Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
File: cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft (raw, json)
Hash identifier: PMX2lKs8aU8i3SftM72/fep+n8qeB2ae2AEawqb/Af8=
Subject key identifier: 84:49:8B:BC:1F:D9:1E:B9:05:7A:F9:56:6F:D8:20:CC:33:26:76:4E
Authority key identifier: 70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
Certificate issuer: /CN=7015ed275005408d2a86a2303701744430eda34a
Certificate serial: 01A1250C664F64122F02839636A463C41CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
Manifest number: 17B0
Signing time: Sat 10 Oct 2026 09:02:11 +0000
Manifest this update: Sat 10 Oct 2026 09:02:11 +0000
Manifest next update: Sun 11 Oct 2026 09:02:11 +0000
Files and hashes: 1: N1jnZKgFWeeO_mSOZ-Ze4VQuw40.roa (hash: p2mqoQD/zjBSyOFNJGsdIrV1TF5FFtEk9b08kwg3UPc=)
2: _62J83lzQ1oFlJFExShsa6-ZEdE.roa (hash: uU0IWCbhbUzEOirSzRssIA5YpPwmzBjL6oB4XiM15Ok=)
3: cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl (hash: MIKEXMz0IgMqBEVq6J5zDqU3uAXz/hfbwhsMMwzcocU=)
4: jOwlKFNThlCAigDd4FjuTpSW9As.roa (hash: RSHefX5Zz29vKhe8YnCs3jQBCzq18ilVKULjruBqd+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:66:4f:64:12:2f:02:83:96:36:a4:63:c4:1c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7015ed275005408d2a86a2303701744430eda34a
Validity
Not Before: Oct 10 09:02:11 2026 GMT
Not After : Oct 11 09:02:11 2026 GMT
Subject: CN=84498bbc1fd91eb9057af9566fd820cc3326764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:da:89:9b:2f:ce:52:ed:7a:65:ff:04:bc:bc:
8a:2b:8e:b2:5a:43:91:1b:a8:64:53:b5:c1:7d:98:
ee:f1:c7:a7:69:eb:40:6d:0d:34:81:bc:e3:82:20:
51:da:fe:33:5b:83:01:24:9e:17:cb:7c:26:60:e2:
3b:3e:6b:4b:c3:c5:a4:ee:92:10:4a:6a:d1:b5:3e:
94:fa:27:28:d3:c6:e1:c1:31:6e:a0:57:f6:7c:88:
eb:6d:b4:16:80:d9:53:8d:05:a3:22:89:4b:1f:d9:
98:67:c0:63:87:3f:00:9f:84:76:b3:7e:4c:40:a8:
33:f5:fb:f5:85:84:8c:9e:b7:d9:1b:5d:2d:02:02:
35:3e:09:09:82:b7:4d:69:e2:60:58:e6:5e:25:29:
19:9f:dc:3d:f5:c5:2c:64:84:20:ce:a2:57:4f:8a:
4d:08:dd:eb:b3:90:7c:9a:6e:26:45:7c:2c:09:99:
5f:f1:c1:6b:f2:58:2c:6c:a3:e1:30:4f:a7:89:da:
87:59:15:94:08:17:43:ad:fb:17:ec:74:81:61:27:
c8:d2:3c:c1:79:51:0a:cb:0b:36:39:b6:8b:47:db:
0e:b6:a0:ae:2e:c1:63:a2:7e:07:9a:c4:4f:0e:b8:
b6:70:d7:c6:49:00:68:e8:ff:ad:40:9b:d2:a9:45:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:8B:BC:1F:D9:1E:B9:05:7A:F9:56:6F:D8:20:CC:33:26:76:4E
X509v3 Authority Key Identifier:
