Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: q2b6aCQzLqi4lfzGXX6t5sAmtj4Pw0Cx7F8vSUrMVLU=
Subject key identifier: 44:05:07:CC:CD:82:89:25:C0:72:A8:1E:29:40:93:42:F0:22:90:A6
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 01A0DF85BA1B74EF5D93125F9EF073FBF8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 095C
Signing time: Sat 26 Sep 2026 21:01:18 +0000
Manifest this update: Sat 26 Sep 2026 21:01:18 +0000
Manifest next update: Sun 27 Sep 2026 21:01:18 +0000
Files and hashes: 1: Hv-HpYlBtcGtjlR8qtNflDayGpQ.roa (hash: aBGsg4UHN28OpsS2xFbkAdXhnlHxP423kuvv3ReKy28=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: 2xMAIalgLmkeXrA4oYL280mZZ0DuyOthcSk39YPnKFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:ba:1b:74:ef:5d:93:12:5f:9e:f0:73:fb:f8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Sep 26 21:01:18 2026 GMT
Not After : Sep 27 21:01:18 2026 GMT
Subject: CN=440507cccd828925c072a81e29409342f02290a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d3:df:da:03:53:fd:48:66:93:48:3e:a5:0d:
bb:8b:dc:c9:84:b9:36:2a:fd:44:4b:c7:2e:e0:30:
ac:6c:30:dc:18:99:53:3e:03:3d:3e:fc:5d:2e:9a:
25:02:84:38:f3:64:a9:a7:3c:a6:df:85:34:f2:3b:
81:f9:50:33:8d:c5:2e:a9:75:61:c2:c6:13:b7:f5:
8f:6b:18:ac:83:86:05:4e:5d:57:0c:10:da:65:d8:
c7:b5:df:84:0e:3d:42:a0:7e:fb:76:dd:15:e3:82:
5d:43:d3:68:7e:3f:a2:2b:be:d2:d0:0f:6c:9f:fe:
fa:d1:a6:04:a4:f5:f9:ee:e1:89:bc:aa:28:83:b1:
04:a7:c1:e7:e6:35:0b:41:b0:e3:61:3b:2f:57:2a:
6b:66:e0:2b:ea:40:1a:44:1e:d8:c2:9c:d1:31:56:
ac:aa:38:1c:4b:2a:52:80:37:24:f6:38:f0:72:ba:
44:b5:aa:7b:f9:92:05:33:de:6c:df:f8:9b:83:de:
4d:27:81:f2:21:11:56:4a:86:f6:a0:b0:08:86:7f:
2b:bb:70:09:04:d6:46:88:44:d6:5e:2c:5d:27:ad:
e3:8f:10:28:03:51:a6:9c:1f:87:5b:a9:ba:ab:44:
c4:aa:72:3d:fd:03:bb:05:22:47:24:fc:4d:eb:f4:
51:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:05:07:CC:CD:82:89:25:C0:72:A8:1E:29:40:93:42:F0:22:90:A6
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:82:69:b2:2d:6a:00:3b:a6:5a:a3:c7:ef:e5:fb:46:02:99:
48:10:a9:7d:66:2d:c8:df:21:67:59:5f:96:44:0b:93:35:38:
60:75:ad:f7:50:79:50:6d:b0:b3:13:d7:d3:ce:51:13:5f:51:
47:97:86:3e:e3:e4:58:68:7c:15:f8:d0:73:e6:80:f2:f0:80:
a0:72:7f:39:8a:7f:cb:4d:57:ca:c9:3f:d6:d8:4e:70:ff:d5:
63:cb:57:04:d3:ee:9d:a9:52:d7:ce:67:22:06:b1:a4:a6:18:
a6:06:e2:ab:02:0a:d8:93:c6:ee:bb:c3:34:69:46:6c:1a:3f:
dc:b8:c0:db:66:81:71:06:aa:97:23:71:94:cb:b3:0e:15:ac:
9d:eb:7c:c0:c7:41:80:32:e2:95:28:cf:2a:20:f2:24:8c:b0:
f7:27:97:84:c7:69:ca:1f:bf:89:91:fe:f4:a6:20:14:7c:35:
56:4b:51:2e:99:b9:4b:9f:14:8b:02:6f:9d:94:c9:2c:ab:3f:
69:27:d3:00:c1:24:e4:a3:08:13:e0:a0:97:5c:ca:05:1e:4c:
52:43:97:95:05:d7:62:47:74:29:97:97:76:92:d6:75:0f:fa:
d2:9d:48:8e:0d:cd:51:6f:58:92:9a:e7:ab:31:5c:e0:e6:63:
08:39:35:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfhbobdO9dkxJfnvBz+/jhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjFhMTEzZDFiYTAxZDEwN2ZkZjc5MTMwOGMwYTUxZjNk
MDZkZGEwHhcNMjYwOTI2MjEwMTE4WhcNMjYwOTI3MjEwMTE4WjAzMTEwLwYDVQQD
Eyg0NDA1MDdjY2NkODI4OTI1YzA3MmE4MWUyOTQwOTM0MmYwMjI5MGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdPf2gNT/Uhmk0g+pQ27i9zJhLk2
Kv1ES8cu4DCsbDDcGJlTPgM9PvxdLpolAoQ482Sppzym34U08juB+VAzjcUuqXVh
wsYTt/WPaxisg4YFTl1XDBDaZdjHtd+EDj1CoH77dt0V44JdQ9Nofj+iK77S0A9s
n/760aYEpPX57uGJvKoog7EEp8Hn5jULQbDjYTsvVyprZuAr6kAaRB7YwpzRMVas
qjgcSypSgDck9jjwcrpEtap7+ZIFM95s3/ibg95NJ4HyIRFWSob2oLAIhn8ru3AJ
BNZGiETWXixdJ63jjxAoA1GmnB+HW6m6q0TEqnI9/QO7BSJHJPxN6/RRhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQFB8zNgoklwHKoHilAk0LwIpCmMB8GA1UdIwQY
MBaAFKwhoRPRugHRB/33kTCMClHz0G3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYt
ZmQ3M2I4MDgzM2I3LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81ODkzZjctYjRmMS00OTYxLTk0MjYtZmQ3M2I4MDgzM2I3
LzEvckNHaEU5RzZBZEVIX2ZlUk1Jd0tVZlBRYmRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAToJpsi1q
ADumWqPH7+X7RgKZSBCpfWYtyN8hZ1lflkQLkzU4YHWt91B5UG2wsxPX085RE19R
R5eGPuPkWGh8FfjQc+aA8vCAoHJ/OYp/y01Xysk/1thOcP/VY8tXBNPunalS185n
IgaxpKYYpgbiqwIK2JPG7rvDNGlGbBo/3LjA22aBcQaqlyNxlMuzDhWsnet8wMdB
gDLilSjPKiDyJIyw9yeXhMdpyh+/iZH+9KYgFHw1VktRLpm5S58UiwJvnZTJLKs/
aSfTAMEk5KMIE+Cgl1zKBR5MUkOXlQXXYkd0KZeXdpLWdQ/60p1Ijg3NUW9Ykprn
qzFc4OZjCDk10w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:32:10 2026 by rpki-client