9D
X509v3 Authority Key Identifier:
keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:40:18:ea:ce:48:3e:29:a4:81:f0:45:3c:71:2d:0d:d7:ea:
3e:4b:42:46:04:ff:be:f8:1a:a3:e3:12:f2:71:cc:77:83:19:
b2:cd:d3:54:f3:59:29:21:ce:a1:74:82:f5:18:5a:0c:06:f9:
4c:7b:9c:ff:c2:a6:33:4f:5b:63:81:f4:e9:d4:03:4d:c7:80:
fa:c2:01:8f:e1:ac:42:05:83:e4:d9:0f:64:cc:b2:37:16:d4:
27:a9:a7:ba:85:a5:01:f1:ec:91:a7:71:f6:c2:03:67:74:35:
5e:aa:c6:b8:60:30:d6:61:23:2c:c8:10:a1:99:21:6f:be:db:
a5:90:a1:c4:21:df:22:1d:85:84:f3:1f:47:77:fc:c3:fe:67:
c9:35:e3:b3:2b:0b:dc:81:c5:13:90:eb:f3:3c:00:33:77:5a:
66:fb:18:11:16:ed:00:72:93:23:ac:1c:fa:91:ea:21:5a:f8:
9e:ef:b8:59:bb:80:0b:79:8e:c4:79:0d:b8:05:b1:b2:ce:31:
70:33:96:dc:7b:dc:37:2b:ad:4f:86:93:f8:56:3b:de:dd:13:
a7:27:1d:6e:f5:e7:ea:42:58:21:57:73:b5:27:a1:2b:5f:7f:
a2:61:4f:40:56:4b:5a:62:9f:21:d2:d4:94:ca:34:16:b1:bc:
2d:39:fc:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOyAw9ZNpUNFxRl0Mg9tvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzlkMDZjNTFhZGQ2ODI5MDYzZjFiNjdiMTc1ZDBjMDAw
MWU3MzYwHhcNMjYwOTIzMTUwMDExWhcNMjYwOTI0MTUwMDExWjAzMTEwLwYDVQQD
Eyg0MzhkOTg2OGIzYTQyMGJkYmJlYjYzMDliNGMyYjcyYjMzMjg2ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzIaEyzT4gT6Cn1m9sBpbCvZLKfB
EccySQj7gOyc4SdYuQAf7P9jrDnXHLU0CpDBfZ/ri7sfR/a+UBoIz6MlYrIM82hf
SkOUeAS5yjsvxR+FWrfq4R9mv4jKhZcxt7MWSVORjMYJ1mVXfAh4VuoiPnYvdH7y
ClBC7dPSIHxLEEBbG91N+6EzMgVYw8CpIW3MvolTs86TbZcDi8Z2kwSoFHQJ8r5C
cRFVLmGoGy/WyW6c+AKe1bQlKWxvS0Sa/7jCjA2y/nf1wWuwk6MX0zDuiPQQPm52
Vl7iXOp9J86Pj7PArXNf6gsA2JHRPM9YfflzEEx5SejgmPrWLNjJTI978QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEONmGizpCC9u+tjCbTCtyszKG6dMB8GA1UdIwQY
MBaAFHDJ0GxRrdaCkGPxtnsXXQwAAec2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEt
NWQzYTg2NDk0Nzc1LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEtNWQzYTg2NDk0Nzc1
LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUAY6s5I
PimkgfBFPHEtDdfqPktCRgT/vvgao+MS8nHMd4MZss3TVPNZKSHOoXSC9RhaDAb5
THuc/8KmM09bY4H06dQDTceA+sIBj+GsQgWD5NkPZMyyNxbUJ6mnuoWlAfHskadx
9sIDZ3Q1XqrGuGAw1mEjLMgQoZkhb77bpZChxCHfIh2FhPMfR3f8w/5nyTXjsysL
3IHFE5Dr8zwAM3daZvsYERbtAHKTI6wc+pHqIVr4nu+4WbuAC3mOxHkNuAWxss4x
cDOW3HvcNyutT4aT+FY73t0TpycdbvXn6kJYIVdztSehK19/omFPQFZLWmKfIdLU
lMo0FrG8LTn8+A==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:29:17 2026 by rpki-client