keyid:70:15:ED:27:50:05:40:8D:2A:86:A2:30:37:01:74:44:30:ED:A3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBXtJ1AFQI0qhqIwNwF0RDDto0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ddf529-1536-44f0-9eda-4dad48a16e42/1/cBXtJ1AFQI0qhqIwNwF0RDDto0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9a:17:7b:07:0a:58:a9:20:cc:b2:f0:96:30:99:ea:fa:30:
bc:3d:92:4b:d9:09:5f:b7:a5:33:d3:f8:80:7b:a9:2e:1b:e5:
ca:9a:85:69:4e:19:d8:b3:42:b7:a4:68:1c:bd:7e:4b:f4:71:
89:d0:bd:52:68:3e:ef:97:b4:e9:d7:b1:8a:c7:e6:ed:1f:28:
7a:a7:34:5e:36:b9:8e:c2:ea:b6:1f:a1:d8:26:17:04:b9:4b:
89:91:78:8a:b4:ce:f5:21:b7:8f:64:ed:ec:6f:d8:65:94:8d:
32:c0:50:6c:61:e9:a0:b4:77:6c:e7:60:25:c1:81:60:2b:d9:
79:34:4c:ad:8c:44:fe:b0:ef:32:1b:16:22:30:16:34:7d:8e:
6b:0e:7c:cc:c7:f1:e5:d8:13:10:d5:73:10:c9:0e:c8:12:f9:
1c:61:1a:fd:34:44:49:03:f2:5a:eb:39:fc:ec:b6:8d:ad:bd:
50:bc:0c:93:7f:50:ff:28:6b:47:22:b6:a0:9f:1b:a5:30:bf:
60:93:31:aa:e6:c8:4c:a7:7b:b1:41:7a:4a:76:0a:13:c5:ae:
b7:f9:20:24:f6:d8:39:84:e3:23:7e:ac:f0:07:e9:48:81:51:
a0:59:c7:2f:ec:91:20:d6:12:4e:d9:eb:f5:b5:66:6c:87:d3:
1b:02:a1:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElDGZPZBIvAoOWNqRjxByxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTVlZDI3NTAwNTQwOGQyYTg2YTIzMDM3MDE3NDQ0MzBl
ZGEzNGEwHhcNMjYxMDEwMDkwMjExWhcNMjYxMDExMDkwMjExWjAzMTEwLwYDVQQD
Eyg4NDQ5OGJiYzFmZDkxZWI5MDU3YWY5NTY2ZmQ4MjBjYzMzMjY3NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dqJmy/OUu16Zf8EvLyKK46yWkOR
G6hkU7XBfZju8cenaetAbQ00gbzjgiBR2v4zW4MBJJ4Xy3wmYOI7PmtLw8Wk7pIQ
SmrRtT6U+ico08bhwTFuoFf2fIjrbbQWgNlTjQWjIolLH9mYZ8Bjhz8An4R2s35M
QKgz9fv1hYSMnrfZG10tAgI1PgkJgrdNaeJgWOZeJSkZn9w99cUsZIQgzqJXT4pN
CN3rs5B8mm4mRXwsCZlf8cFr8lgsbKPhME+nidqHWRWUCBdDrfsX7HSBYSfI0jzB
eVEKyws2ObaLR9sOtqCuLsFjon4HmsRPDri2cNfGSQBo6P+tQJvSqUWTJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRJi7wf2R65BXr5Vm/YIMwzJnZOMB8GA1UdIwQY
MBaAFHAV7SdQBUCNKoaiMDcBdEQw7aNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEt
NGRhZDQ4YTE2ZTQyLzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9kZGY1MjktMTUzNi00NGYwLTllZGEtNGRhZDQ4YTE2ZTQy
LzEvY0JYdEoxQUZRSTBxaHFJd053RjBSRER0bzBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJoXewcK
WKkgzLLwljCZ6vowvD2SS9kJX7elM9P4gHupLhvlypqFaU4Z2LNCt6RoHL1+S/Rx
idC9Umg+75e06dexisfm7R8oeqc0Xja5jsLqth+h2CYXBLlLiZF4irTO9SG3j2Tt
7G/YZZSNMsBQbGHpoLR3bOdgJcGBYCvZeTRMrYxE/rDvMhsWIjAWNH2Oaw58zMfx
5dgTENVzEMkOyBL5HGEa/TRESQPyWus5/Oy2ja29ULwMk39Q/yhrRyK2oJ8bpTC/
YJMxqubITKd7sUF6SnYKE8Wut/kgJPbYOYTjI36s8AfpSIFRoFnHL+yRINYSTtnr
9bVmbIfTGwKhGA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:57:35 2026 by rpki-client