Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File: r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier: mwmLtY+4JUvHffF7yHWC9V1rgyE5cDm04XZRktMTMqk=
Subject key identifier: 70:C8:E1:A6:DA:D6:F4:7D:E1:4D:1C:DF:F0:90:D3:6B:FA:EF:32:18
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial: 01A1DD947D5C5AD5C329FA85F818C0667686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number: 0B21
Signing time: Sun 15 Nov 2026 05:00:58 +0000
Manifest this update: Sun 15 Nov 2026 05:00:58 +0000
Manifest next update: Mon 16 Nov 2026 05:00:58 +0000
Files and hashes: 1: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (hash: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ=)
2: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (hash: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c=)
3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: gAqA/GCb2opfM/TPtv+6Bu8xN7icCT49xcznaHXjaQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:7d:5c:5a:d5:c3:29:fa:85:f8:18:c0:66:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
Validity
Not Before: Nov 15 05:00:58 2026 GMT
Not After : Nov 16 05:00:58 2026 GMT
Subject: CN=70c8e1a6dad6f47de14d1cdff090d36bfaef3218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f6:77:53:81:e8:5c:66:87:dd:8a:db:e0:d1:
cf:c0:33:ad:13:af:54:40:1d:d2:99:40:84:03:34:
cb:d3:19:bc:8c:ec:ad:09:8f:f6:dc:fb:01:e0:c9:
67:6a:b4:53:6d:32:5f:ef:5b:d4:76:72:7d:ab:2e:
61:7d:53:5a:f3:99:bb:1a:99:d9:1e:ef:95:b2:f1:
a5:b0:f3:0c:05:a5:f4:fe:25:d4:0b:cd:3c:0c:f4:
75:f0:5f:d5:75:8f:d2:20:57:9e:b5:84:b2:dd:1f:
6c:7e:c7:73:49:1c:5d:1f:5c:b3:a5:eb:29:bd:20:
1f:0d:9d:eb:e7:b6:bf:99:e1:17:43:4f:d4:65:ff:
73:b6:29:95:1d:49:5c:a3:59:18:76:b2:cb:14:38:
46:8d:aa:b5:06:a2:2e:ad:41:f6:2d:43:c6:3a:f3:
83:e1:27:62:88:14:08:f5:63:c0:43:41:a5:6c:7f:
6b:88:43:2b:a0:36:02:81:50:0e:8f:13:be:c3:bd:
31:3d:a3:26:c3:9d:37:d4:6a:c4:ff:aa:09:05:74:
3c:45:7d:27:37:03:ea:f4:0b:9f:98:36:a6:51:cf:
c9:95:25:b7:15:3c:dd:1b:30:57:7c:30:97:c6:13:
fa:87:3b:45:dd:24:fb:fe:74:f5:9c:29:cc:66:23:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C8:E1:A6:DA:D6:F4:7D:E1:4D:1C:DF:F0:90:D3:6B:FA:EF:32:18
X509v3 Authority Key Identifier:
keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dd:69:61:13:aa:73:e4:69:02:04:cb:fb:ce:42:18:d9:3f:
3a:00:17:42:40:0a:1b:dd:0a:07:67:12:54:23:15:0d:a9:97:
b7:59:f7:d4:de:2a:e2:4c:ba:80:9f:76:a3:2b:87:ac:b6:77:
f7:70:aa:4e:92:02:f1:ab:08:d1:e0:86:02:96:7b:b0:ee:73:
16:fb:93:70:de:0f:df:2e:c1:68:ad:45:3f:3a:67:8c:d1:bb:
f7:e0:e4:90:c3:b4:11:47:d5:14:18:0c:3b:35:63:cf:ea:2b:
c4:51:5e:3f:73:1c:d3:40:51:06:aa:69:32:ac:53:df:f4:69:
46:79:67:7c:4d:a9:c7:2b:92:b4:df:64:86:c8:e4:95:36:ed:
54:72:40:28:b6:b4:17:b2:8a:61:36:5a:82:93:c1:48:81:b1:
6e:0d:6a:ae:61:5e:da:d3:c0:7e:c9:bb:c1:4f:f7:88:96:45:
33:f5:fc:d9:88:c8:d7:79:b5:14:21:df:ba:0d:a5:e3:95:df:
ab:82:72:d2:42:69:15:60:52:1c:c6:b5:d7:d3:19:2c:84:91:
ed:e7:a7:09:a2:3f:22:32:c3:ac:c2:93:86:99:80:ce:ab:a7:
10:d4:f2:1b:f0:9a:30:6d:0c:8c:32:35:72:57:a2:04:af:92:
3e:08:06:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdlH1cWtXDKfqF+BjAZnaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmVhZWZmMTIzY2E2NzQ0NmQwZTQ5NDAxZTQ5NTA1NzA3
OGUxNzQwHhcNMjYxMTE1MDUwMDU4WhcNMjYxMTE2MDUwMDU4WjAzMTEwLwYDVQQD
Eyg3MGM4ZTFhNmRhZDZmNDdkZTE0ZDFjZGZmMDkwZDM2YmZhZWYzMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/Z3U4HoXGaH3Yrb4NHPwDOtE69U
QB3SmUCEAzTL0xm8jOytCY/23PsB4MlnarRTbTJf71vUdnJ9qy5hfVNa85m7GpnZ
Hu+VsvGlsPMMBaX0/iXUC808DPR18F/VdY/SIFeetYSy3R9sfsdzSRxdH1yzpesp
vSAfDZ3r57a/meEXQ0/UZf9ztimVHUlco1kYdrLLFDhGjaq1BqIurUH2LUPGOvOD
4SdiiBQI9WPAQ0GlbH9riEMroDYCgVAOjxO+w70xPaMmw5031GrE/6oJBXQ8RX0n
NwPq9AufmDamUc/JlSW3FTzdGzBXfDCXxhP6hztF3ST7/nT1nCnMZiP0kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDI4aba1vR94U0c3/CQ02v67zIYMB8GA1UdIwQY
MBaAFK9urv8SPKZ0RtDklAHklQVweOF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUt
NGVmNDdmYzRiZDdmLzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUtNGVmNDdmYzRiZDdm
LzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI91pYROq
c+RpAgTL+85CGNk/OgAXQkAKG90KB2cSVCMVDamXt1n31N4q4ky6gJ92oyuHrLZ3
93CqTpIC8asI0eCGApZ7sO5zFvuTcN4P3y7BaK1FPzpnjNG79+DkkMO0EUfVFBgM
OzVjz+orxFFeP3Mc00BRBqppMqxT3/RpRnlnfE2pxyuStN9khsjklTbtVHJAKLa0
F7KKYTZagpPBSIGxbg1qrmFe2tPAfsm7wU/3iJZFM/X82YjI13m1FCHfug2l45Xf
q4Jy0kJpFWBSHMa119MZLISR7eenCaI/IjLDrMKThpmAzqunENTyG/CaMG0MjDI1
cleiBK+SPggG+A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:07:15 2026 by rpki-client