Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: 2OVHyv7hiieeG553VBwh+AYB3d0MaskYwV4V7eHctdw=
Subject key identifier: 5C:98:BE:67:81:9D:4F:10:A5:FA:49:A9:0F:C1:50:09:97:47:6D:40
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 01A1E027EB598B81032F0C95F9A3FD22465D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 02A8
Signing time: Sun 15 Nov 2026 17:01:14 +0000
Manifest this update: Sun 15 Nov 2026 17:01:14 +0000
Manifest next update: Mon 16 Nov 2026 17:01:14 +0000
Files and hashes: 1: QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (hash: 2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=)
2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: 0UXcn3Z3P+qkgPyV0qyywl57aqjJ1qYBqk2sEJA9cp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:eb:59:8b:81:03:2f:0c:95:f9:a3:fd:22:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Nov 15 17:01:14 2026 GMT
Not After : Nov 16 17:01:14 2026 GMT
Subject: CN=5c98be67819d4f10a5fa49a90fc1500997476d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:0d:29:7f:6e:85:79:a7:23:e2:2b:04:dc:
ae:43:92:2d:36:89:b0:1b:95:b3:c6:f2:6e:4f:68:
14:85:1e:c4:ce:9a:ae:ca:2e:f0:23:07:1d:19:98:
b3:4f:79:8e:5b:57:17:7e:28:77:af:7e:2f:c0:33:
f3:92:e7:b6:90:83:64:35:d9:81:8b:76:5d:3f:ff:
a4:88:0c:31:18:bb:0d:32:44:c4:0a:b4:15:de:47:
3d:23:4a:10:64:1c:8d:80:8f:38:cb:f1:d8:c7:27:
9b:23:31:8c:25:78:76:0b:92:35:5b:62:5e:21:dd:
69:d6:a0:63:b8:86:d5:f6:e9:ab:75:07:74:1f:9d:
1c:b9:72:98:9a:0d:18:0a:28:63:ac:af:5c:af:25:
64:77:a9:f5:3f:9d:80:0d:17:40:f2:35:6b:f0:72:
d5:36:3b:8e:3e:47:6c:ac:ca:d5:e9:ab:77:cc:1e:
b1:81:df:39:58:ea:cb:5c:d5:f7:ba:8f:82:43:44:
ee:dd:d3:be:12:64:40:b9:e3:cb:90:52:83:38:9c:
03:62:db:71:20:a8:d4:7c:dd:b4:b4:ec:d0:54:06:
87:33:6c:1f:ee:5b:f0:b2:ea:57:f2:50:0a:f1:d4:
a1:9d:6f:92:5b:5e:9b:e8:b9:b1:fb:1b:1e:92:04:
f9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:BE:67:81:9D:4F:10:A5:FA:49:A9:0F:C1:50:09:97:47:6D:40
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:d7:58:99:93:8a:81:80:21:96:a3:4f:59:75:4a:fa:a1:
1d:47:1e:03:b4:4d:82:bd:e4:38:1f:74:eb:9f:78:04:cc:06:
83:f1:bd:5c:a6:62:16:d9:86:c9:b7:4e:58:47:10:92:3a:a0:
44:5a:b8:6d:4f:88:12:5e:4c:10:58:39:85:53:62:ed:bf:d7:
9b:6f:2a:ea:8e:65:58:b2:66:f2:af:ca:1c:50:db:fb:36:32:
78:82:49:1b:a1:45:a6:3b:b0:fb:43:ff:4c:a9:fc:87:d0:94:
f0:a8:ff:12:42:62:cf:16:fb:86:c8:80:0a:c0:a2:6c:66:a2:
bb:e8:bd:25:60:e5:e8:ac:b8:ca:a1:0d:dd:5a:ff:d4:c8:e0:
2b:7a:1d:93:20:b8:ff:fc:17:b1:02:dc:5b:bf:5b:92:33:79:
2d:c0:3e:cd:18:31:be:c2:ad:df:25:28:d2:ea:bf:cb:9e:73:
64:b3:ba:03:f3:9f:1c:a8:f0:d6:08:a0:52:73:d2:82:f1:b0:
5f:26:42:10:e5:e9:62:88:2d:17:3f:9e:41:12:08:69:29:19:
b6:b7:f1:13:e1:6d:40:cb:38:7b:03:f5:fe:ee:39:d8:1c:42:
b0:9b:9c:3b:0f:ba:31:fc:26:d7:ee:71:9c:a5:0a:40:c4:26:
b6:09:4b:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgJ+tZi4EDLwyV+aP9IkZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OGViNzQ2MDA5ZTE4MmMwOGVkODRmODE3N2QwMDA4YTY0
ODU4M2QwHhcNMjYxMTE1MTcwMTE0WhcNMjYxMTE2MTcwMTE0WjAzMTEwLwYDVQQD
Eyg1Yzk4YmU2NzgxOWQ0ZjEwYTVmYTQ5YTkwZmMxNTAwOTk3NDc2ZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurMNKX9uhXmnI+IrBNyuQ5ItNomw
G5WzxvJuT2gUhR7Ezpquyi7wIwcdGZizT3mOW1cXfih3r34vwDPzkue2kINkNdmB
i3ZdP/+kiAwxGLsNMkTECrQV3kc9I0oQZByNgI84y/HYxyebIzGMJXh2C5I1W2Je
Id1p1qBjuIbV9umrdQd0H50cuXKYmg0YCihjrK9cryVkd6n1P52ADRdA8jVr8HLV
NjuOPkdsrMrV6at3zB6xgd85WOrLXNX3uo+CQ0Tu3dO+EmRAuePLkFKDOJwDYttx
IKjUfN20tOzQVAaHM2wf7lvwsupX8lAK8dShnW+SW16b6Lmx+xsekgT5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyYvmeBnU8QpfpJqQ/BUAmXR21AMB8GA1UdIwQY
MBaAFESOt0YAnhgsCO2E+Bd9AAimSFg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83Yjk3NjYtNWQ4NS00N2Q3LTk3YWEt
NmRkODQ2Yjc0NTFhLzEvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83Yjk3NjYtNWQ4NS00N2Q3LTk3YWEtNmRkODQ2Yjc0NTFh
LzEvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvrXWJmT
ioGAIZajT1l1SvqhHUceA7RNgr3kOB906594BMwGg/G9XKZiFtmGybdOWEcQkjqg
RFq4bU+IEl5MEFg5hVNi7b/Xm28q6o5lWLJm8q/KHFDb+zYyeIJJG6FFpjuw+0P/
TKn8h9CU8Kj/EkJizxb7hsiACsCibGaiu+i9JWDl6Ky4yqEN3Vr/1MjgK3odkyC4
//wXsQLcW79bkjN5LcA+zRgxvsKt3yUo0uq/y55zZLO6A/OfHKjw1gigUnPSgvGw
XyZCEOXpYogtFz+eQRIIaSkZtrfxE+FtQMs4ewP1/u452BxCsJucOw+6Mfwm1+5x
nKUKQMQmtglL9w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:22:55 2026 by rpki-client