Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
File: rKbwaDzHS63SOoFAw4XxyBziTfc.mft (raw, json)
Hash identifier: nO3+sZ2tSfk28EtEBKlq7JaBdAHYNPl33MoWaO/bHjk=
Subject key identifier: 07:1E:15:3F:3D:D7:D3:BB:C6:AD:19:A4:76:B9:96:0C:27:BA:0D:84
Authority key identifier: AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
Certificate issuer: /CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Certificate serial: 01A15E8CD697E02C9E0D7CB25B52C006A320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
Manifest number: 115E
Signing time: Wed 21 Oct 2026 13:00:50 +0000
Manifest this update: Wed 21 Oct 2026 13:00:50 +0000
Manifest next update: Thu 22 Oct 2026 13:00:50 +0000
Files and hashes: 1: Hl-oGjMEXSHh22tv7GvQWauR6Ls.roa (hash: k0kjDMHyxNG6XHvsH8YWl0QTbYb+WeHWx5ruPE+qWhs=)
2: rKbwaDzHS63SOoFAw4XxyBziTfc.crl (hash: 95ZsFfIIruq3UIN3NjEAR2Lv4yh+mkJjf4I+8ebJhk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:8c:d6:97:e0:2c:9e:0d:7c:b2:5b:52:c0:06:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6f0683cc74badd23a8140c385f1c81ce24df7
Validity
Not Before: Oct 21 13:00:50 2026 GMT
Not After : Oct 22 13:00:50 2026 GMT
Subject: CN=071e153f3dd7d3bbc6ad19a476b9960c27ba0d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2a:2d:cb:c6:85:fa:a5:af:27:a7:cb:c3:63:
04:e8:03:27:41:d2:e7:04:eb:77:e9:80:ed:0c:14:
b8:e0:84:fc:67:18:2b:ef:bb:1d:c0:36:cb:93:8a:
5c:2f:80:cd:ae:61:1b:cc:3b:89:85:a2:eb:15:73:
87:50:e3:d5:2a:26:2b:67:a7:57:7d:76:cf:77:51:
2c:83:64:66:3a:b9:2d:37:b8:89:b1:c4:a3:a3:3e:
06:47:b2:45:56:69:96:69:62:5c:be:01:4f:aa:46:
af:9c:b8:7b:6d:03:73:05:f2:60:77:57:88:23:f7:
eb:13:24:10:5e:25:6e:e4:b5:6b:64:cd:60:cd:80:
01:07:32:4f:3b:5e:aa:28:36:d6:1f:ac:69:7c:0e:
2a:88:2d:69:aa:35:c0:04:c0:0d:a0:56:30:cc:8b:
55:c9:14:83:b0:43:3c:5e:b6:8d:d3:3b:26:84:2f:
80:ad:c7:65:7b:66:de:1c:e7:c2:97:e0:9a:7c:84:
f1:ef:a7:ef:dc:4c:b2:ff:26:8a:41:e2:dc:6d:25:
b7:35:3b:0f:e5:14:32:ae:80:ad:d3:4a:9d:9e:ad:
3a:a5:4d:22:76:c2:db:44:8d:40:7a:f0:09:1b:94:
d2:e8:bd:31:db:d0:11:5f:3f:d3:da:68:f5:0e:f1:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1E:15:3F:3D:D7:D3:BB:C6:AD:19:A4:76:B9:96:0C:27:BA:0D:84
X509v3 Authority Key Identifier:
keyid:AC:A6:F0:68:3C:C7:4B:AD:D2:3A:81:40:C3:85:F1:C8:1C:E2:4D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbwaDzHS63SOoFAw4XxyBziTfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d4818-f182-4b46-9e8c-0827961c05e0/1/rKbwaDzHS63SOoFAw4XxyBziTfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:b4:56:da:c2:8a:80:d1:d7:a8:7e:e1:dc:7c:ef:2f:12:61:
