Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: e+jpPrcbqe4kb+BMjp+SRBe8rLqc2l1jpkHMCCVO07c=
Subject key identifier: 4F:29:16:53:33:81:6E:A6:B0:71:BB:5D:C3:5F:F8:0C:2C:4A:DA:2F
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 01A11F08713E1DC08845F1481C7E5CFA896E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 17A6
Signing time: Fri 09 Oct 2026 05:00:09 +0000
Manifest this update: Fri 09 Oct 2026 05:00:09 +0000
Manifest next update: Sat 10 Oct 2026 05:00:09 +0000
Files and hashes: 1: 6C3RxLRpZvjkhDqeNyvhxuNtNTA.roa (hash: kl9YGSouHVzVMvRPPAag8+zWXrah44Y/BhsIajbDopE=)
2: 7mW4wOHRW1H71d-sSOc_lK75qpg.roa (hash: 2C20Y1HJD9NUUe3oyFVws916YL4BTi4Ci2cXXpoCfNg=)
3: 8ubn5uk-Nn0Dg6ou9x8bCYPQbqc.roa (hash: 0WUQ+r+hiGXINe9SN2Kz/K2ffPmAOMbSUmJhrABwNlo=)
4: 9IfYzAasqfz7Wz66ExTxBJ2sQ6Q.roa (hash: YJWL8DLQPhj/nDX+QYjr1+pXanbWsVZjAovQ36i7A/U=)
5: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: xt0+1C6fnyQ5XMPk9TKh7uFwtH+/h4lbDj5DHAA/6O4=)
6: m45yjB9heCQgWbdWEVZCVnmp6X4.roa (hash: tpHOEqU2bYIH0qEm+Dci7EwfRuPoT7dkTl0e7TMKNVk=)
7: qi3SqAR4IIR7pmGIGinOQFwfq00.roa (hash: 7JqUABvsjicn+d6phPLtYhYvVDr7+WhkTEpAXtYm16M=)
8: yvpIZfiXJrwugGnY8W0FyE6MSYY.roa (hash: DTFYVK7K9TZPbDz7/73V8tXEHb2zMN5hyl3mObjqscw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 05:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:08:71:3e:1d:c0:88:45:f1:48:1c:7e:5c:fa:89:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Oct 9 05:00:09 2026 GMT
Not After : Oct 10 05:00:09 2026 GMT
Subject: CN=4f29165333816ea6b071bb5dc35ff80c2c4ada2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:9a:ca:fa:8f:7d:83:18:a5:db:7c:80:30:
34:22:45:c2:48:b6:f4:17:15:e3:17:83:1d:a6:51:
dd:1d:13:65:19:a6:12:fc:ea:53:2b:64:ad:c9:3a:
e5:34:0d:53:09:f3:63:71:d2:02:b2:54:4f:61:f4:
e8:49:7b:7b:cf:29:fd:1f:ac:ce:81:74:df:4a:2c:
75:e9:64:1d:7b:03:5c:5a:52:d1:97:f2:d1:ef:1e:
8f:9b:5b:44:51:2a:9b:e6:49:f1:db:2d:5a:68:a0:
dd:12:be:6e:d6:2a:2d:e7:9c:a5:1a:fc:11:68:4b:
ee:06:5b:b8:6b:85:c4:dd:70:64:8c:1e:36:5c:10:
28:5e:54:5a:ac:21:3a:30:54:4c:29:2a:3b:6f:61:
75:3b:3f:c6:6a:be:b7:53:52:bb:4e:59:0c:91:03:
1d:9f:8a:f9:86:ed:41:96:18:17:e0:5b:57:3f:06:
68:f7:02:10:19:ca:ce:06:9f:97:94:c7:c2:a2:8a:
b6:43:bd:e1:08:59:77:e5:3b:a0:0a:4a:38:76:5a:
38:4a:b9:dc:a4:d0:82:a2:e1:54:2e:84:fc:12:2c:
