Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: D9QlU3chk979wXVxXbgXbGHVkdWIW51Cg78piWB9cOc=
Subject key identifier: B4:0B:56:27:F8:9B:91:7C:B1:CF:C1:B4:39:08:41:CF:A9:DD:3D:9D
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 01A0D7CC5E2B5ABCB70870BF010B522DE2DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0A32
Signing time: Fri 25 Sep 2026 09:01:29 +0000
Manifest this update: Fri 25 Sep 2026 09:01:29 +0000
Manifest next update: Sat 26 Sep 2026 09:01:29 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: vEc4hNTFqtD0viNJvFu3AZJreDJ4E+NCm1vIaGW57FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:5e:2b:5a:bc:b7:08:70:bf:01:0b:52:2d:e2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Sep 25 09:01:29 2026 GMT
Not After : Sep 26 09:01:29 2026 GMT
Subject: CN=b40b5627f89b917cb1cfc1b4390841cfa9dd3d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:dc:55:3a:fb:5d:95:55:90:f4:09:7e:3b:
d2:82:9d:d7:2b:fb:fc:d2:fd:eb:98:7f:0f:d4:11:
28:46:5f:48:d5:63:42:e4:9c:7e:00:8a:23:cc:fd:
1e:77:ee:e3:e6:39:99:89:35:3f:35:60:e2:3a:cf:
7c:bc:8d:c7:a2:9c:2d:93:f1:e0:77:31:71:a5:c6:
34:ff:54:f0:13:7a:bc:b9:c2:e7:ce:25:0a:9d:c1:
b7:63:e1:29:b4:78:28:df:17:be:17:fe:42:91:d4:
af:f9:66:25:d9:d6:2b:48:4f:5a:9f:e3:96:75:1d:
ef:ff:b3:74:ca:10:63:82:91:49:36:b3:d7:5c:f8:
df:b7:13:09:fb:35:03:57:40:cb:7f:80:be:4c:b8:
ab:86:56:b0:91:7a:8c:19:30:77:ed:96:f3:50:18:
d4:f0:ba:16:08:54:d3:ab:c1:d7:72:9f:87:9d:59:
8e:c3:ab:2f:c1:e2:15:4f:bc:5f:33:a7:a9:e6:3a:
e5:a8:85:14:38:57:51:42:6b:65:f3:68:47:ff:41:
d9:64:92:29:d8:59:10:f9:7b:f9:48:85:23:7c:eb:
68:76:c4:48:fc:98:86:05:fe:89:b8:77:3c:e1:b4:
b3:45:c7:ca:f8:5b:72:f2:22:43:1a:f9:84:9d:16:
0f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:56:27:F8:9B:91:7C:B1:CF:C1:B4:39:08:41:CF:A9:DD:3D:9D
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:72:80:23:0e:5c:5a:ce:18:42:57:02:48:e3:2d:86:76:
c6:4a:ee:3d:ea:24:3d:6c:c8:e1:b7:82:8a:97:79:c7:00:67:
be:bc:43:77:5f:83:3b:2a:1d:ca:aa:8f:91:87:08:7a:2f:90:
7d:50:55:58:61:df:d1:17:7a:61:88:dd:cc:fc:1b:c4:27:71:
ff:f1:7b:2c:08:2c:01:4f:71:6d:8f:9e:25:ae:34:3d:a8:d7:
a3:dd:31:4e:06:f3:52:8c:78:c6:0a:6f:f9:14:a8:b6:8d:de:
a9:c7:e9:18:95:dd:8c:8a:e0:48:cb:47:bd:64:26:c2:79:7f:
b7:97:41:f4:66:71:0a:d5:09:e7:bf:88:50:ea:b6:62:2d:20:
4f:ec:90:3e:44:c9:f3:a6:b4:50:68:f5:c3:5b:8f:19:62:11:
93:d1:04:87:ab:2a:03:d7:a7:f3:2a:41:70:c4:f5:c1:e6:74:
7e:11:92:e7:3f:7e:65:7c:92:0e:75:af:66:fe:41:d1:f2:ba:
e0:07:7c:af:8d:b9:0a:f7:c4:95:91:d8:a0:3a:32:fc:3d:d1:
a0:09:16:15:bd:3c:d1:dc:43:de:e9:e8:eb:d3:a5:5b:57:b4:
c3:71:14:f9:ee:23:38:b4:71:2f:a2:2c:c5:85:97:93:9a:db:
63:ed:31:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXzF4rWry3CHC/AQtSLeLaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2
NTFiZjcwHhcNMjYwOTI1MDkwMTI5WhcNMjYwOTI2MDkwMTI5WjAzMTEwLwYDVQQD
EyhiNDBiNTYyN2Y4OWI5MTdjYjFjZmMxYjQzOTA4NDFjZmE5ZGQzZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyjcVTr7XZVVkPQJfjvSgp3XK/v8
0v3rmH8P1BEoRl9I1WNC5Jx+AIojzP0ed+7j5jmZiTU/NWDiOs98vI3Hopwtk/Hg
dzFxpcY0/1TwE3q8ucLnziUKncG3Y+EptHgo3xe+F/5CkdSv+WYl2dYrSE9an+OW
dR3v/7N0yhBjgpFJNrPXXPjftxMJ+zUDV0DLf4C+TLirhlawkXqMGTB37ZbzUBjU
8LoWCFTTq8HXcp+HnVmOw6svweIVT7xfM6ep5jrlqIUUOFdRQmtl82hH/0HZZJIp
2FkQ+Xv5SIUjfOtodsRI/JiGBf6JuHc84bSzRcfK+Fty8iJDGvmEnRYPaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQLVif4m5F8sc/BtDkIQc+p3T2dMB8GA1UdIwQY
MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct
OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1
LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMdygCMO
XFrOGEJXAkjjLYZ2xkruPeokPWzI4beCipd5xwBnvrxDd1+DOyodyqqPkYcIei+Q
fVBVWGHf0Rd6YYjdzPwbxCdx//F7LAgsAU9xbY+eJa40PajXo90xTgbzUox4xgpv
+RSoto3eqcfpGJXdjIrgSMtHvWQmwnl/t5dB9GZxCtUJ57+IUOq2Yi0gT+yQPkTJ
86a0UGj1w1uPGWIRk9EEh6sqA9en8ypBcMT1weZ0fhGS5z9+ZXySDnWvZv5B0fK6
4Ad8r425CvfElZHYoDoy/D3RoAkWFb080dxD3uno69OlW1e0w3EU+e4jOLRxL6Is
xYWXk5rbY+0xfg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:34:45 2026 by rpki-client