Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
File: rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft (raw, json)
Hash identifier: LvIGMjX0+CS3+i368M+CNWDuym40jyrD1+7UEM4QEKY=
Subject key identifier: 35:68:5D:07:DD:D8:36:28:EF:97:84:BF:B5:EB:CA:A0:AA:C0:AB:C2
Authority key identifier: AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
Certificate issuer: /CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Certificate serial: 01A0EB1D2528E038FB877781D52820926195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
Manifest number: 0207
Signing time: Tue 29 Sep 2026 03:02:30 +0000
Manifest this update: Tue 29 Sep 2026 03:02:30 +0000
Manifest next update: Wed 30 Sep 2026 03:02:30 +0000
Files and hashes: 1: rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl (hash: s/wdtBICuVB/OglWy/tv13X7LdqAWRHFxmPBLBvMZ5k=)
2: rcclP2fW2M9d6FzhFGpcIug6Slw.roa (hash: Ah4o3LwYLB7WSaBBzcrCq3rn0s5Unn57tKa0V6nN2u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1d:25:28:e0:38:fb:87:77:81:d5:28:20:92:61:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8b771e257baf27dda10a08ab58b26cf8f75e09
Validity
Not Before: Sep 29 03:02:30 2026 GMT
Not After : Sep 30 03:02:30 2026 GMT
Subject: CN=35685d07ddd83628ef9784bfb5ebcaa0aac0abc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a0:c8:fc:66:73:b2:ab:8c:5b:d1:89:91:8f:
47:d4:2a:44:06:93:ca:f0:6b:7b:7c:e9:db:24:3d:
f8:c8:b3:ee:c8:c7:6a:fc:6a:bc:ba:0f:0c:a3:e2:
91:b7:93:23:c1:2d:e6:ae:c1:73:54:58:a8:55:30:
31:e9:b2:71:67:29:ba:bc:59:e5:8f:39:9f:57:fd:
68:d4:d6:12:46:ce:6f:2a:47:ea:1b:b8:ce:30:f6:
df:b0:c7:1f:0c:65:d2:5d:8e:2e:9b:04:09:4a:e5:
44:99:0a:a5:87:57:54:96:01:0a:85:89:00:7d:5c:
cf:44:46:b9:1a:a9:7f:69:a7:45:1e:8c:ab:94:9a:
7a:21:eb:68:fe:77:30:4e:bf:5a:fc:c7:2c:5e:56:
dc:d6:56:8b:b0:05:40:0d:21:e9:8b:e1:36:ba:79:
71:c0:85:bc:79:78:b2:df:b2:a3:c2:2e:7c:e5:28:
0c:a1:21:e7:81:54:04:30:aa:ef:46:65:75:13:5d:
e3:d2:ec:61:ee:d3:02:89:66:8e:0c:52:bd:bf:40:
12:88:38:01:4d:54:5a:a7:c7:f5:70:72:ba:6d:12:
65:69:42:5a:9f:f2:9c:0c:92:30:38:32:ed:72:86:
c6:18:c0:c7:99:8c:8f:a2:51:1c:80:6e:ba:e0:d0:
8c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:68:5D:07:DD:D8:36:28:EF:97:84:BF:B5:EB:CA:A0:AA:C0:AB:C2
X509v3 Authority Key Identifier:
keyid:AC:8B:77:1E:25:7B:AF:27:DD:A1:0A:08:AB:58:B2:6C:F8:F7:5E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIt3HiV7ryfdoQoIq1iybPj3Xgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/bd680c-4a50-4f52-98f8-4bae62896c4f/1/rIt3HiV7ryfdoQoIq1iybPj3Xgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b0:84:ca:3e:c3:f9:09:01:48:25:fc:3a:26:cf:3e:e5:ed:
6c:e5:07:e6:b0:10:95:3a:8c:fe:37:cb:3f:de:83:24:90:8d:
57:92:cf:37:34:ee:1f:33:1a:08:fe:93:08:5d:24:13:e7:a6:
bc:a9:f1:05:8f:0e:d1:80:73:73:d6:e2:ec:b3:ef:0f:e7:8e:
20:35:7c:31:55:cb:02:13:ab:27:90:68:c8:52:e7:51:1f:8d:
18:8b:c5:00:7b:a1:cc:a0:d2:b8:b5:39:fa:d4:84:c0:bb:ed:
bf:d6:38:c2:ff:1c:ae:c7:3f:03:79:51:7e:20:ab:66:c7:1c:
49:a5:6b:dc:a4:41:d4:56:29:0e:26:1d:9d:dd:13:0a:4b:7e:
ee:6f:e5:3c:58:4a:44:d9:0a:a7:1c:4d:36:ca:37:55:d3:74:
5f:51:c6:c3:86:2c:b0:c0:b0:12:3c:df:22:be:b1:b2:bd:66:
d5:0f:36:8f:e5:49:08:76:18:ad:04:ea:cd:db:cc:9f:88:a6:
10:b4:a2:d2:ff:cc:b4:92:04:fc:26:3a:d2:ad:cc:c2:30:5f:
99:bd:d6:f4:a0:3e:f3:fd:1c:82:23:d5:67:27:29:78:50:ca:
ca:87:3e:1e:58:91:3c:ad:60:5e:75:8e:7e:2d:bc:2b:73:fe:
73:2d:8a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHSUo4Dj7h3eB1SggkmGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOGI3NzFlMjU3YmFmMjdkZGExMGEwOGFiNThiMjZjZjhm
NzVlMDkwHhcNMjYwOTI5MDMwMjMwWhcNMjYwOTMwMDMwMjMwWjAzMTEwLwYDVQQD
EygzNTY4NWQwN2RkZDgzNjI4ZWY5Nzg0YmZiNWViY2FhMGFhYzBhYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qDI/GZzsquMW9GJkY9H1CpEBpPK
8Gt7fOnbJD34yLPuyMdq/Gq8ug8Mo+KRt5MjwS3mrsFzVFioVTAx6bJxZym6vFnl
jzmfV/1o1NYSRs5vKkfqG7jOMPbfsMcfDGXSXY4umwQJSuVEmQqlh1dUlgEKhYkA
fVzPREa5Gql/aadFHoyrlJp6Ieto/ncwTr9a/McsXlbc1laLsAVADSHpi+E2unlx
wIW8eXiy37Kjwi585SgMoSHngVQEMKrvRmV1E13j0uxh7tMCiWaODFK9v0ASiDgB
TVRap8f1cHK6bRJlaUJan/KcDJIwODLtcobGGMDHmYyPolEcgG664NCMnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDVoXQfd2DYo75eEv7XryqCqwKvCMB8GA1UdIwQY
MBaAFKyLdx4le68n3aEKCKtYsmz4914JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckl0M0hpVjdyeWZkb1FvSXExaXliUGozWGdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iZDY4MGMtNGE1MC00ZjUyLTk4Zjgt
NGJhZTYyODk2YzRmLzEvckl0M0hpVjdyeWZkb1FvSXExaXliUGozWGdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iZDY4MGMtNGE1MC00ZjUyLTk4ZjgtNGJhZTYyODk2YzRm
LzEvckl0M0hpVjdyeWZkb1FvSXExaXliUGozWGdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7CEyj7D
+QkBSCX8OibPPuXtbOUH5rAQlTqM/jfLP96DJJCNV5LPNzTuHzMaCP6TCF0kE+em
vKnxBY8O0YBzc9bi7LPvD+eOIDV8MVXLAhOrJ5BoyFLnUR+NGIvFAHuhzKDSuLU5
+tSEwLvtv9Y4wv8crsc/A3lRfiCrZsccSaVr3KRB1FYpDiYdnd0TCkt+7m/lPFhK
RNkKpxxNNso3VdN0X1HGw4YssMCwEjzfIr6xsr1m1Q82j+VJCHYYrQTqzdvMn4im
ELSi0v/MtJIE/CY60q3MwjBfmb3W9KA+8/0cgiPVZycpeFDKyoc+HliRPK1gXnWO
fi28K3P+cy2Ktw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 13:23:13 2026 by rpki-client