33:13:91:9b:89:cc:de:c1:11:54:38:45:b0:a6:8d:7e:3b:19:
71:7b:16:a5:29:0a:36:b4:53:b0:43:84:ac:9c:fa:6b:be:7a:
20:8a:58:19:77:18:e2:2d:1b:42:68:5c:e6:d5:f2:e7:27:8e:
75:6c:d9:01:11:45:ba:28:3c:ea:c4:2c:1b:0a:3c:37:7c:82:
68:29:f6:1e:ab:37:1b:d8:2d:5f:08:d1:c7:9c:78:b4:ea:d1:
69:d7:0f:a4:bd:9c:01:29:03:a5:6c:79:48:9f:15:d6:aa:6f:
ed:8b:40:fd:96:d4:9e:e8:25:47:b1:5b:ae:18:6b:59:f5:97:
8d:8e:20:65:40:89:6f:ca:f7:07:b2:bb:44:19:bd:d4:af:74:
3e:3a:2a:f4:7c:83:73:e5:fb:7b:df:42:76:8d:20:0e:96:1a:
f7:40:58:4f:4d:51:f5:5d:d6:55:89:63:f0:49:f0:71:6f:3d:
c0:9f:f7:a5:cd:ff:12:a3:60:49:39:13:fe:9a:1c:bc:1c:92:
2a:2d:bf:f9:f7:d0:df:af:bd:f7:60:98:87:18:9f:e8:ec:3b:
ba:c9:d1:b4:4a:96:ed:c3:a4:3f:e1:62:da:d9:a3:89:fb:a1:
b5:ea:fb:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFejNaX4CyeDXyyW1LABqMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTZmMDY4M2NjNzRiYWRkMjNhODE0MGMzODVmMWM4MWNl
MjRkZjcwHhcNMjYxMDIxMTMwMDUwWhcNMjYxMDIyMTMwMDUwWjAzMTEwLwYDVQQD
EygwNzFlMTUzZjNkZDdkM2JiYzZhZDE5YTQ3NmI5OTYwYzI3YmEwZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCoty8aF+qWvJ6fLw2ME6AMnQdLn
BOt36YDtDBS44IT8Zxgr77sdwDbLk4pcL4DNrmEbzDuJhaLrFXOHUOPVKiYrZ6dX
fXbPd1Esg2RmOrktN7iJscSjoz4GR7JFVmmWaWJcvgFPqkavnLh7bQNzBfJgd1eI
I/frEyQQXiVu5LVrZM1gzYABBzJPO16qKDbWH6xpfA4qiC1pqjXABMANoFYwzItV
yRSDsEM8XraN0zsmhC+Arcdle2beHOfCl+CafITx76fv3Eyy/yaKQeLcbSW3NTsP
5RQyroCt00qdnq06pU0idsLbRI1AevAJG5TS6L0x29ARXz/T2mj1DvE4fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAceFT8919O7xq0ZpHa5lgwnug2EMB8GA1UdIwQY
MBaAFKym8Gg8x0ut0jqBQMOF8cgc4k33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMt
MDgyNzk2MWMwNWUwLzEvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8yZDQ4MTgtZjE4Mi00YjQ2LTllOGMtMDgyNzk2MWMwNWUw
LzEvcktid2FEekhTNjNTT29GQXc0WHh5QnppVGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7RW2sKK
gNHXqH7h3HzvLxJhMxORm4nM3sERVDhFsKaNfjsZcXsWpSkKNrRTsEOErJz6a756
IIpYGXcY4i0bQmhc5tXy5yeOdWzZARFFuig86sQsGwo8N3yCaCn2Hqs3G9gtXwjR
x5x4tOrRadcPpL2cASkDpWx5SJ8V1qpv7YtA/ZbUnuglR7FbrhhrWfWXjY4gZUCJ
b8r3B7K7RBm91K90Pjoq9HyDc+X7e99Cdo0gDpYa90BYT01R9V3WVYlj8EnwcW89
wJ/3pc3/EqNgSTkT/pocvBySKi2/+ffQ36+992CYhxif6Ow7usnRtEqW7cOkP+Fi
2tmjifuhter7wQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 23:42:35 2026 by rpki-client