Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: 3UKMCoLeW16sm3jAXwt6sNffzKr3Q+APB8yq0TbJqHg=
Subject key identifier: 89:23:07:10:C1:CB:78:1B:CD:95:4C:EC:99:61:5E:39:28:2F:B2:6B
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 01A13748913DB8FAF644F3CED96A0107A3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1AA6
Signing time: Tue 13 Oct 2026 22:01:04 +0000
Manifest this update: Tue 13 Oct 2026 22:01:04 +0000
Manifest next update: Wed 14 Oct 2026 22:01:04 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: lf3vNtVAoG37Uo/S95CpuFiisqWm/+NZ7QBzReMVAIM=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:48:91:3d:b8:fa:f6:44:f3:ce:d9:6a:01:07:a3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Oct 13 22:01:04 2026 GMT
Not After : Oct 14 22:01:04 2026 GMT
Subject: CN=89230710c1cb781bcd954cec99615e39282fb26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:ea:68:01:5c:fd:97:37:04:39:07:00:a4:
5f:4f:82:b2:4a:31:a1:4f:2a:cb:16:b4:17:6a:21:
ee:a8:8d:57:45:d8:ef:95:8a:18:bc:00:b9:00:f3:
a6:6e:1e:80:3d:90:f0:dc:4d:81:05:51:14:8d:8b:
66:e5:c3:a9:12:e4:a3:dc:9e:61:4d:b4:a8:e9:79:
fa:11:11:12:2e:c3:5a:3d:30:7a:43:63:41:51:ae:
e9:94:d5:bf:76:78:af:08:f6:77:ee:fd:00:bc:52:
e9:3f:21:63:34:ef:c4:97:12:85:14:02:0a:92:eb:
8c:ab:bb:9c:db:4e:71:b4:f1:19:76:2c:37:c5:49:
7c:2c:7a:00:bd:63:c7:88:23:fd:d6:16:8c:e6:c1:
25:b6:80:22:a3:7f:e2:fa:ea:41:c2:18:fb:7f:6d:
0c:a5:75:f3:17:fb:e7:d9:25:b8:87:71:ca:63:e8:
04:fb:0a:09:f4:e5:f4:66:4e:a6:27:a6:ea:bb:fe:
2a:36:dc:26:a7:66:75:22:10:fb:74:69:55:82:9c:
bb:67:52:7a:7a:eb:ae:4f:91:e8:2f:a6:94:e5:54:
54:f2:93:8d:f3:62:1d:16:c7:66:53:6d:77:e9:88:
c9:fa:86:e1:c2:ae:4d:c3:0b:99:a8:4e:fb:57:82:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:23:07:10:C1:CB:78:1B:CD:95:4C:EC:99:61:5E:39:28:2F:B2:6B
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:da:6b:9f:3b:c0:ee:56:00:6b:96:5c:bc:ed:67:2e:45:29:
84:e7:cf:b3:93:c2:e7:e5:52:2b:bc:da:db:b9:95:3d:d9:4d:
f3:75:0b:f7:bb:9b:50:28:c0:e9:1c:83:8a:7a:6c:44:cf:56:
42:b2:4c:d5:19:d5:6c:61:ad:d4:3a:a3:c2:cd:5d:2f:31:27:
25:20:d1:54:0d:e4:5a:e3:27:a9:72:01:d5:4b:aa:c7:56:d5:
83:a8:31:7c:5b:61:62:24:bd:23:ed:06:e4:0a:0c:ea:1e:04:
6b:39:80:c0:31:65:17:85:a8:7d:65:40:06:84:be:1a:ed:f8:
f4:95:4f:80:00:a8:7e:af:d8:85:fd:96:80:e4:82:98:4f:16:
2a:98:ea:e4:b7:16:19:21:8e:2f:c2:c0:f2:d4:01:61:19:d3:
09:a4:3c:65:12:82:4a:07:5d:49:fe:a8:9f:bc:3e:7d:8c:e4:
99:e7:8d:d9:15:e7:ad:cb:d6:8b:b0:33:cd:e2:1c:a5:c2:3b:
4e:56:2b:45:be:50:23:48:32:a5:fb:b3:73:a3:ff:ea:18:1f:
7d:ce:0c:a3:03:e6:59:82:08:b0:1b:06:35:c0:58:9a:8e:8b:
1e:0a:ae:92:fd:e2:2d:36:f9:66:30:21:de:94:9b:d1:86:89:
16:c0:00:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE3SJE9uPr2RPPO2WoBB6PJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjYxMDEzMjIwMTA0WhcNMjYxMDE0MjIwMTA0WjAzMTEwLwYDVQQD
Eyg4OTIzMDcxMGMxY2I3ODFiY2Q5NTRjZWM5OTYxNWUzOTI4MmZiMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNTqaAFc/Zc3BDkHAKRfT4KySjGh
TyrLFrQXaiHuqI1XRdjvlYoYvAC5APOmbh6APZDw3E2BBVEUjYtm5cOpEuSj3J5h
TbSo6Xn6ERESLsNaPTB6Q2NBUa7plNW/dnivCPZ37v0AvFLpPyFjNO/ElxKFFAIK
kuuMq7uc205xtPEZdiw3xUl8LHoAvWPHiCP91haM5sEltoAio3/i+upBwhj7f20M
pXXzF/vn2SW4h3HKY+gE+woJ9OX0Zk6mJ6bqu/4qNtwmp2Z1IhD7dGlVgpy7Z1J6
euuuT5HoL6aU5VRU8pON82IdFsdmU2136YjJ+obhwq5NwwuZqE77V4LKRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkjBxDBy3gbzZVM7JlhXjkoL7JrMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNprnzvA
7lYAa5ZcvO1nLkUphOfPs5PC5+VSK7za27mVPdlN83UL97ubUCjA6RyDinpsRM9W
QrJM1RnVbGGt1Dqjws1dLzEnJSDRVA3kWuMnqXIB1Uuqx1bVg6gxfFthYiS9I+0G
5AoM6h4EazmAwDFlF4WofWVABoS+Gu349JVPgACofq/Yhf2WgOSCmE8WKpjq5LcW
GSGOL8LA8tQBYRnTCaQ8ZRKCSgddSf6on7w+fYzkmeeN2RXnrcvWi7AzzeIcpcI7
TlYrRb5QI0gypfuzc6P/6hgffc4MowPmWYIIsBsGNcBYmo6LHgqukv3iLTb5ZjAh
3pSb0YaJFsAAXg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:36:49 2026 by rpki-client