Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: 99MbIZFWtFKPdo4L7HI3mMEmG3/IQiHV5dFZXCBEpcU=
Subject key identifier: BD:DA:DF:D2:C7:3B:E3:E4:F7:11:DD:C9:1F:D8:92:6B:B8:00:14:98
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 01A1CB2079E002AA075B5C93D15A5117E0EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: 078C
Signing time: Wed 11 Nov 2026 15:01:05 +0000
Manifest this update: Wed 11 Nov 2026 15:01:05 +0000
Manifest next update: Thu 12 Nov 2026 15:01:05 +0000
Files and hashes: 1: 1j3vfqmoOqwb7Yh6DBdvRjdsFsg.roa (hash: /Uld+qa79+lTp86N22k2YZMrzBMGIznMfTj+54uPKBY=)
2: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: GQoZfFr35O4BL4BYrkxdiPLlCMGABNzDscwUz3kfDic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:20:79:e0:02:aa:07:5b:5c:93:d1:5a:51:17:e0:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Nov 11 15:01:05 2026 GMT
Not After : Nov 12 15:01:05 2026 GMT
Subject: CN=bddadfd2c73be3e4f711ddc91fd8926bb8001498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:06:1e:01:a1:f9:80:97:0c:9b:95:2c:b9:
d0:e7:18:bc:51:4f:03:c5:29:96:c5:ff:b6:c4:d3:
45:2c:07:ee:a5:fb:d7:dc:40:ba:ca:19:f9:2d:04:
ce:cb:4b:8b:6c:c2:d3:c6:05:fd:c0:10:4f:91:f0:
b1:91:01:83:3c:af:85:e4:1d:fd:4f:3d:15:d6:f0:
38:43:07:5b:82:6d:45:ee:c6:8a:28:75:a4:88:61:
c2:b3:4d:7a:9a:1a:5b:d5:11:5d:3b:06:e2:0e:db:
dd:ac:e4:ec:14:a6:b6:19:57:05:24:6f:cf:b4:65:
03:14:22:6c:56:b2:ba:38:8d:37:54:bb:82:45:00:
27:74:63:92:ac:0a:84:58:08:40:14:e9:e4:6d:e2:
c9:21:fa:2e:2c:a9:37:e7:9c:96:ca:64:5b:99:31:
71:32:61:6e:6b:6c:c2:84:1b:00:46:76:ca:6c:b2:
38:3a:c9:ec:e3:a3:db:88:65:bc:da:bb:7f:b6:7a:
8d:9c:d8:b6:b5:ed:4c:81:94:ed:85:da:f3:cd:9c:
da:de:02:0a:33:f2:30:d2:d7:c1:4e:a1:b3:13:2b:
e5:6f:7b:22:9c:77:2b:72:6d:a9:a5:74:be:50:80:
ad:9c:8c:cc:80:ae:d4:8c:38:f6:18:0c:43:24:d9:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DA:DF:D2:C7:3B:E3:E4:F7:11:DD:C9:1F:D8:92:6B:B8:00:14:98
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:93:3f:70:ad:51:95:a2:b3:c1:c2:f4:c1:3e:38:44:1c:41:
54:cf:45:b1:f3:22:e8:b3:75:28:6e:17:d6:1d:ad:a1:6d:e1:
c2:ca:44:c1:8d:d6:a7:ee:e6:8f:98:e4:de:a8:e8:21:e9:08:
7a:9f:4e:af:80:f3:75:9f:cd:80:65:e9:78:79:6a:a8:cb:95:
5f:e7:6a:94:0f:73:f0:0a:08:b1:a4:53:46:c0:32:90:65:7f:
ce:97:d4:34:28:01:50:fd:4a:10:14:7a:27:87:ba:dc:6c:d9:
5d:aa:c5:9b:2b:97:5b:a8:db:22:c7:e6:48:c9:0a:ae:14:3e:
7b:15:55:f0:32:ed:f7:98:19:c5:a8:b1:e6:6e:68:d7:1f:50:
a6:75:24:26:e4:6b:92:4b:12:f4:fc:fd:5f:d2:ce:94:16:c2:
b7:a3:fb:b5:72:6b:74:ca:f0:90:a6:c9:ab:b9:a2:9f:40:44:
e5:77:b6:71:db:54:49:51:55:ab:0c:cd:65:e2:d6:73:ef:d6:
82:81:b8:51:2d:a3:be:2d:07:e7:86:71:6f:6a:e7:fd:8d:e6:
39:de:28:c3:16:7b:44:2c:3d:3d:69:62:2e:7a:83:2d:61:3e:
46:88:7a:1c:8e:bd:72:53:c2:45:86:63:d5:b6:80:74:8e:4c:
44:fe:47:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHLIHngAqoHW1yT0VpRF+DqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2U1Yzc1ZjY0OGFjNjkyYjE0YmMyMjJlMmMxODBjODYz
YjQ1ZTIwHhcNMjYxMTExMTUwMTA1WhcNMjYxMTEyMTUwMTA1WjAzMTEwLwYDVQQD
EyhiZGRhZGZkMmM3M2JlM2U0ZjcxMWRkYzkxZmQ4OTI2YmI4MDAxNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq8GHgGh+YCXDJuVLLnQ5xi8UU8D
xSmWxf+2xNNFLAfupfvX3EC6yhn5LQTOy0uLbMLTxgX9wBBPkfCxkQGDPK+F5B39
Tz0V1vA4Qwdbgm1F7saKKHWkiGHCs016mhpb1RFdOwbiDtvdrOTsFKa2GVcFJG/P
tGUDFCJsVrK6OI03VLuCRQAndGOSrAqEWAhAFOnkbeLJIfouLKk355yWymRbmTFx
MmFua2zChBsARnbKbLI4Osns46PbiGW82rt/tnqNnNi2te1MgZTthdrzzZza3gIK
M/Iw0tfBTqGzEyvlb3sinHcrcm2ppXS+UICtnIzMgK7UjDj2GAxDJNl3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3a39LHO+Pk9xHdyR/Ykmu4ABSYMB8GA1UdIwQY
MBaAFO9+XHX2SKxpKxS8Ii4sGAyGO0XiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYt
ZTZiMjBiMDlmODY2LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9hMTQyYTktYTAwYS00MjM1LWI3MWYtZTZiMjBiMDlmODY2
LzEvNzM1Y2RmWklyR2tyRkx3aUxpd1lESVk3UmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZM/cK1R
laKzwcL0wT44RBxBVM9FsfMi6LN1KG4X1h2toW3hwspEwY3Wp+7mj5jk3qjoIekI
ep9Or4DzdZ/NgGXpeHlqqMuVX+dqlA9z8AoIsaRTRsAykGV/zpfUNCgBUP1KEBR6
J4e63GzZXarFmyuXW6jbIsfmSMkKrhQ+exVV8DLt95gZxaix5m5o1x9QpnUkJuRr
kksS9Pz9X9LOlBbCt6P7tXJrdMrwkKbJq7min0BE5Xe2cdtUSVFVqwzNZeLWc+/W
goG4US2jvi0H54Zxb2rn/Y3mOd4owxZ7RCw9PWliLnqDLWE+Roh6HI69clPCRYZj
1baAdI5MRP5HfA==
-----END CERTIFICATE-----
Generated at Thu Nov 12 01:01:07 2026 by rpki-client