Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
File: b7u17BJ6BjLSJq8H-snE0oS9G6w.mft (raw, json)
Hash identifier: UVaexN9a2XegfvuRUIwgvcO+u4F37F3OyYkR3RHNsGw=
Subject key identifier: D2:9E:61:F0:43:59:3C:31:32:DF:C1:E1:B0:78:D4:8B:57:93:9A:0F
Authority key identifier: 6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
Certificate issuer: /CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Certificate serial: 01A1280C49D15D9CF2CCF86EAD3399543B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 23:00:56 +0000
Manifest this update: Sat 10 Oct 2026 23:00:56 +0000
Manifest next update: Sun 11 Oct 2026 23:00:56 +0000
Files and hashes: 1: QowN0LD_MpyH9XeoraRCQC23xeg.roa (hash: hLxc7NbhUpaHA5kGsA3jfQYRDHphB6U/6NiFfrvj7Nw=)
2: b7u17BJ6BjLSJq8H-snE0oS9G6w.crl (hash: DsFBaQEz6sudOPifR1K2/tCSbChH1plTkv8zM1Xsk2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:49:d1:5d:9c:f2:cc:f8:6e:ad:33:99:54:3b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbbb5ec127a0632d226af07fac9c4d284bd1bac
Validity
Not Before: Oct 10 23:00:56 2026 GMT
Not After : Oct 11 23:00:56 2026 GMT
Subject: CN=d29e61f043593c3132dfc1e1b078d48b57939a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:53:5f:81:fb:1e:64:99:9a:94:25:42:99:
dc:22:fa:59:23:c4:1c:8b:3d:21:28:0c:ea:9c:08:
6f:34:c9:c0:e2:fa:61:3f:71:ff:52:8e:be:a7:ae:
78:04:4d:4b:ea:fd:5a:f3:39:81:08:c4:8c:44:be:
2c:37:d0:4d:77:24:5c:e2:b6:59:42:ee:a3:1a:e5:
e3:91:c1:bf:b8:84:3b:b0:1d:5c:cd:e7:55:c0:59:
ad:65:e1:4f:59:de:ab:9f:ba:7e:3e:60:37:4a:98:
2c:4a:5a:5c:1e:19:1f:cf:b5:4a:28:ae:54:4d:da:
b9:29:0c:3f:ab:c4:a9:9b:9b:df:2a:c5:f7:c7:33:
e4:b2:47:b1:a3:a4:1d:07:cf:5b:a8:97:dc:43:f9:
7f:44:71:f7:fb:ed:2d:9c:a4:72:b6:3d:38:fa:98:
74:76:5d:a4:c1:a5:b0:a4:45:0a:60:ef:c9:3a:99:
6e:53:14:dc:4d:67:3d:f7:9f:56:ec:a1:fd:65:7b:
51:b0:e4:9f:35:17:87:22:2f:63:7d:e2:be:ed:10:
13:5e:01:a1:5c:1c:78:b7:40:0f:63:d5:cc:25:ab:
b7:37:3d:e4:e1:46:06:60:31:fe:03:60:ab:0c:08:
cd:5e:2d:1c:81:38:a1:e6:0b:13:f7:1d:6f:9d:38:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:61:F0:43:59:3C:31:32:DF:C1:E1:B0:78:D4:8B:57:93:9A:0F
X509v3 Authority Key Identifier:
keyid:6F:BB:B5:EC:12:7A:06:32:D2:26:AF:07:FA:C9:C4:D2:84:BD:1B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7u17BJ6BjLSJq8H-snE0oS9G6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/364e27-57f0-46a7-939a-654908384dd8/1/b7u17BJ6BjLSJq8H-snE0oS9G6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:40:ac:4e:a1:98:fa:ec:91:60:3d:73:7c:51:c0:8b:83:77:
