Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier: GeHkgDNtSIU0leub5HfqrJ7SvZRba6GlPEPi9coPp2s=
Subject key identifier: 6D:29:00:4B:FF:A0:9F:CB:3D:12:3E:7D:57:D8:03:B7:D9:78:47:FE
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 01A0CEFFC475995CC94B5F6EA9575A792B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number: 1AAC
Signing time: Wed 23 Sep 2026 16:01:03 +0000
Manifest this update: Wed 23 Sep 2026 16:01:03 +0000
Manifest next update: Thu 24 Sep 2026 16:01:03 +0000
Files and hashes: 1: 02V6uD_m2vxMf1j5-7X95IV0-gs.roa (hash: fLacXMRDvKDwzdq5UZlWEREIbVIytNZvRK4xH7nhQYM=)
2: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
4: bEcjbcp-y9JIahihmtoi9EK0TiQ.roa (hash: ASxCyz+NX/m3cMBGmbT/xXqWc8knXBuHgU1BoVV8rW4=)
5: dkEx4YNEDY49gU4Bi8O4shVb0qE.roa (hash: 1Zg+GYUEr0f6jb4dD/9ZTpGvZlRVE8LmcxRY4Ssltp0=)
6: fljhoa-vFJrGSmV3e20cUcKDsk4.roa (hash: d+2zQov75PllQNpGPcXHZc6/b346mk3Kl228kjZURvw=)
7: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: hAEVBf72mcirFN48x1JjOn7NQ0C6w53vyclfC+n2oac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:c4:75:99:5c:c9:4b:5f:6e:a9:57:5a:79:2b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Sep 23 16:01:03 2026 GMT
Not After : Sep 24 16:01:03 2026 GMT
Subject: CN=6d29004bffa09fcb3d123e7d57d803b7d97847fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:0d:e7:37:62:42:13:38:07:82:49:00:cc:
cb:09:a2:7d:4a:a0:2d:08:40:51:5a:76:c1:cf:ac:
cd:47:62:27:51:11:96:4e:7f:92:59:80:ea:81:f6:
12:be:cf:12:cf:a6:e4:42:8e:90:38:79:ec:81:78:
60:87:9e:eb:75:44:7f:1f:1c:a3:4e:d8:07:53:66:
01:f5:62:16:50:d6:bc:41:2c:e4:69:e2:a5:52:9f:
d9:11:da:ca:d5:0c:4e:ec:47:87:52:96:10:c5:22:
97:08:1c:aa:ed:da:75:bf:5e:16:c6:7c:12:fa:55:
50:cc:f4:c7:67:f3:cc:78:cf:18:6b:11:b9:11:15:
df:bc:71:b8:3d:73:c2:2f:fb:bb:75:b4:4e:ae:33:
7a:73:3a:c0:a7:8d:a7:13:00:6b:ef:b0:46:13:8d:
00:7c:80:6c:b9:18:57:95:d1:28:b6:cc:f2:d7:4a:
d5:cb:89:ec:27:07:b1:28:fc:4a:47:67:a6:05:da:
54:41:75:a8:4c:37:4b:87:44:05:83:50:1e:bf:91:
0b:53:01:25:2d:01:aa:d4:48:c1:6c:95:3e:0b:5c:
61:3e:a5:c9:71:ef:6b:9d:6b:fd:e4:30:13:da:3b:
cd:26:3a:35:24:1e:69:2c:5f:0f:74:41:70:28:51:
de:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:00:4B:FF:A0:9F:CB:3D:12:3E:7D:57:D8:03:B7:D9:78:47:FE
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:73:8e:e4:4c:db:f3:40:a8:0e:04:fb:9f:ef:13:80:92:b3:
a2:13:c9:8e:7a:8a:bd:65:89:62:6b:dc:01:e6:e1:72:b5:1b:
f7:bf:e2:54:d3:be:9a:c8:83:76:ae:92:30:0b:15:f5:d9:15:
87:81:81:cf:13:c1:88:8c:ad:c1:f6:03:99:b7:ed:e7:b4:7b:
89:ef:09:f9:45:a9:e2:f4:c0:ed:11:d5:77:19:86:8d:12:6b:
61:51:7d:e2:b2:b3:03:be:13:0e:50:fd:a1:5d:b2:61:c5:7d:
1a:b6:c9:9a:36:b6:ba:c6:67:f3:7f:7e:fa:24:22:b1:89:ce:
a4:61:c4:9d:ff:f8:b2:5b:a2:dc:a9:96:b7:d1:f2:e2:c3:0c:
b4:0f:b0:88:50:d2:4f:ac:39:7c:c5:be:e3:d3:d6:32:81:36:
49:97:ae:ce:0d:37:25:84:b4:87:a7:93:17:2b:5d:df:ec:32:
66:9c:66:6c:10:1d:49:1b:02:f6:25:07:0b:81:e0:80:2a:06:
82:24:7e:0c:83:2a:b0:cf:36:2f:69:6a:25:d9:71:d4:6f:48:
d2:bc:75:98:52:9d:a9:6c:b6:91:bb:9e:38:3d:f3:bf:a8:99:
2c:82:63:0f:ed:54:ee:2d:cf:29:e6:ff:c3:83:ea:ab:25:f4:
f5:24:a5:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/8R1mVzJS19uqVdaeStDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx
MTQ1YzcwHhcNMjYwOTIzMTYwMTAzWhcNMjYwOTI0MTYwMTAzWjAzMTEwLwYDVQQD
Eyg2ZDI5MDA0YmZmYTA5ZmNiM2QxMjNlN2Q1N2Q4MDNiN2Q5Nzg0N2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL4N5zdiQhM4B4JJAMzLCaJ9SqAt
CEBRWnbBz6zNR2InURGWTn+SWYDqgfYSvs8Sz6bkQo6QOHnsgXhgh57rdUR/Hxyj
TtgHU2YB9WIWUNa8QSzkaeKlUp/ZEdrK1QxO7EeHUpYQxSKXCByq7dp1v14WxnwS
+lVQzPTHZ/PMeM8YaxG5ERXfvHG4PXPCL/u7dbROrjN6czrAp42nEwBr77BGE40A
fIBsuRhXldEotszy10rVy4nsJwexKPxKR2emBdpUQXWoTDdLh0QFg1Aev5ELUwEl
LQGq1EjBbJU+C1xhPqXJce9rnWv95DAT2jvNJjo1JB5pLF8PdEFwKFHeHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0pAEv/oJ/LPRI+fVfYA7fZeEf+MB8GA1UdIwQY
MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt
NDIzYWZjMmI2OGI4LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4
LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3OO5Ezb
80CoDgT7n+8TgJKzohPJjnqKvWWJYmvcAebhcrUb97/iVNO+msiDdq6SMAsV9dkV
h4GBzxPBiIytwfYDmbft57R7ie8J+UWp4vTA7RHVdxmGjRJrYVF94rKzA74TDlD9
oV2yYcV9GrbJmja2usZn839++iQisYnOpGHEnf/4slui3KmWt9Hy4sMMtA+wiFDS
T6w5fMW+49PWMoE2SZeuzg03JYS0h6eTFytd3+wyZpxmbBAdSRsC9iUHC4HggCoG
giR+DIMqsM82L2lqJdlx1G9I0rx1mFKdqWy2kbueOD3zv6iZLIJjD+1U7i3PKeb/
w4PqqyX09SSlkA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:31 2026 by rpki-client