Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: 5iSVoxjT+8Y+a0hJX8iy9c8wLzcgtC3NUzP9vVo5+Ys=
Subject key identifier: A7:B4:DB:34:3D:0A:13:43:B1:F0:AE:AF:52:26:D0:1B:74:10:DB:DD
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 01A0D2009043C5554BC6E8841BD13B074B0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0A2F
Signing time: Thu 24 Sep 2026 06:00:47 +0000
Manifest this update: Thu 24 Sep 2026 06:00:47 +0000
Manifest next update: Fri 25 Sep 2026 06:00:47 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: Hb4WvOTBk3jl58SMNwEf9N3hrgtMA8MXinAOe1lzw7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:90:43:c5:55:4b:c6:e8:84:1b:d1:3b:07:4b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Sep 24 06:00:47 2026 GMT
Not After : Sep 25 06:00:47 2026 GMT
Subject: CN=a7b4db343d0a1343b1f0aeaf5226d01b7410dbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a1:3b:97:c3:8a:7f:ef:9a:25:35:6c:30:22:
a9:86:ed:a5:47:1a:da:59:6e:a5:f2:55:d6:52:de:
f6:58:5a:55:9c:6c:7a:fe:cd:79:25:97:da:31:c4:
60:e7:55:aa:c5:f1:75:a7:4c:d4:9b:69:05:4e:a8:
31:c6:c9:14:23:15:e7:56:47:1e:2b:71:4f:18:10:
f4:03:a0:92:79:c9:f8:29:37:e9:22:82:df:1e:f5:
79:3d:d6:33:ce:3c:f5:e0:93:02:37:e9:62:14:e6:
22:d8:57:dc:ae:86:71:6d:de:75:71:aa:ab:9d:5b:
8b:78:18:da:27:61:03:bc:e6:9a:e0:ef:bc:14:d4:
5d:7b:02:7a:9e:0c:f5:92:44:76:7e:fb:51:00:c6:
94:f4:98:5f:86:03:91:3f:f7:10:61:28:51:5e:35:
8d:ee:20:04:79:7d:06:33:e2:e6:b8:88:cb:da:2d:
11:db:f0:09:ce:a3:a2:6d:70:6b:7a:11:5c:fe:61:
6a:28:d1:a1:2a:5a:8f:e7:4e:74:7e:1d:58:b6:97:
4f:84:05:58:0a:0f:65:01:dd:3f:44:fc:9c:58:7b:
3e:af:34:4f:36:82:1f:82:42:f9:42:81:6c:e8:b8:
4f:7e:8d:91:54:1d:04:15:94:bc:71:de:99:15:4f:
d3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B4:DB:34:3D:0A:13:43:B1:F0:AE:AF:52:26:D0:1B:74:10:DB:DD
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cd:f8:0a:40:3e:78:17:8e:c1:70:89:04:b9:80:0b:9d:1d:
86:d2:bb:ed:9e:58:c4:a4:04:a2:11:6f:cc:58:8b:c4:70:a3:
d1:b7:57:57:89:2c:c3:5f:02:c7:cf:55:87:a6:53:ae:bb:26:
5f:69:77:87:4e:2b:f6:cd:d7:f1:6e:02:09:64:fe:2a:45:2f:
2c:a0:92:5c:ed:2e:29:df:1e:51:5f:4e:e7:f2:d7:b1:a0:9f:
19:38:dd:3f:35:c3:74:fe:19:f9:ff:86:dd:8c:54:d8:f7:ef:
a8:c3:95:4b:e8:b7:d5:83:e3:1d:2a:14:46:96:43:ec:1d:aa:
e6:d9:f1:c5:f8:95:d5:c6:8e:16:c1:f8:26:f9:5d:02:5f:65:
88:b7:85:f2:d1:88:5f:6a:d3:57:79:ed:0a:be:4f:13:54:89:
85:25:09:e4:16:2b:e9:61:ab:76:00:01:43:25:16:cb:6f:1a:
8d:10:1a:68:1b:42:21:4f:fa:69:ea:d4:64:12:96:4e:ec:fa:
0c:66:01:5a:11:dc:fb:0f:79:82:48:f9:d6:ee:23:a5:3a:d0:
a4:a5:69:e3:56:fc:c3:57:8d:86:75:dd:f5:d0:67:e1:94:11:
1d:a8:ce:3a:09:3f:4e:9b:dc:1a:02:87:3b:4d:0e:40:75:e8:
3b:62:e3:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAJBDxVVLxuiEG9E7B0sLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2
NTFiZjcwHhcNMjYwOTI0MDYwMDQ3WhcNMjYwOTI1MDYwMDQ3WjAzMTEwLwYDVQQD
EyhhN2I0ZGIzNDNkMGExMzQzYjFmMGFlYWY1MjI2ZDAxYjc0MTBkYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaE7l8OKf++aJTVsMCKphu2lRxra
WW6l8lXWUt72WFpVnGx6/s15JZfaMcRg51WqxfF1p0zUm2kFTqgxxskUIxXnVkce
K3FPGBD0A6CSecn4KTfpIoLfHvV5PdYzzjz14JMCN+liFOYi2FfcroZxbd51caqr
nVuLeBjaJ2EDvOaa4O+8FNRdewJ6ngz1kkR2fvtRAMaU9JhfhgORP/cQYShRXjWN
7iAEeX0GM+LmuIjL2i0R2/AJzqOibXBrehFc/mFqKNGhKlqP5050fh1YtpdPhAVY
Cg9lAd0/RPycWHs+rzRPNoIfgkL5QoFs6LhPfo2RVB0EFZS8cd6ZFU/TmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKe02zQ9ChNDsfCur1Im0Bt0ENvdMB8GA1UdIwQY
MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct
OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1
LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPc34CkA+
eBeOwXCJBLmAC50dhtK77Z5YxKQEohFvzFiLxHCj0bdXV4ksw18Cx89Vh6ZTrrsm
X2l3h04r9s3X8W4CCWT+KkUvLKCSXO0uKd8eUV9O5/LXsaCfGTjdPzXDdP4Z+f+G
3YxU2PfvqMOVS+i31YPjHSoURpZD7B2q5tnxxfiV1caOFsH4JvldAl9liLeF8tGI
X2rTV3ntCr5PE1SJhSUJ5BYr6WGrdgABQyUWy28ajRAaaBtCIU/6aerUZBKWTuz6
DGYBWhHc+w95gkj51u4jpTrQpKVp41b8w1eNhnXd9dBn4ZQRHajOOgk/TpvcGgKH
O00OQHXoO2Ljtg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:43:41 2026 by rpki-client