Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: WB0mp1sxYSwCPrnivCQ9f9EoTDVrfusXmn1/MwnODWE=
Subject key identifier: 34:B0:91:C6:33:BD:A1:D9:6B:F5:FB:EE:5A:7C:A0:45:C1:66:83:C6
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 01A12FFCFB041115B450AAC1C3AAC54FF92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0B9B
Signing time: Mon 12 Oct 2026 12:01:10 +0000
Manifest this update: Mon 12 Oct 2026 12:01:10 +0000
Manifest next update: Tue 13 Oct 2026 12:01:10 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: r/hkP98UkW91iBrDC7RKdcxJLN78l9sRt3ghizNhndg=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:fc:fb:04:11:15:b4:50:aa:c1:c3:aa:c5:4f:f9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Oct 12 12:01:10 2026 GMT
Not After : Oct 13 12:01:10 2026 GMT
Subject: CN=34b091c633bda1d96bf5fbee5a7ca045c16683c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:fe:c5:89:47:96:08:78:05:b7:b2:b4:2f:
67:76:c6:ea:1e:88:88:b1:2b:4c:30:b6:1a:04:13:
49:67:92:c6:40:56:1e:41:58:3a:f8:b0:d0:da:7c:
b2:c6:2c:d0:45:ed:69:e8:50:f7:3b:2b:6b:5a:46:
89:7d:1d:47:0a:66:32:c0:62:b9:0c:06:9c:d8:62:
0c:29:e8:56:8f:bd:7f:1b:67:27:ad:da:12:15:65:
bf:03:4e:86:1e:62:c1:b9:38:25:67:89:0b:bf:f4:
ce:d9:a4:88:fc:0e:b5:21:04:bb:ac:b3:62:7d:4d:
4c:ad:b1:22:13:3e:b2:c2:5b:04:e3:25:a2:f7:46:
2e:66:f7:7c:77:c0:ab:d3:14:fa:59:39:a3:09:2a:
d5:79:0e:53:f9:1b:f6:61:25:6e:89:f0:5e:97:f8:
35:1d:c8:37:d4:51:fb:06:8b:a9:81:45:47:bc:fe:
8f:54:be:0b:50:42:db:d0:72:69:e3:36:40:c0:fb:
69:1e:4e:57:74:db:86:39:3e:ff:8c:8a:63:2c:15:
a4:8a:df:35:50:e3:69:93:d1:50:98:be:42:26:4d:
e8:38:8d:5b:7b:64:25:4c:5e:ed:5a:26:fb:5e:c9:
60:2b:78:57:f0:9e:3c:e9:55:b9:c4:b2:86:1e:46:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:91:C6:33:BD:A1:D9:6B:F5:FB:EE:5A:7C:A0:45:C1:66:83:C6
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:32:24:c3:b3:c8:20:1a:76:17:6d:20:62:16:3c:4f:7b:fd:
8f:ac:48:8e:38:72:53:b0:5a:0f:51:01:b2:5b:83:dc:f0:33:
8a:34:a7:63:c7:ad:44:1b:21:a9:ce:68:83:06:20:32:58:40:
b5:66:d2:f0:9a:c0:3d:da:a8:98:dd:c2:ef:ad:10:6a:8a:cd:
cc:0a:94:a4:f4:95:99:48:af:9f:b6:3e:5d:b2:83:e7:80:87:
1c:b4:ea:32:f1:0b:d8:e7:7b:3e:a6:5f:6c:6f:bc:e2:f1:15:
04:8d:81:23:e9:eb:51:3f:66:98:fd:58:22:32:42:3e:0d:83:
b2:51:81:e0:ef:f6:6c:2a:b2:f9:ad:6a:46:f0:44:ee:77:f0:
af:6a:b4:96:05:81:b8:6e:52:b9:31:19:f9:f1:ce:a5:8a:83:
e2:b9:47:09:be:a2:4e:aa:82:2a:e0:6c:4d:9c:5f:49:48:dd:
59:42:eb:d4:2f:ae:41:62:ae:c4:aa:6c:f9:6d:59:0b:ba:32:
e5:a7:1a:71:e2:43:0f:82:9f:28:7d:57:2c:1c:f8:cd:1a:ea:
05:3e:04:1e:7e:d4:0e:76:fc:8b:7e:ed:35:d7:de:21:2c:2a:
4d:b4:71:8e:3b:09:19:28:b5:36:a0:35:c8:0e:39:e3:19:ce:
e1:6b:7a:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEv/PsEERW0UKrBw6rFT/ksMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTUzOGFhYzMzNzc4NDYwZTE5NzAxYWFiNTk1MmM3YWEy
NWYwNWMwHhcNMjYxMDEyMTIwMTEwWhcNMjYxMDEzMTIwMTEwWjAzMTEwLwYDVQQD
EygzNGIwOTFjNjMzYmRhMWQ5NmJmNWZiZWU1YTdjYTA0NWMxNjY4M2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysf+xYlHlgh4BbeytC9ndsbqHoiI
sStMMLYaBBNJZ5LGQFYeQVg6+LDQ2nyyxizQRe1p6FD3OytrWkaJfR1HCmYywGK5
DAac2GIMKehWj71/G2cnrdoSFWW/A06GHmLBuTglZ4kLv/TO2aSI/A61IQS7rLNi
fU1MrbEiEz6ywlsE4yWi90YuZvd8d8Cr0xT6WTmjCSrVeQ5T+Rv2YSVuifBel/g1
Hcg31FH7BoupgUVHvP6PVL4LUELb0HJp4zZAwPtpHk5XdNuGOT7/jIpjLBWkit81
UONpk9FQmL5CJk3oOI1be2QlTF7tWib7XslgK3hX8J486VW5xLKGHkYIUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSwkcYzvaHZa/X77lp8oEXBZoPGMB8GA1UdIwQY
MBaAFKelOKrDN3hGDhlwGqtZUseqJfBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEt
ODdiMDEwZWE2MjM1LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEtODdiMDEwZWE2MjM1
LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzIkw7PI
IBp2F20gYhY8T3v9j6xIjjhyU7BaD1EBsluD3PAzijSnY8etRBshqc5ogwYgMlhA
tWbS8JrAPdqomN3C760QaorNzAqUpPSVmUivn7Y+XbKD54CHHLTqMvEL2Od7PqZf
bG+84vEVBI2BI+nrUT9mmP1YIjJCPg2DslGB4O/2bCqy+a1qRvBE7nfwr2q0lgWB
uG5SuTEZ+fHOpYqD4rlHCb6iTqqCKuBsTZxfSUjdWULr1C+uQWKuxKps+W1ZC7oy
5acaceJDD4KfKH1XLBz4zRrqBT4EHn7UDnb8i37tNdfeISwqTbRxjjsJGSi1NqA1
yA454xnO4Wt6aw==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:50:35 2026 by rpki-client