Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: 7a5AqM9cjaNdQZWRq6VAmA0z3Mm7rB7mPJTzNfU99t8=
Subject key identifier: 4A:49:06:58:23:7B:04:17:02:11:F5:96:C3:F6:BB:1D:1C:62:23:DD
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 01A1464DC3FB69F31E4A522FD0A6063946F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 0A5F
Signing time: Fri 16 Oct 2026 20:01:03 +0000
Manifest this update: Fri 16 Oct 2026 20:01:03 +0000
Manifest next update: Sat 17 Oct 2026 20:01:03 +0000
Files and hashes: 1: F2cgTKks1adnvxWZM--sjPx3GsM.roa (hash: pgdHaxyTdaDFVqDxAY7Zdo6g8AKayk5hSRzwZ5TTgMo=)
2: VDZj_D0mJdmuFpACF6pwxY8L5ps.roa (hash: SB8GonjijdreEO57BgHYG/lJRJLCZOlEr7Hgg460VeY=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: Cln7w1OJNTOXh25G+C70TI0k0uW9I1BKer5h/7q4C0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:c3:fb:69:f3:1e:4a:52:2f:d0:a6:06:39:46:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Oct 16 20:01:03 2026 GMT
Not After : Oct 17 20:01:03 2026 GMT
Subject: CN=4a490658237b04170211f596c3f6bb1d1c6223dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:21:73:a2:2f:c3:05:29:d4:9b:2a:95:56:0f:
51:e4:54:53:e3:1f:66:c3:95:8c:23:21:42:98:b0:
66:97:dc:0d:25:e1:ff:6f:07:88:b8:ed:b2:f8:b9:
2f:6e:ce:f9:81:bb:63:3d:7a:fa:96:e5:46:13:56:
09:19:28:63:a6:48:13:e8:3f:d7:10:c0:ac:43:4c:
68:29:49:21:67:37:3a:66:d3:20:60:c5:7a:12:65:
e0:67:a4:50:74:d3:cb:3e:93:da:80:e3:24:84:77:
82:86:14:76:ab:0e:ce:ec:c7:cf:bc:52:b2:8e:3b:
b6:1d:7d:8c:66:6b:a0:ad:98:8e:a8:23:d1:6a:d4:
76:9f:34:b7:af:e7:f0:5c:f2:d0:d2:69:14:c3:70:
89:bd:dc:62:e1:76:09:60:e3:23:2e:be:a8:0c:9a:
39:31:ef:69:9f:ca:4a:48:0a:09:84:11:5f:ae:cb:
1a:fe:78:1b:ab:95:71:44:34:e4:68:51:f9:46:32:
62:98:54:25:61:59:5f:13:d9:b0:f1:f5:25:a4:24:
ac:52:e4:f5:9c:c8:06:7f:f3:61:0c:96:e3:1c:71:
cb:87:a7:b2:9f:f5:c5:fc:30:0b:0f:2b:de:fb:0f:
e0:9b:5b:be:bb:b2:6a:94:01:77:37:cb:10:dc:ed:
4f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:06:58:23:7B:04:17:02:11:F5:96:C3:F6:BB:1D:1C:62:23:DD
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:8f:0f:ca:69:e6:7e:0f:18:3a:65:0f:5c:dc:77:2a:ed:
28:30:f1:bf:b6:60:8e:da:5a:87:80:f5:3c:b5:66:e0:44:9f:
7c:77:1c:5d:36:46:ee:9f:7b:30:6e:1d:23:7f:61:65:3b:d7:
fc:9c:72:73:f6:64:0f:41:45:74:55:78:31:e5:5d:76:a2:23:
76:35:8b:95:7c:94:9a:de:d6:98:95:41:d7:2e:b6:be:55:12:
1b:4c:ed:56:97:11:39:42:06:cb:c1:8a:8b:dc:00:12:a5:c1:
74:83:d5:6c:49:71:04:97:3f:f8:49:b9:4e:89:8a:a3:4e:60:
9a:1e:32:84:09:26:f3:56:74:d8:20:26:cd:50:b5:e6:f6:4e:
81:35:d7:3b:67:a2:1c:57:8e:8e:4e:a1:85:61:4b:1c:5b:79:
2f:48:3e:af:72:dc:77:5b:4d:39:c7:f4:d1:a2:ef:2b:52:68:
3d:62:18:8c:ea:09:2e:86:e6:43:1e:4d:4e:7c:97:2f:be:dc:
8e:59:e8:b1:e8:6e:89:0c:ab:76:2e:a3:c2:0c:d4:79:b0:a2:
f7:5f:8f:f9:f1:e1:75:ed:57:e7:d4:c1:8e:aa:8b:83:8a:00:
54:60:4e:47:61:f5:45:ff:88:6c:da:95:2a:fc:4e:48:2d:e2:
1a:88:05:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGTcP7afMeSlIv0KYGOUbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZTU5ZGIxYmRhZjIxM2NhZDIxMDI1Zjc3OGZhYzk2MThm
ZDRlOTEwHhcNMjYxMDE2MjAwMTAzWhcNMjYxMDE3MjAwMTAzWjAzMTEwLwYDVQQD
Eyg0YTQ5MDY1ODIzN2IwNDE3MDIxMWY1OTZjM2Y2YmIxZDFjNjIyM2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CFzoi/DBSnUmyqVVg9R5FRT4x9m
w5WMIyFCmLBml9wNJeH/bweIuO2y+Lkvbs75gbtjPXr6luVGE1YJGShjpkgT6D/X
EMCsQ0xoKUkhZzc6ZtMgYMV6EmXgZ6RQdNPLPpPagOMkhHeChhR2qw7O7MfPvFKy
jju2HX2MZmugrZiOqCPRatR2nzS3r+fwXPLQ0mkUw3CJvdxi4XYJYOMjLr6oDJo5
Me9pn8pKSAoJhBFfrssa/ngbq5VxRDTkaFH5RjJimFQlYVlfE9mw8fUlpCSsUuT1
nMgGf/NhDJbjHHHLh6eyn/XF/DALDyve+w/gm1u+u7JqlAF3N8sQ3O1PWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpJBlgjewQXAhH1lsP2ux0cYiPdMB8GA1UdIwQY
MBaAFLHlnbG9ryE8rSECX3ePrJYY/U6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82NzI1ZjgtOWFiOS00MTAyLTgzZDMt
YmM0OTI5MWI0YWFhLzEvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82NzI1ZjgtOWFiOS00MTAyLTgzZDMtYmM0OTI5MWI0YWFh
LzEvc2VXZHNiMnZJVHl0SVFKZmQ0LXNsaGo5VHBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN6PD8pp
5n4PGDplD1zcdyrtKDDxv7Zgjtpah4D1PLVm4ESffHccXTZG7p97MG4dI39hZTvX
/Jxyc/ZkD0FFdFV4MeVddqIjdjWLlXyUmt7WmJVB1y62vlUSG0ztVpcROUIGy8GK
i9wAEqXBdIPVbElxBJc/+Em5TomKo05gmh4yhAkm81Z02CAmzVC15vZOgTXXO2ei
HFeOjk6hhWFLHFt5L0g+r3Lcd1tNOcf00aLvK1JoPWIYjOoJLobmQx5NTnyXL77c
jlnosehuiQyrdi6jwgzUebCi91+P+fHhde1X59TBjqqLg4oAVGBOR2H1Rf+IbNqV
KvxOSC3iGogFcQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 03:46:21 2026 by rpki-client