Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
File: pat5hX5owCBczi8RpTh6avofiJU.mft (raw, json)
Hash identifier: Bm0ivMYwW2Jz2HAXZm7GHJd3UPS9We6JJNY8fQ10HeQ=
Subject key identifier: 05:6B:1C:10:DB:A8:2E:C4:8D:3D:52:F4:D1:39:89:37:E9:73:EA:3F
Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Certificate serial: 01A0D5A6EDF625055DF2FBA6FD4043C9F39E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 23:01:21 +0000
Manifest this update: Thu 24 Sep 2026 23:01:21 +0000
Manifest next update: Fri 25 Sep 2026 23:01:21 +0000
Files and hashes: 1: S2ft3Hju7eljRd19SiIzVso1Px0.roa (hash: 1n+Z/NtsvIHrdvPzT0sHZqEc6avxWfJC7XJpS/clIcs=)
2: iTS27Wceu4G1ENitmEp2HFJ6ueo.roa (hash: +lhDbLjTqzt99j8T39MOW36oWk4LOFaRY5Ody7PJMbo=)
3: pat5hX5owCBczi8RpTh6avofiJU.crl (hash: wUTPn+7WyAmF/m95DKWET92Mt38cnh7uE02RO2JTVwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:ed:f6:25:05:5d:f2:fb:a6:fd:40:43:c9:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895
Validity
Not Before: Sep 24 23:01:21 2026 GMT
Not After : Sep 25 23:01:21 2026 GMT
Subject: CN=056b1c10dba82ec48d3d52f4d1398937e973ea3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:7c:f6:19:9f:40:7d:58:0e:aa:ed:bf:0e:
95:cf:5d:91:df:63:83:24:80:ab:1a:ce:7b:36:7f:
26:7b:fb:0e:eb:69:0d:23:a9:4a:2c:40:05:0c:db:
95:ff:7d:d0:8d:ed:e6:6e:8f:76:b3:ff:b5:91:23:
d0:31:69:d7:ac:62:f6:07:d3:ad:0f:a0:c7:fd:3d:
aa:40:90:49:47:a4:72:35:3c:f8:41:ce:b5:96:34:
6d:12:6c:d4:4e:ea:83:7c:60:1a:bf:fa:73:77:e9:
5a:67:09:d8:ff:f2:32:f8:53:f2:9c:06:2d:d9:2e:
d6:8f:7b:ad:a6:b7:3e:41:e0:6f:21:b9:31:f2:04:
17:56:7c:44:0d:77:3a:f6:92:fe:38:17:c3:dc:df:
d9:12:99:b5:9e:36:06:35:8c:f9:07:96:53:14:bd:
9a:60:c5:94:06:b0:4c:15:fd:a0:6d:01:a4:95:72:
eb:c6:9e:1d:48:9b:36:4e:21:0b:37:3d:8c:26:e7:
08:cb:d0:08:15:b1:25:16:1b:c0:bc:3a:3e:1c:25:
1d:3e:b6:28:14:d3:9d:9a:95:57:b6:b9:b7:9c:70:
99:99:48:f1:20:75:6c:ac:0a:f2:eb:26:0c:a0:9c:
02:99:6e:48:78:b8:2f:0a:bd:0b:25:fa:1a:9b:00:
36:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6B:1C:10:DB:A8:2E:C4:8D:3D:52:F4:D1:39:89:37:E9:73:EA:3F
X509v3 Authority Key Identifier:
keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2a:90:7d:6d:a6:27:b2:ed:42:8a:02:a2:6f:db:2b:48:f3:
4a:3f:a9:0b:7d:9b:79:b1:c8:29:c1:3f:79:25:76:25:60:3b:
d6:37:ea:3a:88:ec:73:5f:2c:50:17:fc:ae:4a:55:bb:c8:53:
22:37:71:83:62:3b:a5:92:35:c9:9d:bf:a0:c1:2c:31:e3:7b:
a8:55:0a:d3:3a:db:62:8f:8b:84:ad:49:95:d7:17:fa:af:10:
34:84:17:d0:ce:1a:de:9a:1a:13:59:4e:a7:a4:8e:fb:c1:ba:
43:9e:3f:2f:8b:68:ba:c8:24:69:8e:a4:60:f0:8a:aa:f6:6e:
a6:10:27:77:60:18:d5:7c:de:e6:4e:45:70:aa:52:9f:61:e6:
db:28:47:4e:23:d0:2e:ea:97:e2:3d:f9:d3:1d:cd:61:b3:76:
e3:bb:e4:11:3e:97:94:a5:f1:8c:2a:74:c7:89:0f:19:c6:ff:
02:5a:35:e8:28:46:fd:ad:b8:8c:7d:e8:98:e7:69:94:f0:a8:
8c:2c:43:05:92:44:ff:9d:06:9c:5a:a8:ec:c7:ed:6a:fb:ca:
17:a0:ce:b2:3b:97:09:d5:85:f4:6e:cf:12:2a:23:ae:eb:06:
ac:34:f7:18:da:8a:3f:78:07:74:17:e5:6c:52:96:a1:be:92:
e7:95:9a:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpu32JQVd8vum/UBDyfOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx
Zjg4OTUwHhcNMjYwOTI0MjMwMTIxWhcNMjYwOTI1MjMwMTIxWjAzMTEwLwYDVQQD
EygwNTZiMWMxMGRiYTgyZWM0OGQzZDUyZjRkMTM5ODkzN2U5NzNlYTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nx89hmfQH1YDqrtvw6Vz12R32OD
JICrGs57Nn8me/sO62kNI6lKLEAFDNuV/33Qje3mbo92s/+1kSPQMWnXrGL2B9Ot
D6DH/T2qQJBJR6RyNTz4Qc61ljRtEmzUTuqDfGAav/pzd+laZwnY//Iy+FPynAYt
2S7Wj3utprc+QeBvIbkx8gQXVnxEDXc69pL+OBfD3N/ZEpm1njYGNYz5B5ZTFL2a
YMWUBrBMFf2gbQGklXLrxp4dSJs2TiELNz2MJucIy9AIFbElFhvAvDo+HCUdPrYo
FNOdmpVXtrm3nHCZmUjxIHVsrAry6yYMoJwCmW5IeLgvCr0LJfoamwA2nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVrHBDbqC7EjT1S9NE5iTfpc+o/MB8GA1UdIwQY
MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt
MWU1OGFjODc5MjRhLzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh
LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtiqQfW2m
J7LtQooCom/bK0jzSj+pC32bebHIKcE/eSV2JWA71jfqOojsc18sUBf8rkpVu8hT
Ijdxg2I7pZI1yZ2/oMEsMeN7qFUK0zrbYo+LhK1JldcX+q8QNIQX0M4a3poaE1lO
p6SO+8G6Q54/L4tousgkaY6kYPCKqvZuphAnd2AY1Xze5k5FcKpSn2Hm2yhHTiPQ
LuqX4j350x3NYbN247vkET6XlKXxjCp0x4kPGcb/Alo16ChG/a24jH3omOdplPCo
jCxDBZJE/50GnFqo7MftavvKF6DOsjuXCdWF9G7PEiojrusGrDT3GNqKP3gHdBfl
bFKWob6S55WaWg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:25:41 2026 by rpki-client