Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
File: A1KD5iNe2yXotUdJtihfXj74U3E.mft (raw, json)
Hash identifier: p6A7FPgawDRC+3UAupRWCuSjtN6seW0BXIL6cB4J6kg=
Subject key identifier: 43:F7:B0:DB:E2:D7:2C:02:0C:F0:A0:EF:29:7F:7E:D2:61:2A:51:D2
Authority key identifier: 03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
Certificate issuer: /CN=035283e6235edb25e8b54749b6285f5e3ef85371
Certificate serial: 01A0E7E3BEBA97D80CBBCB808072EEB07135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
Manifest number: 05C6
Signing time: Mon 28 Sep 2026 12:00:57 +0000
Manifest this update: Mon 28 Sep 2026 12:00:57 +0000
Manifest next update: Tue 29 Sep 2026 12:00:57 +0000
Files and hashes: 1: A1KD5iNe2yXotUdJtihfXj74U3E.crl (hash: t4MF393cF+/zo5DfzKBr5NDWUsu23dS+6OiVefocAVc=)
2: yX9ydvOKgI9DtKgtlG1m9Fn2ZI8.roa (hash: qPtAu4bwy3Juh5so6bwqIDZWhOQpRsegMYoucr8NrwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e3:be:ba:97:d8:0c:bb:cb:80:80:72:ee:b0:71:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=035283e6235edb25e8b54749b6285f5e3ef85371
Validity
Not Before: Sep 28 12:00:57 2026 GMT
Not After : Sep 29 12:00:57 2026 GMT
Subject: CN=43f7b0dbe2d72c020cf0a0ef297f7ed2612a51d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:ca:91:42:6f:38:70:60:a0:49:be:dd:82:
4a:27:45:03:d5:b6:0e:b0:95:d9:7a:6c:26:58:5b:
a4:2d:f5:e8:f5:18:a9:a2:3e:ff:4f:46:79:13:5f:
67:de:06:55:48:66:54:3c:03:2b:34:7e:cd:1f:b9:
9e:c2:81:62:3d:0c:33:2d:84:43:0b:41:61:6d:2a:
ed:08:56:e9:64:60:d0:9a:87:b4:93:d9:08:4a:82:
37:42:af:ec:12:7b:01:c6:ab:d2:0c:aa:75:b0:66:
30:c2:65:02:eb:06:5e:c5:4b:97:2d:35:a9:83:63:
2e:61:13:2d:89:9b:59:c1:10:d8:a1:b4:db:a8:96:
a3:45:58:e4:2d:bc:ad:46:c4:56:32:80:93:56:a8:
ee:72:a2:34:fb:ac:16:8d:d9:12:fb:8b:39:84:e8:
9d:75:29:a9:0e:e4:16:84:3a:5c:fd:b8:a1:63:0e:
78:f2:bb:72:73:6c:77:36:8f:b5:d7:89:a0:76:aa:
9b:a8:ff:e7:86:ad:79:31:f1:ea:75:3c:bf:7e:42:
0f:d5:8c:d7:67:4b:e6:06:dd:2f:92:84:db:a1:b3:
57:7c:d7:26:ed:8e:6d:66:12:1c:f6:c5:26:a5:52:
0f:0d:65:62:d3:eb:61:3a:f6:58:29:73:59:5f:b2:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:B0:DB:E2:D7:2C:02:0C:F0:A0:EF:29:7F:7E:D2:61:2A:51:D2
X509v3 Authority Key Identifier:
keyid:03:52:83:E6:23:5E:DB:25:E8:B5:47:49:B6:28:5F:5E:3E:F8:53:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1KD5iNe2yXotUdJtihfXj74U3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/311f57-6404-446a-9f08-11b92906406d/1/A1KD5iNe2yXotUdJtihfXj74U3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:7c:8e:26:74:14:de:1a:38:b3:2a:81:52:05:3c:8a:df:d3:
6f:24:fa:a8:46:87:bb:d5:49:56:ca:07:56:ef:11:da:b3:ec:
4c:dc:d1:d9:37:50:da:39:fa:76:64:1e:e4:92:f8:91:fb:ec:
22:c7:0f:94:e9:6f:3c:2d:59:9e:94:ed:43:d6:eb:be:e8:1f:
35:ea:65:a2:d9:77:1b:9a:bb:0f:0a:30:11:04:10:6b:cc:d4:
eb:84:83:32:11:f7:b4:b6:40:cf:94:b3:8b:cc:d7:d8:57:23:
39:6f:03:fd:15:f5:d7:62:20:ae:8f:52:5c:85:f3:13:c7:ed:
05:a2:0b:20:d6:3a:5d:22:42:ef:bc:b5:f6:9d:83:3f:96:4b:
a3:dc:10:47:c9:60:63:b0:e7:24:1b:e1:12:2a:c6:65:0f:1c:
bb:a6:39:5c:c0:6f:ee:8d:a0:c0:cc:90:ba:7d:76:6a:e2:b5:
3f:0c:35:ff:97:2b:d9:9f:75:cc:9f:f9:21:28:a9:46:53:47:
a3:b8:6a:fc:93:40:ac:42:f1:8f:f2:8f:31:8a:7d:57:0d:22:
65:88:81:7f:01:d9:41:d0:25:94:0a:56:e1:a4:ef:81:d0:04:
2a:f8:80:e3:5f:fe:31:3f:23:2a:46:fb:86:14:b0:6f:ab:17:
5c:c0:07:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDn4766l9gMu8uAgHLusHE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNTI4M2U2MjM1ZWRiMjVlOGI1NDc0OWI2Mjg1ZjVlM2Vm
ODUzNzEwHhcNMjYwOTI4MTIwMDU3WhcNMjYwOTI5MTIwMDU3WjAzMTEwLwYDVQQD
Eyg0M2Y3YjBkYmUyZDcyYzAyMGNmMGEwZWYyOTdmN2VkMjYxMmE1MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFzKkUJvOHBgoEm+3YJKJ0UD1bYO
sJXZemwmWFukLfXo9Ripoj7/T0Z5E19n3gZVSGZUPAMrNH7NH7mewoFiPQwzLYRD
C0FhbSrtCFbpZGDQmoe0k9kISoI3Qq/sEnsBxqvSDKp1sGYwwmUC6wZexUuXLTWp
g2MuYRMtiZtZwRDYobTbqJajRVjkLbytRsRWMoCTVqjucqI0+6wWjdkS+4s5hOid
dSmpDuQWhDpc/bihYw548rtyc2x3No+114mgdqqbqP/nhq15MfHqdTy/fkIP1YzX
Z0vmBt0vkoTbobNXfNcm7Y5tZhIc9sUmpVIPDWVi0+thOvZYKXNZX7KIVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP3sNvi1ywCDPCg7yl/ftJhKlHSMB8GA1UdIwQY
MBaAFANSg+YjXtsl6LVHSbYoX14++FNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgt
MTFiOTI5MDY0MDZkLzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMTFmNTctNjQwNC00NDZhLTlmMDgtMTFiOTI5MDY0MDZk
LzEvQTFLRDVpTmUyeVhvdFVkSnRpaGZYajc0VTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3yOJnQU
3ho4syqBUgU8it/TbyT6qEaHu9VJVsoHVu8R2rPsTNzR2TdQ2jn6dmQe5JL4kfvs
IscPlOlvPC1ZnpTtQ9brvugfNeplotl3G5q7DwowEQQQa8zU64SDMhH3tLZAz5Sz
i8zX2FcjOW8D/RX112Igro9SXIXzE8ftBaILINY6XSJC77y19p2DP5ZLo9wQR8lg
Y7DnJBvhEirGZQ8cu6Y5XMBv7o2gwMyQun12auK1Pww1/5cr2Z91zJ/5ISipRlNH
o7hq/JNArELxj/KPMYp9Vw0iZYiBfwHZQdAllApW4aTvgdAEKviA41/+MT8jKkb7
hhSwb6sXXMAHxg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:59:48 2026 by rpki-client