Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: 5cpYQv0OSFCxrH3TjylOmdUjXQ36QM97DWs2nxpaYns=
Subject key identifier: B1:65:85:AD:E2:E6:9F:B9:D2:1F:88:65:1B:14:DD:2F:C9:BD:AC:54
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 01A1027FA99FCF898E308C6A21D35419B2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 06DF
Signing time: Sat 03 Oct 2026 16:01:23 +0000
Manifest this update: Sat 03 Oct 2026 16:01:23 +0000
Manifest next update: Sun 04 Oct 2026 16:01:23 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: 56P8LZMYI1xZgrvueHnVg09X/ritj1HJDhnvzeKDVCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:a9:9f:cf:89:8e:30:8c:6a:21:d3:54:19:b2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Oct 3 16:01:23 2026 GMT
Not After : Oct 4 16:01:23 2026 GMT
Subject: CN=b16585ade2e69fb9d21f88651b14dd2fc9bdac54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d1:5f:e4:82:ca:64:3a:71:a5:d1:d1:be:db:
15:df:6f:58:1c:2a:ee:fe:60:2b:31:5d:d1:a7:96:
42:68:13:04:48:97:d8:2b:42:96:ea:8c:7e:3a:73:
8b:55:3f:cc:ad:31:a5:ce:06:ee:70:8c:64:44:37:
98:c3:b2:f9:3d:a6:80:89:72:19:fc:f8:3b:e2:e6:
a2:6d:60:b2:84:b8:d9:85:52:0b:0f:16:a9:f1:9e:
16:72:a7:fa:b5:ef:4f:8e:1b:0f:32:8c:5e:28:13:
d0:43:f0:f7:ec:60:8c:4a:f9:43:ac:6a:1b:af:e3:
4a:e6:cd:58:75:c8:cf:57:cd:34:0b:38:ac:b6:6c:
be:16:a4:1c:53:5d:6f:d7:49:c0:04:7e:9d:19:97:
1f:41:d8:6f:f2:d1:1c:7e:95:40:d0:26:5a:59:be:
c2:e4:6a:cc:7a:6b:4e:18:e0:96:1c:b4:8a:96:f0:
e7:4e:66:42:57:30:7a:e1:f9:97:b4:5b:b3:5a:83:
83:05:7b:c9:18:d0:45:b1:7f:4d:29:c3:67:e9:25:
56:68:cb:9d:0d:d9:67:64:09:74:77:5c:95:5f:1d:
42:26:92:f7:73:e2:7b:4d:97:48:08:4e:45:85:d0:
ab:a5:e1:45:77:0c:16:7e:d3:15:f3:d3:9e:ce:00:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:65:85:AD:E2:E6:9F:B9:D2:1F:88:65:1B:14:DD:2F:C9:BD:AC:54
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:7e:65:74:d7:44:ab:7b:54:e9:42:4e:39:cc:e6:d3:b1:
aa:1a:8d:10:f0:b0:29:73:15:ad:44:e5:30:e0:0d:f4:90:04:
04:0e:49:4d:72:dd:5e:67:04:65:f9:1d:56:d6:72:07:f4:3c:
f0:62:6b:cf:2b:5a:2a:95:75:cf:14:ad:a2:3d:94:a1:a6:4b:
bd:09:63:98:5c:fa:a4:47:a5:7b:ad:2b:2d:cb:65:10:c2:40:
11:84:b3:d1:f9:71:ad:1e:58:5e:31:70:77:f9:96:87:3d:26:
57:c8:c5:ab:2d:93:24:db:d1:e2:57:92:61:01:2e:ef:1a:c6:
59:92:e1:8e:d8:5b:a8:ff:5d:e2:ef:b6:57:aa:37:67:e3:42:
eb:b5:82:5e:4a:f1:4d:13:2f:9e:8f:78:93:2f:1c:1d:a6:e7:
e1:d3:ba:33:9f:b0:4b:fc:af:99:bd:bc:53:4e:42:6a:c7:22:
2f:c5:5e:dc:b8:7c:e4:64:7e:e3:b8:20:95:04:23:a8:61:6a:
79:c0:49:68:d2:ca:44:b5:fb:a5:e9:c4:67:da:d7:78:46:0b:
76:1a:a5:49:3a:7a:8c:75:b2:3b:2b:74:3d:d5:1d:53:44:ed:
66:8d:63:70:9c:9d:7b:6c:4b:40:13:94:ae:20:47:fd:fa:53:
47:11:aa:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaECf6mfz4mOMIxqIdNUGbL/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZGRjNzNiNTlhMWZjZGVlMjJlMjU4MjRkNDBhY2MyNzI4
NmFhNTIwHhcNMjYxMDAzMTYwMTIzWhcNMjYxMDA0MTYwMTIzWjAzMTEwLwYDVQQD
EyhiMTY1ODVhZGUyZTY5ZmI5ZDIxZjg4NjUxYjE0ZGQyZmM5YmRhYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/NFf5ILKZDpxpdHRvtsV329YHCru
/mArMV3Rp5ZCaBMESJfYK0KW6ox+OnOLVT/MrTGlzgbucIxkRDeYw7L5PaaAiXIZ
/Pg74uaibWCyhLjZhVILDxap8Z4Wcqf6te9PjhsPMoxeKBPQQ/D37GCMSvlDrGob
r+NK5s1YdcjPV800Czistmy+FqQcU11v10nABH6dGZcfQdhv8tEcfpVA0CZaWb7C
5GrMemtOGOCWHLSKlvDnTmZCVzB64fmXtFuzWoODBXvJGNBFsX9NKcNn6SVWaMud
DdlnZAl0d1yVXx1CJpL3c+J7TZdICE5FhdCrpeFFdwwWftMV89OezgCi1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFlha3i5p+50h+IZRsU3S/JvaxUMB8GA1UdIwQY
MBaAFKzdxztZofze4i4lgk1ArMJyhqpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWIt
YTBlYzg0YTMxMzkzLzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWItYTBlYzg0YTMxMzkz
LzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrZ+ZXTX
RKt7VOlCTjnM5tOxqhqNEPCwKXMVrUTlMOAN9JAEBA5JTXLdXmcEZfkdVtZyB/Q8
8GJrzytaKpV1zxStoj2UoaZLvQljmFz6pEele60rLctlEMJAEYSz0flxrR5YXjFw
d/mWhz0mV8jFqy2TJNvR4leSYQEu7xrGWZLhjthbqP9d4u+2V6o3Z+NC67WCXkrx
TRMvno94ky8cHabn4dO6M5+wS/yvmb28U05CasciL8Ve3Lh85GR+47gglQQjqGFq
ecBJaNLKRLX7penEZ9rXeEYLdhqlSTp6jHWyOyt0PdUdU0TtZo1jcJyde2xLQBOU
riBH/fpTRxGqpg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 19:46:51 2026 by rpki-client