51:eb:69:2e:f7:43:a7:05:ff:95:e1:fe:e5:69:b7:
50:20:d3:90:45:7c:59:cb:64:05:e6:ad:1b:69:be:
32:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:29:16:53:33:81:6E:A6:B0:71:BB:5D:C3:5F:F8:0C:2C:4A:DA:2F
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c1:49:67:72:56:b2:36:fd:0d:63:4a:6b:68:f7:f2:d4:05:
0a:31:91:54:4d:3e:9e:2f:41:6e:fb:1e:60:c6:65:e9:3c:67:
69:9c:0e:97:b4:ae:08:80:67:37:ee:0f:23:40:3d:93:f9:9a:
2a:dc:35:c6:59:3a:73:9f:fc:57:cc:91:fb:16:4d:eb:20:f8:
61:e9:99:33:d7:be:5a:df:5c:ce:2b:48:f0:cf:e0:2a:17:31:
cc:3f:29:18:27:92:ce:fb:3b:60:9c:2d:96:37:80:34:69:9c:
5a:46:f2:97:6e:2a:60:4c:fd:71:38:b0:6b:f2:39:d1:52:d1:
29:a9:40:6b:20:71:1f:11:a9:bd:18:fb:0b:ae:34:94:ba:28:
e1:cc:6e:45:22:a8:e0:c6:4e:a9:e4:53:b9:84:64:52:a7:5e:
5d:46:25:97:1a:35:0b:b6:22:1d:f1:2b:11:2f:0f:d0:25:93:
5c:db:e9:04:7b:82:91:bf:f8:b2:6a:fd:97:c2:0b:9f:f1:4a:
60:a8:cb:ba:3f:bb:b5:18:90:5b:13:11:98:ae:58:6f:ad:94:
28:b0:87:d5:70:84:54:b8:cb:c1:b7:8d:5c:7d:8c:62:d8:31:
74:14:85:fb:4d:7a:1b:76:bb:d7:60:79:21:61:f6:5a:bc:fa:
50:dd:fd:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEfCHE+HcCIRfFIHH5c+oluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjYxMDA5MDUwMDA5WhcNMjYxMDEwMDUwMDA5WjAzMTEwLwYDVQQD
Eyg0ZjI5MTY1MzMzODE2ZWE2YjA3MWJiNWRjMzVmZjgwYzJjNGFkYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MuayvqPfYMYpdt8gDA0IkXCSLb0
FxXjF4MdplHdHRNlGaYS/OpTK2StyTrlNA1TCfNjcdICslRPYfToSXt7zyn9H6zO
gXTfSix16WQdewNcWlLRl/LR7x6Pm1tEUSqb5knx2y1aaKDdEr5u1iot55ylGvwR
aEvuBlu4a4XE3XBkjB42XBAoXlRarCE6MFRMKSo7b2F1Oz/Gar63U1K7TlkMkQMd
n4r5hu1BlhgX4FtXPwZo9wIQGcrOBp+XlMfCooq2Q73hCFl35TugCko4dlo4Srnc
pNCCouFULoT8EixR62ku90OnBf+V4f7labdQINOQRXxZy2QF5q0bab4ybQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8pFlMzgW6msHG7XcNf+AwsStovMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT8FJZ3JW
sjb9DWNKa2j38tQFCjGRVE0+ni9BbvseYMZl6TxnaZwOl7SuCIBnN+4PI0A9k/ma
Ktw1xlk6c5/8V8yR+xZN6yD4YemZM9e+Wt9czitI8M/gKhcxzD8pGCeSzvs7YJwt
ljeANGmcWkbyl24qYEz9cTiwa/I50VLRKalAayBxHxGpvRj7C640lLoo4cxuRSKo
4MZOqeRTuYRkUqdeXUYllxo1C7YiHfErES8P0CWTXNvpBHuCkb/4smr9l8ILn/FK
YKjLuj+7tRiQWxMRmK5Yb62UKLCH1XCEVLjLwbeNXH2MYtgxdBSF+016G3a712B5
IWH2Wrz6UN39rw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:31:57 2026 by rpki-client