Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
File: cr2D9Sdb0J6NM7QpiB6y-WttneE.mft (raw, json)
Hash identifier: K56nF5DYa/4WwSWMgH5wr4aiFAtQ0j2I3a7xAiXk8kQ=
Subject key identifier: A5:D4:3D:5D:88:EB:A3:0D:95:BA:AB:E1:CF:9A:6C:B2:36:E6:A3:CF
Authority key identifier: 72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
Certificate issuer: /CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Certificate serial: 01A0D68274C7B888949CDAF60196CB57CA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
Manifest number: 03A0
Signing time: Fri 25 Sep 2026 03:01:08 +0000
Manifest this update: Fri 25 Sep 2026 03:01:08 +0000
Manifest next update: Sat 26 Sep 2026 03:01:08 +0000
Files and hashes: 1: ZzpicKaWHBurh0e4X0ZDIWNkcE4.roa (hash: 6kr876ns89mpp5ShZ/UXz/K/xiX9GT4sofpkzvGfKa8=)
2: cr2D9Sdb0J6NM7QpiB6y-WttneE.crl (hash: 9B9ic5eka/La5np/s6t9IrVd34B+iOrkVuQ5LxidaXI=)
3: hhz-m34uLzjhktM1lB36_JlRofM.roa (hash: gPvyGogxiYizJYlqU8yPpF4NVk93PwCVo40E9WfEeBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:74:c7:b8:88:94:9c:da:f6:01:96:cb:57:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bd83f5275bd09e8d33b429881eb2f96b6d9de1
Validity
Not Before: Sep 25 03:01:08 2026 GMT
Not After : Sep 26 03:01:08 2026 GMT
Subject: CN=a5d43d5d88eba30d95baabe1cf9a6cb236e6a3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:9c:3e:81:db:56:47:1b:e9:e7:49:d1:16:
22:dc:6b:85:ab:8c:75:de:97:e1:4a:5b:99:3c:4b:
b9:25:f3:1d:86:fc:04:8f:3a:63:65:38:0b:00:f1:
34:c4:31:07:9b:af:03:fe:3f:3a:0c:1a:f2:3d:eb:
fa:fa:70:eb:3f:44:be:02:c6:b3:3a:1f:ef:37:a5:
c9:64:3d:10:35:60:9a:2b:5d:4a:53:7c:90:0b:83:
00:08:26:f3:ff:a0:9d:2d:b4:89:29:3f:e2:a7:56:
89:e9:b6:c7:38:46:d0:07:79:97:d4:0e:92:2f:85:
bf:c2:09:08:db:4e:75:33:22:59:74:71:9a:5c:74:
37:0d:40:cb:1f:82:c2:54:1b:fe:ec:b3:50:d1:b3:
bd:4c:62:e0:7c:a0:29:61:5b:2c:f3:fa:33:a8:57:
5c:14:6c:93:32:47:74:45:70:4a:ec:86:b2:4e:44:
fe:77:e3:2b:bc:dd:02:eb:8e:ad:0c:28:3b:1d:7c:
9c:27:94:0c:c9:8f:f3:35:5d:d6:d1:9c:f5:b3:32:
be:04:cc:0c:c0:de:76:ae:90:6e:6a:e2:d3:9c:7e:
9d:8f:0e:33:e7:7a:25:59:4d:4f:6d:79:88:cb:70:
b6:7c:58:c3:4e:33:9f:5f:ff:db:62:ab:e7:79:5f:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D4:3D:5D:88:EB:A3:0D:95:BA:AB:E1:CF:9A:6C:B2:36:E6:A3:CF
X509v3 Authority Key Identifier:
keyid:72:BD:83:F5:27:5B:D0:9E:8D:33:B4:29:88:1E:B2:F9:6B:6D:9D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cr2D9Sdb0J6NM7QpiB6y-WttneE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/18c6ba-7b71-4466-bb33-005877da8026/1/cr2D9Sdb0J6NM7QpiB6y-WttneE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:46:a3:a6:fd:69:b8:63:78:1f:4f:37:99:69:cf:7c:2d:
5d:d4:a1:39:13:eb:56:f6:6e:c4:e6:5d:bb:7f:1f:e5:5f:18:
24:e5:de:29:44:6e:14:16:58:4c:41:48:6a:8b:4b:08:61:b6:
6d:73:b3:12:67:da:aa:61:39:53:17:6b:9e:30:70:fc:ef:14:
e4:4c:63:3c:d4:6b:56:b9:55:08:e6:de:f3:72:30:ff:4c:da:
fa:e0:a5:b4:26:c0:35:46:4e:45:41:51:25:06:60:a2:07:b5:
d5:8d:e8:96:bb:98:f0:f5:29:6a:df:8b:ba:d1:c2:ff:8c:d7:
b8:d7:1b:c0:4a:73:c8:43:aa:47:a5:7c:82:e9:69:4d:ba:73:
7b:a4:27:e2:00:23:5e:ef:a6:01:ae:d9:d1:7a:ba:66:3b:24:
b6:e8:5c:63:2e:af:b2:86:86:fd:0e:82:8d:53:22:89:86:8b:
7d:45:a5:1c:34:af:b8:eb:8e:c0:b6:04:b5:a9:b2:5b:ae:c3:
f1:34:01:71:c6:a6:9e:7c:3e:14:a2:de:4c:4c:59:e2:81:91:
0b:5e:64:ca:92:0f:68:7e:a3:9c:4f:4a:09:f4:e3:f9:ac:4d:
09:5d:2a:89:16:8c:b1:d3:e7:45:40:d2:28:8a:65:2e:de:54:
1a:76:9e:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWgnTHuIiUnNr2AZbLV8oPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmQ4M2Y1Mjc1YmQwOWU4ZDMzYjQyOTg4MWViMmY5NmI2
ZDlkZTEwHhcNMjYwOTI1MDMwMTA4WhcNMjYwOTI2MDMwMTA4WjAzMTEwLwYDVQQD
EyhhNWQ0M2Q1ZDg4ZWJhMzBkOTViYWFiZTFjZjlhNmNiMjM2ZTZhM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAGcPoHbVkcb6edJ0RYi3GuFq4x1
3pfhSluZPEu5JfMdhvwEjzpjZTgLAPE0xDEHm68D/j86DBryPev6+nDrP0S+Asaz
Oh/vN6XJZD0QNWCaK11KU3yQC4MACCbz/6CdLbSJKT/ip1aJ6bbHOEbQB3mX1A6S
L4W/wgkI2051MyJZdHGaXHQ3DUDLH4LCVBv+7LNQ0bO9TGLgfKApYVss8/ozqFdc
FGyTMkd0RXBK7IayTkT+d+MrvN0C646tDCg7HXycJ5QMyY/zNV3W0Zz1szK+BMwM
wN52rpBuauLTnH6djw4z53olWU1PbXmIy3C2fFjDTjOfX//bYqvneV8jZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXUPV2I66MNlbqr4c+abLI25qPPMB8GA1UdIwQY
MBaAFHK9g/UnW9CejTO0KYgesvlrbZ3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMt
MDA1ODc3ZGE4MDI2LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8xOGM2YmEtN2I3MS00NDY2LWJiMzMtMDA1ODc3ZGE4MDI2
LzEvY3IyRDlTZGIwSjZOTTdRcGlCNnktV3R0bmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNtGo6b9
abhjeB9PN5lpz3wtXdShORPrVvZuxOZdu38f5V8YJOXeKURuFBZYTEFIaotLCGG2
bXOzEmfaqmE5UxdrnjBw/O8U5ExjPNRrVrlVCObe83Iw/0za+uCltCbANUZORUFR
JQZgoge11Y3olruY8PUpat+LutHC/4zXuNcbwEpzyEOqR6V8gulpTbpze6Qn4gAj
Xu+mAa7Z0Xq6ZjsktuhcYy6vsoaG/Q6CjVMiiYaLfUWlHDSvuOuOwLYEtamyW67D
8TQBccamnnw+FKLeTExZ4oGRC15kypIPaH6jnE9KCfTj+axNCV0qiRaMsdPnRUDS
KIplLt5UGnae8g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:30:57 2026 by rpki-client