Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: rdD4UMCDpnW9EL+AYWpvnEp0iZQXcYKVhUZqNqyi4/U=
Subject key identifier: 85:15:64:96:07:D9:66:DD:DE:D3:19:5E:96:42:06:56:3B:DD:C7:7C
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 01A0ED785D27B96D54930A2AF0DC584AF46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 14:01:23 +0000
Manifest this update: Tue 29 Sep 2026 14:01:23 +0000
Manifest next update: Wed 30 Sep 2026 14:01:23 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: XXga6+iSXbXuKMaUxyB1tE1T/hYibLHiiLTmIlI5pHI=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:5d:27:b9:6d:54:93:0a:2a:f0:dc:58:4a:f4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Sep 29 14:01:23 2026 GMT
Not After : Sep 30 14:01:23 2026 GMT
Subject: CN=8515649607d966ddded3195e964206563bddc77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:65:04:c1:34:fa:6a:d1:0e:22:7a:39:2b:
63:42:73:58:51:44:ae:f5:ad:8f:ec:3e:8f:78:e0:
91:a8:81:bf:3a:5f:44:ce:bf:6b:59:01:3a:bc:f8:
5c:ff:91:e7:e6:a7:90:93:dc:58:49:6a:54:80:36:
24:99:f4:57:89:9b:99:b0:c1:a6:cb:75:6f:7c:32:
b4:b4:aa:20:3c:de:f6:8e:93:e1:e2:53:b5:24:fa:
f4:07:32:05:49:47:ae:ce:33:0e:54:d1:65:8a:79:
9a:f0:4a:a9:6f:e6:06:89:98:36:c0:36:2c:aa:8f:
df:53:a4:a1:51:ba:02:49:1c:49:0d:0d:97:ce:1c:
5a:05:ca:ab:d9:74:d8:a5:21:d7:6f:73:82:14:af:
b2:6f:a8:6d:75:43:65:68:5e:49:db:e3:59:f9:dc:
41:6e:a3:13:c0:49:47:74:92:c4:73:f9:79:48:31:
09:ec:76:af:4d:cf:9a:98:0f:98:b8:95:b3:98:80:
bf:9c:2a:50:90:96:53:e9:86:96:56:02:b2:e3:4b:
b2:2b:99:e2:a8:c7:59:85:29:3a:df:58:e3:6a:91:
69:0e:b0:b9:2b:f2:fc:5a:8c:2c:dd:8e:c9:46:61:
5d:7c:6c:6f:9b:69:c1:19:1b:7d:89:5f:ca:61:35:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:64:96:07:D9:66:DD:DE:D3:19:5E:96:42:06:56:3B:DD:C7:7C
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:9c:9e:65:36:2c:6d:b6:12:10:32:7a:d8:ee:83:d0:59:ba:
73:09:8b:9e:fc:8b:15:cf:9b:37:07:29:5a:95:5f:8d:20:e3:
13:46:50:25:b8:9b:a7:92:d8:0c:fe:c2:43:c9:5e:60:e4:ad:
a4:bb:8f:29:a7:63:ab:f9:38:02:8b:b1:4d:e3:3a:26:0a:89:
09:ee:b6:bd:36:de:e7:8b:85:cb:d6:9c:67:e5:8e:dc:6b:0f:
d3:cb:38:a1:7e:4c:ef:20:07:a8:b0:b6:bd:d3:d2:7c:03:8e:
97:14:15:0b:b8:3a:bf:21:33:83:2b:35:cb:b0:66:e9:f8:5e:
0d:60:5e:5f:f9:00:99:5e:5a:09:ae:4f:b9:02:6e:55:2e:d8:
79:94:34:85:ae:80:d7:5b:e6:75:6b:73:1f:1c:38:80:f3:3a:
4a:11:70:14:df:71:d0:4a:38:3b:48:81:24:5d:b8:b6:56:98:
c9:68:24:2d:38:bc:87:cd:ee:70:37:0c:2e:d3:91:db:fc:ac:
2d:d9:38:c7:e1:e8:68:ad:5c:d0:35:8f:2e:40:b7:62:29:23:
40:22:28:4d:1e:6f:6e:dd:da:8b:38:53:f2:95:8e:89:b9:1b:
ae:de:9b:88:9e:85:49:06:01:a5:3b:dc:b3:96:50:41:53:13:
99:c0:f4:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDteF0nuW1Ukwoq8NxYSvRrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx
Njk4YjUwHhcNMjYwOTI5MTQwMTIzWhcNMjYwOTMwMTQwMTIzWjAzMTEwLwYDVQQD
Eyg4NTE1NjQ5NjA3ZDk2NmRkZGVkMzE5NWU5NjQyMDY1NjNiZGRjNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx9lBME0+mrRDiJ6OStjQnNYUUSu
9a2P7D6PeOCRqIG/Ol9Ezr9rWQE6vPhc/5Hn5qeQk9xYSWpUgDYkmfRXiZuZsMGm
y3VvfDK0tKogPN72jpPh4lO1JPr0BzIFSUeuzjMOVNFlinma8Eqpb+YGiZg2wDYs
qo/fU6ShUboCSRxJDQ2XzhxaBcqr2XTYpSHXb3OCFK+yb6htdUNlaF5J2+NZ+dxB
bqMTwElHdJLEc/l5SDEJ7HavTc+amA+YuJWzmIC/nCpQkJZT6YaWVgKy40uyK5ni
qMdZhSk631jjapFpDrC5K/L8Wows3Y7JRmFdfGxvm2nBGRt9iV/KYTUHxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUVZJYH2Wbd3tMZXpZCBlY73cd8MB8GA1UdIwQY
MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt
ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl
LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpyeZTYs
bbYSEDJ62O6D0Fm6cwmLnvyLFc+bNwcpWpVfjSDjE0ZQJbibp5LYDP7CQ8leYOSt
pLuPKadjq/k4AouxTeM6JgqJCe62vTbe54uFy9acZ+WO3GsP08s4oX5M7yAHqLC2
vdPSfAOOlxQVC7g6vyEzgys1y7Bm6fheDWBeX/kAmV5aCa5PuQJuVS7YeZQ0ha6A
11vmdWtzHxw4gPM6ShFwFN9x0Eo4O0iBJF24tlaYyWgkLTi8h83ucDcMLtOR2/ys
Ldk4x+HoaK1c0DWPLkC3YikjQCIoTR5vbt3aizhT8pWOibkbrt6biJ6FSQYBpTvc
s5ZQQVMTmcD0Uw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 00:57:01 2026 by rpki-client