Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
File: RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft (raw, json)
Hash identifier: YbQAXpWZvVoMER1StwEcW/qUfTo+eEEoGQLoICrJnXs=
Subject key identifier: 61:53:5C:1A:63:57:AF:FC:3D:DB:48:F4:EA:BD:13:71:3D:74:8F:67
Authority key identifier: 45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
Certificate issuer: /CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Certificate serial: 01A1DB388BA4A625D1F1EA6B47C9E20548F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
Manifest number: 1AF5
Signing time: Sat 14 Nov 2026 18:01:18 +0000
Manifest this update: Sat 14 Nov 2026 18:01:18 +0000
Manifest next update: Sun 15 Nov 2026 18:01:18 +0000
Files and hashes: 1: RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl (hash: 7LKaSoryaDl+Fw2pY9++FPUS7D1rWwbp/bFN7YK7Qn0=)
2: _UE15j8dt-0E4MNHI1SJ6VAbDdo.roa (hash: RpMmPkih2MaIwwmI1CZ2YI65k33Pkn9LWYdRz9m4yPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:8b:a4:a6:25:d1:f1:ea:6b:47:c9:e2:05:48:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4510c69bed03465bff8af9d71a6ae9b183b7c24d
Validity
Not Before: Nov 14 18:01:18 2026 GMT
Not After : Nov 15 18:01:18 2026 GMT
Subject: CN=61535c1a6357affc3ddb48f4eabd13713d748f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:64:35:49:8d:eb:77:49:6a:79:62:66:fd:c0:
3f:30:84:00:d7:12:63:c6:d1:ee:15:d5:7d:3d:6d:
f6:c8:ba:b2:9b:95:b1:92:a1:89:60:5f:6d:58:3f:
a5:1e:ea:8c:57:af:fc:0c:16:33:06:86:d8:e3:04:
83:11:a9:d9:2b:a0:96:b7:ac:85:11:c3:5e:e9:b8:
ac:e2:1c:a3:be:a4:ca:d9:fe:3b:97:3a:f2:5f:45:
53:d0:bd:43:9e:52:a8:47:ea:ef:7d:1e:9b:e4:20:
4d:28:93:07:e6:08:43:62:6f:d8:b9:ab:a0:42:02:
2b:89:35:36:0f:ee:bc:d8:a3:ff:6b:d4:b4:8b:f4:
c0:56:5a:42:42:40:69:8f:1f:08:03:6e:43:06:4c:
8b:1d:da:98:61:1d:61:a9:02:39:2d:47:5f:df:4a:
59:67:d6:2b:eb:4f:1f:83:25:e2:0c:55:f2:dd:e3:
fa:70:8d:ef:14:52:aa:cd:d1:8c:3a:2c:4d:61:a4:
76:3a:cc:0a:b2:ab:c6:b1:91:54:13:72:9e:17:fa:
23:99:3f:8a:d2:97:f0:b6:1f:f9:8a:30:81:4f:0a:
91:e3:ea:2c:f8:d2:b2:5d:97:b3:ba:ff:25:a5:89:
57:8d:b1:34:2f:d3:65:53:34:5e:49:f3:6b:9c:b1:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:5C:1A:63:57:AF:FC:3D:DB:48:F4:EA:BD:13:71:3D:74:8F:67
X509v3 Authority Key Identifier:
keyid:45:10:C6:9B:ED:03:46:5B:FF:8A:F9:D7:1A:6A:E9:B1:83:B7:C2:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRDGm-0DRlv_ivnXGmrpsYO3wk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/09c865-ac9c-4913-9cce-e1fd0b1f0efd/1/RRDGm-0DRlv_ivnXGmrpsYO3wk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:92:d0:97:ad:01:ad:8d:32:ca:ec:56:f0:a5:e4:05:11:ee:
4d:15:6e:ef:fb:e6:4a:3d:88:37:0f:20:42:ec:88:69:11:b0:
c4:fc:be:ff:5f:cd:04:1f:85:fa:21:51:05:49:18:fc:da:f8:
89:e7:66:d7:15:9e:e1:70:1c:27:9b:25:e7:07:fc:82:84:f1:
6c:55:8f:05:78:79:16:8d:6d:c5:f2:3f:a0:4e:63:3e:90:6f:
0e:5f:16:12:13:89:8a:77:5d:0f:e4:23:64:f2:2a:ab:15:7c:
45:55:5c:1a:4a:c4:65:cf:78:3f:78:38:eb:c3:3d:29:9a:4b:
4c:76:80:c1:e4:2f:29:c3:5b:6f:03:bd:07:f1:c8:7a:be:e0:
a2:ab:69:e7:3a:3c:d5:ae:09:ae:ba:c0:f5:0d:b0:5a:18:da:
f8:a0:bc:5b:c1:10:ab:37:95:dd:6c:1b:95:3d:7d:df:95:5e:
e6:9e:a4:53:ad:13:87:c2:ec:d7:3f:07:6b:d0:f7:cf:29:64:
76:73:1a:ee:e9:8d:18:a0:08:5b:9d:dd:d4:8b:23:cc:7d:4c:
97:41:69:a4:a6:6a:7b:04:d1:71:a1:36:26:0f:67:fb:47:8a:
2f:c9:eb:e7:f4:aa:ff:5a:08:2b:96:82:d8:e2:dc:13:37:06:
30:9e:32:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbOIukpiXR8eprR8niBUj4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MTBjNjliZWQwMzQ2NWJmZjhhZjlkNzFhNmFlOWIxODNi
N2MyNGQwHhcNMjYxMTE0MTgwMTE4WhcNMjYxMTE1MTgwMTE4WjAzMTEwLwYDVQQD
Eyg2MTUzNWMxYTYzNTdhZmZjM2RkYjQ4ZjRlYWJkMTM3MTNkNzQ4ZjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Q1SY3rd0lqeWJm/cA/MIQA1xJj
xtHuFdV9PW32yLqym5WxkqGJYF9tWD+lHuqMV6/8DBYzBobY4wSDEanZK6CWt6yF
EcNe6bis4hyjvqTK2f47lzryX0VT0L1DnlKoR+rvfR6b5CBNKJMH5ghDYm/Yuaug
QgIriTU2D+682KP/a9S0i/TAVlpCQkBpjx8IA25DBkyLHdqYYR1hqQI5LUdf30pZ
Z9Yr608fgyXiDFXy3eP6cI3vFFKqzdGMOixNYaR2OswKsqvGsZFUE3KeF/ojmT+K
0pfwth/5ijCBTwqR4+os+NKyXZezuv8lpYlXjbE0L9NlUzReSfNrnLFN5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFTXBpjV6/8PdtI9Oq9E3E9dI9nMB8GA1UdIwQY
MBaAFEUQxpvtA0Zb/4r51xpq6bGDt8JNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2Ut
ZTFmZDBiMWYwZWZkLzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8wOWM4NjUtYWM5Yy00OTEzLTljY2UtZTFmZDBiMWYwZWZk
LzEvUlJER20tMERSbHZfaXZuWEdtcnBzWU8zd2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZLQl60B
rY0yyuxW8KXkBRHuTRVu7/vmSj2INw8gQuyIaRGwxPy+/1/NBB+F+iFRBUkY/Nr4
iedm1xWe4XAcJ5sl5wf8goTxbFWPBXh5Fo1txfI/oE5jPpBvDl8WEhOJinddD+Qj
ZPIqqxV8RVVcGkrEZc94P3g468M9KZpLTHaAweQvKcNbbwO9B/HIer7goqtp5zo8
1a4JrrrA9Q2wWhja+KC8W8EQqzeV3WwblT1935Ve5p6kU60Th8Ls1z8Ha9D3zylk
dnMa7umNGKAIW53d1IsjzH1Ml0FppKZqewTRcaE2Jg9n+0eKL8nr5/Sq/1oIK5aC
2OLcEzcGMJ4yqQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:09:41 2026 by rpki-client