Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: bomTdJdZSlKJa/ENHnKR1MjO1E8phaoihoKpCU+rUD8=
Subject key identifier: 77:F8:ED:A1:B2:15:CC:74:1F:DF:BF:B0:32:4C:60:7F:ED:AB:A0:A4
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 01A1DE71530AE8491EBEBA0D96A90023AD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 0ABA
Signing time: Sun 15 Nov 2026 09:02:11 +0000
Manifest this update: Sun 15 Nov 2026 09:02:11 +0000
Manifest next update: Mon 16 Nov 2026 09:02:11 +0000
Files and hashes: 1: DWZ7HjSRCLESUgo7i9Znv3F8WPI.roa (hash: 8dYfzKxyh8S4a9rEf+ls3bA5hsUeQ004H6oQiSZHoVw=)
2: a3gSQ9IQVQweYEMK-gNDpqDeUyE.roa (hash: X9hTJQV75Af9HWfAGJL8jpedHMgdZakYiBqDBBKMiVQ=)
3: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: SASRk6+UYhHlMSpOAgnaYRyvQpoK8Z7DiDo63gwfeM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:53:0a:e8:49:1e:be:ba:0d:96:a9:00:23:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: Nov 15 09:02:11 2026 GMT
Not After : Nov 16 09:02:11 2026 GMT
Subject: CN=77f8eda1b215cc741fdfbfb0324c607fedaba0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:58:54:7f:ef:73:16:03:0b:00:b4:2f:67:
0e:66:e6:0d:5f:69:94:46:cc:2c:9c:db:3f:15:65:
4b:f2:64:1e:fb:79:f2:51:b7:ff:51:4e:55:f5:46:
1d:49:cc:6b:3f:fa:29:97:91:0c:6c:36:df:bf:89:
7b:5a:e9:15:35:3a:df:e3:76:76:e2:d6:eb:6f:16:
dd:98:56:3c:b7:a6:12:54:86:1f:86:5d:06:a1:db:
cb:87:49:b9:32:86:f1:f2:e7:90:4a:f4:db:09:d3:
a6:dd:b9:3c:65:59:cc:37:f8:10:ae:bd:1c:8f:de:
d2:26:70:0d:04:83:19:cc:c9:e5:11:c7:04:22:09:
ed:8d:cb:e7:d9:08:01:ea:9d:c7:b8:47:d4:00:76:
d4:b9:3c:c0:d0:af:b7:0b:59:6d:71:3f:5c:aa:b9:
75:cb:33:ba:85:c6:d5:23:8e:7b:c4:f2:05:9a:02:
b2:c3:1c:8e:af:09:fe:1c:46:b9:77:b3:69:b0:6e:
17:db:fc:b2:82:85:fc:87:8a:e6:0e:98:6a:8a:7b:
63:3e:a5:39:84:1f:82:5a:f6:17:dc:d6:4f:fe:9e:
e2:27:1b:e5:2a:06:e3:a4:26:e8:99:a5:10:f8:20:
04:2b:12:13:5f:68:23:8c:96:66:c4:11:c8:c0:f3:
4c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:ED:A1:B2:15:CC:74:1F:DF:BF:B0:32:4C:60:7F:ED:AB:A0:A4
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3d:97:c8:32:00:bf:82:f3:5f:f5:1c:7c:48:0a:89:8f:05:
7d:0d:a6:70:ba:17:f3:93:60:0d:d7:ba:46:60:f1:1f:e5:fd:
2a:69:76:85:85:ff:b4:4f:e6:1e:c7:a7:59:74:8c:f4:a4:dc:
17:dc:07:fa:aa:32:53:07:03:69:0d:b7:52:87:40:99:e9:87:
2b:14:aa:c4:a4:63:da:dd:e7:9e:c7:1e:9f:be:82:28:cf:9b:
ae:61:cb:51:99:da:bf:41:1b:ed:57:ef:da:ee:c2:b6:02:7d:
cd:51:23:53:70:3e:65:4c:b7:9b:3b:42:53:05:64:a8:2c:ad:
88:64:4a:63:30:37:d1:6f:1f:f8:b3:a3:e3:da:dd:0d:9b:9c:
e1:ae:7e:f7:4d:59:5e:67:9e:a8:92:f7:c1:04:bc:35:28:fb:
8d:d9:af:2b:a3:09:88:0e:39:0f:b8:ee:c4:68:cc:c6:ec:af:
84:28:bd:82:52:d0:95:e1:26:a6:ca:5a:0b:43:12:0f:73:fd:
89:34:bb:07:91:f2:21:e0:80:44:a5:6b:d6:f1:2d:67:2a:11:
fd:2d:80:ba:bc:e9:68:a9:9a:76:db:38:38:b2:35:6e:8e:7e:
f8:97:5c:eb:4e:37:f2:6f:50:2b:f3:07:24:01:1c:03:dc:49:
19:b0:2f:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHecVMK6EkevroNlqkAI60BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGFkMmQ0YjBiNzMzMGU0YTliNWFmYTExYTYxOThmY2I2
NTFiZjcwHhcNMjYxMTE1MDkwMjExWhcNMjYxMTE2MDkwMjExWjAzMTEwLwYDVQQD
Eyg3N2Y4ZWRhMWIyMTVjYzc0MWZkZmJmYjAzMjRjNjA3ZmVkYWJhMGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMBYVH/vcxYDCwC0L2cOZuYNX2mU
RswsnNs/FWVL8mQe+3nyUbf/UU5V9UYdScxrP/opl5EMbDbfv4l7WukVNTrf43Z2
4tbrbxbdmFY8t6YSVIYfhl0GodvLh0m5Mobx8ueQSvTbCdOm3bk8ZVnMN/gQrr0c
j97SJnANBIMZzMnlEccEIgntjcvn2QgB6p3HuEfUAHbUuTzA0K+3C1ltcT9cqrl1
yzO6hcbVI457xPIFmgKywxyOrwn+HEa5d7NpsG4X2/yygoX8h4rmDphqintjPqU5
hB+CWvYX3NZP/p7iJxvlKgbjpCbomaUQ+CAEKxITX2gjjJZmxBHIwPNMEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf47aGyFcx0H9+/sDJMYH/tq6CkMB8GA1UdIwQY
MBaAFK5K0tSwtzMOSpta+hGmGY/LZRv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDct
OGE5NjY3ZDc2MmE1LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YzhlNTktYWZkZi00MmE2LTgwZDctOGE5NjY3ZDc2MmE1
LzEvcmtyUzFMQzNNdzVLbTFyNkVhWVpqOHRsR19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD2XyDIA
v4LzX/UcfEgKiY8FfQ2mcLoX85NgDde6RmDxH+X9Kml2hYX/tE/mHsenWXSM9KTc
F9wH+qoyUwcDaQ23UodAmemHKxSqxKRj2t3nnscen76CKM+brmHLUZnav0Eb7Vfv
2u7CtgJ9zVEjU3A+ZUy3mztCUwVkqCytiGRKYzA30W8f+LOj49rdDZuc4a5+901Z
XmeeqJL3wQS8NSj7jdmvK6MJiA45D7juxGjMxuyvhCi9glLQleEmpspaC0MSD3P9
iTS7B5HyIeCARKVr1vEtZyoR/S2AurzpaKmadts4OLI1bo5++Jdc60438m9QK/MH
JAEcA9xJGbAvZw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:51:30 2026 by rpki-client