Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
File: M-hVC8yfs7FAJgwp1p94mXjcwJo.mft (raw, json)
Hash identifier: 3YApUrQQ4HDMiWlmDft/bkXHAlX6OovHj++RlRl2cHY=
Subject key identifier: C3:52:02:8E:51:C1:A2:A6:79:10:5D:A0:2F:30:54:71:68:16:96:D1
Authority key identifier: 33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
Certificate issuer: /CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Certificate serial: 01A132591C16C9DF7A1F4F6078E3D348FC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 23:01:02 +0000
Manifest this update: Mon 12 Oct 2026 23:01:02 +0000
Manifest next update: Tue 13 Oct 2026 23:01:02 +0000
Files and hashes: 1: 3I4M3z7hk5Jaghl-IJJmyqtHR94.roa (hash: HXLoBLMS+Moi8PgCDzeYzip6BSpqWVV46UR0vIKYGy8=)
2: M-hVC8yfs7FAJgwp1p94mXjcwJo.crl (hash: gjReUrxspF0J9vLFho+sAHjMuhS5jQefgfZLBDyGV9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:59:1c:16:c9:df:7a:1f:4f:60:78:e3:d3:48:fc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33e8550bcc9fb3b140260c29d69f789978dcc09a
Validity
Not Before: Oct 12 23:01:02 2026 GMT
Not After : Oct 13 23:01:02 2026 GMT
Subject: CN=c352028e51c1a2a679105da02f305471681696d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:00:77:4d:76:89:bc:95:eb:72:31:42:40:
53:a6:0a:07:cf:cd:6a:02:0e:0d:6d:97:53:65:22:
d3:ad:bb:27:ec:ec:bf:25:02:54:a7:a0:2a:d1:9c:
42:1d:b4:d6:30:e4:d8:e0:26:36:61:dd:b7:30:9c:
ca:91:a4:d1:ff:10:27:89:68:20:2a:c9:87:c7:dd:
16:95:62:31:49:80:6e:30:16:d2:45:e2:b4:c3:77:
1d:67:b6:80:93:5d:85:2a:d5:01:71:2a:ac:57:ae:
46:f7:c2:b7:af:d1:db:78:e3:25:e4:f3:a7:56:65:
f3:7b:f0:75:a3:cf:22:e5:6b:2d:ea:e0:0d:6b:68:
6f:0e:3f:12:60:c0:f5:27:fe:2c:e4:ee:5a:13:d2:
16:af:89:47:c6:bc:c3:2f:64:fe:76:a8:c9:86:60:
3e:66:44:67:a8:8b:6a:60:ba:b6:92:fd:98:66:92:
d9:cd:01:49:58:01:0d:40:01:ab:89:fd:2b:b5:b1:
db:ac:7e:3c:a0:ec:0f:9c:32:f4:15:4b:c6:d6:d2:
a4:e0:ef:f3:98:25:76:3e:19:4f:dd:94:d2:4d:3c:
b6:f0:82:14:88:ed:9a:9a:3c:05:f2:6b:67:d8:c1:
96:97:23:9b:d7:8f:fe:c3:35:d3:fa:ed:2d:b6:6b:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:02:8E:51:C1:A2:A6:79:10:5D:A0:2F:30:54:71:68:16:96:D1
X509v3 Authority Key Identifier:
keyid:33:E8:55:0B:CC:9F:B3:B1:40:26:0C:29:D6:9F:78:99:78:DC:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-hVC8yfs7FAJgwp1p94mXjcwJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4116b6-f1c9-49ad-8b0f-ad2497f284f5/1/M-hVC8yfs7FAJgwp1p94mXjcwJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a8:59:b0:df:c8:a8:1c:46:c4:b0:5d:37:83:a1:49:81:7c:
6f:c9:93:0a:f3:99:0e:fb:12:43:2c:b5:e0:b0:bf:1e:4f:ad:
9b:52:4b:f7:64:21:94:25:ec:a6:68:f5:b5:70:4f:79:a7:8f:
10:6f:11:9e:2e:f2:ee:39:22:78:0a:77:70:fc:97:6b:03:5e:
6f:6e:0e:f7:e7:ff:aa:b1:d5:5a:ed:a5:14:f8:aa:f1:76:5f:
6f:5e:40:a3:c0:80:8c:f1:22:9e:28:a5:f5:d5:91:a5:54:a0:
20:10:b0:f4:52:83:69:ca:95:9c:cf:5f:87:c8:7b:25:a2:8a:
62:b7:9d:48:aa:9d:a2:bc:60:4b:ba:f0:cb:d8:01:f9:20:2c:
0b:8c:89:95:9a:e6:ac:18:f0:10:e4:88:66:36:42:b4:3d:b1:
79:b7:94:8c:b2:b1:a2:21:2c:c3:1e:79:e4:bc:13:84:ed:54:
40:de:75:17:6e:20:98:28:a3:cb:49:fa:3c:48:a2:e6:62:64:
b6:e0:fd:73:76:99:bd:90:1f:fa:16:32:53:96:2e:d6:c4:c1:
bc:d9:7f:1f:9f:04:95:83:5b:4b:15:d1:52:b6:a9:62:83:03:
0e:03:9c:d5:f8:44:08:a9:05:95:30:11:db:a5:a6:fb:96:2f:
b3:0a:2e:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyWRwWyd96H09geOPTSPw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzZTg1NTBiY2M5ZmIzYjE0MDI2MGMyOWQ2OWY3ODk5Nzhk
Y2MwOWEwHhcNMjYxMDEyMjMwMTAyWhcNMjYxMDEzMjMwMTAyWjAzMTEwLwYDVQQD
EyhjMzUyMDI4ZTUxYzFhMmE2NzkxMDVkYTAyZjMwNTQ3MTY4MTY5NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjwAd012ibyV63IxQkBTpgoHz81q
Ag4NbZdTZSLTrbsn7Oy/JQJUp6Aq0ZxCHbTWMOTY4CY2Yd23MJzKkaTR/xAniWgg
KsmHx90WlWIxSYBuMBbSReK0w3cdZ7aAk12FKtUBcSqsV65G98K3r9HbeOMl5POn
VmXze/B1o88i5Wst6uANa2hvDj8SYMD1J/4s5O5aE9IWr4lHxrzDL2T+dqjJhmA+
ZkRnqItqYLq2kv2YZpLZzQFJWAENQAGrif0rtbHbrH48oOwPnDL0FUvG1tKk4O/z
mCV2PhlP3ZTSTTy28IIUiO2amjwF8mtn2MGWlyOb14/+wzXT+u0ttmsNhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNSAo5RwaKmeRBdoC8wVHFoFpbRMB8GA1UdIwQY
MBaAFDPoVQvMn7OxQCYMKdafeJl43MCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYt
YWQyNDk3ZjI4NGY1LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi80MTE2YjYtZjFjOS00OWFkLThiMGYtYWQyNDk3ZjI4NGY1
LzEvTS1oVkM4eWZzN0ZBSmd3cDFwOTRtWGpjd0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqhZsN/I
qBxGxLBdN4OhSYF8b8mTCvOZDvsSQyy14LC/Hk+tm1JL92QhlCXspmj1tXBPeaeP
EG8Rni7y7jkieAp3cPyXawNeb24O9+f/qrHVWu2lFPiq8XZfb15Ao8CAjPEiniil
9dWRpVSgIBCw9FKDacqVnM9fh8h7JaKKYredSKqdorxgS7rwy9gB+SAsC4yJlZrm
rBjwEOSIZjZCtD2xebeUjLKxoiEswx555LwThO1UQN51F24gmCijy0n6PEii5mJk
tuD9c3aZvZAf+hYyU5Yu1sTBvNl/H58ElYNbSxXRUrapYoMDDgOc1fhECKkFlTAR
26Wm+5YvswouIA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 08:12:23 2026 by rpki-client