19:6e:0a:20:8e:6e:54:75:ed:07:42:83:9f:54:52:29:77:64:
27:cf:c8:d1:25:96:e7:f6:83:d8:e7:c9:84:e5:97:0f:51:b4:
b6:7b:be:df:89:cb:59:9c:b4:e7:65:d0:5c:78:ce:a4:10:96:
26:22:f6:23:fb:7c:fe:4f:02:c9:d8:c1:4b:ce:90:b4:0b:ab:
9f:59:02:45:24:92:ea:b3:76:ed:f2:10:a4:8f:68:bf:82:1a:
5a:1c:ea:5d:dd:dc:f3:ff:b6:d4:4e:a7:00:d8:f4:0d:26:fb:
6f:1a:05:cb:ae:cc:d0:c6:85:a6:15:8c:74:a0:89:44:a8:df:
f1:94:a4:b0:2a:1e:b2:5a:6f:65:97:46:19:6f:80:35:51:3d:
ec:88:cf:49:ab:6d:3a:b8:00:7e:64:70:07:97:b4:d8:b5:7f:
64:c7:a0:fc:3d:d2:c5:e8:49:b9:63:38:d8:e9:96:54:fa:5c:
d6:0e:86:a5:ac:fa:70:73:dd:78:4b:d5:fd:71:cd:82:3f:dc:
2e:6b:e5:6f:2a:ca:8e:8b:1b:26:06:bd:77:42:44:99:f0:de:
91:78:96:45:d0:ac:73:7b:13:da:5d:31:c1:ce:b3:6d:1d:86:
7d:f6:71:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoDEnRXZzyzPhurTOZVDsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYmJiNWVjMTI3YTA2MzJkMjI2YWYwN2ZhYzljNGQyODRi
ZDFiYWMwHhcNMjYxMDEwMjMwMDU2WhcNMjYxMDExMjMwMDU2WjAzMTEwLwYDVQQD
EyhkMjllNjFmMDQzNTkzYzMxMzJkZmMxZTFiMDc4ZDQ4YjU3OTM5YTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx11TX4H7HmSZmpQlQpncIvpZI8Qc
iz0hKAzqnAhvNMnA4vphP3H/Uo6+p654BE1L6v1a8zmBCMSMRL4sN9BNdyRc4rZZ
Qu6jGuXjkcG/uIQ7sB1czedVwFmtZeFPWd6rn7p+PmA3SpgsSlpcHhkfz7VKKK5U
Tdq5KQw/q8Spm5vfKsX3xzPkskexo6QdB89bqJfcQ/l/RHH3++0tnKRytj04+ph0
dl2kwaWwpEUKYO/JOpluUxTcTWc9959W7KH9ZXtRsOSfNReHIi9jfeK+7RATXgGh
XBx4t0APY9XMJau3Nz3k4UYGYDH+A2CrDAjNXi0cgTih5gsT9x1vnTgEOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKeYfBDWTwxMt/B4bB41ItXk5oPMB8GA1UdIwQY
MBaAFG+7tewSegYy0iavB/rJxNKEvRusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEt
NjU0OTA4Mzg0ZGQ4LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8zNjRlMjctNTdmMC00NmE3LTkzOWEtNjU0OTA4Mzg0ZGQ4
LzEvYjd1MTdCSjZCakxTSnE4SC1zbkUwb1M5RzZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUCsTqGY
+uyRYD1zfFHAi4N3GW4KII5uVHXtB0KDn1RSKXdkJ8/I0SWW5/aD2OfJhOWXD1G0
tnu+34nLWZy052XQXHjOpBCWJiL2I/t8/k8CydjBS86QtAurn1kCRSSS6rN27fIQ
pI9ov4IaWhzqXd3c8/+21E6nANj0DSb7bxoFy67M0MaFphWMdKCJRKjf8ZSksCoe
slpvZZdGGW+ANVE97IjPSattOrgAfmRwB5e02LV/ZMeg/D3SxehJuWM42OmWVPpc
1g6Gpaz6cHPdeEvV/XHNgj/cLmvlbyrKjosbJga9d0JEmfDekXiWRdCsc3sT2l0x
wc6zbR2GffZx9A==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:34:31 2026 by rpki-client