
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
File: RI63RgCeGCwI7YT4F30ACKZIWD0.mft (raw, json)
Hash identifier: 8TtNSSo3vlbYdKAS6GGTvVWz+QS5ndr5EGis2dlgqXA=
Subject key identifier: 2F:6E:C8:16:FC:BC:ED:88:44:98:CE:55:89:30:78:31:A9:37:EA:5E
Authority key identifier: 44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
Certificate issuer: /CN=448eb746009e182c08ed84f8177d0008a648583d
Certificate serial: 01A0D5A68DABB8666AE8E9AC16C910F17A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
Manifest number: 021E
Signing time: Thu 24 Sep 2026 23:00:57 +0000
Manifest this update: Thu 24 Sep 2026 23:00:57 +0000
Manifest next update: Fri 25 Sep 2026 23:00:57 +0000
Files and hashes: 1: QVq18C8a73aIQH-AcKRLMzpO3YQ.asa (hash: 2HTUzLpfDHOgyVFMt6dJ4aJ9WtaWtmAe0f3l6ljlAeU=)
2: RI63RgCeGCwI7YT4F30ACKZIWD0.crl (hash: 5j2HbbLIINMVw7/i+B4r5FJXj+GB3I5gDg9NiOFmpcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:8d:ab:b8:66:6a:e8:e9:ac:16:c9:10:f1:7a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=448eb746009e182c08ed84f8177d0008a648583d
Validity
Not Before: Sep 24 23:00:57 2026 GMT
Not After : Sep 25 23:00:57 2026 GMT
Subject: CN=2f6ec816fcbced884498ce5589307831a937ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:1c:2b:63:17:a3:28:36:4e:aa:a5:1e:42:
94:de:67:2f:62:cc:b9:2c:04:be:f3:6b:8c:cc:7c:
8c:9c:44:17:8c:e3:fa:de:8c:18:9b:ec:01:7e:a5:
19:3b:90:05:38:45:33:73:13:fc:0e:97:68:8c:de:
8f:78:86:4a:3e:b1:ce:45:64:41:55:ca:f6:01:0d:
2a:e2:9e:1e:17:a7:64:e0:2f:9a:75:fc:8c:a6:1e:
01:f0:f7:15:c6:aa:09:ac:fd:86:f1:7f:f9:2c:00:
ca:85:f7:a4:7a:d1:57:a4:c8:f4:ae:ca:e6:6d:ef:
67:b4:ad:72:fc:29:c6:42:bf:f4:78:7c:7f:07:35:
73:a0:12:76:4e:47:da:00:70:41:54:a1:17:e4:65:
19:1d:3f:b5:d2:0a:b0:e1:64:89:c2:69:00:5d:30:
8e:4b:dc:db:ae:18:79:47:47:17:c3:3b:87:97:50:
9e:f9:92:39:c7:91:68:bd:16:70:a8:4e:62:ee:bf:
b7:81:1e:3a:3e:68:89:e7:e1:50:f2:5e:72:76:44:
a7:2c:ae:b5:ab:93:a2:99:75:f8:6f:89:ec:81:7b:
55:ef:cf:48:83:e4:1b:6e:ea:e9:bc:d7:18:df:ae:
6a:63:29:42:00:39:c0:78:4c:1e:ba:b9:5c:d9:62:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6E:C8:16:FC:BC:ED:88:44:98:CE:55:89:30:78:31:A9:37:EA:5E
X509v3 Authority Key Identifier:
keyid:44:8E:B7:46:00:9E:18:2C:08:ED:84:F8:17:7D:00:08:A6:48:58:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RI63RgCeGCwI7YT4F30ACKZIWD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b9766-5d85-47d7-97aa-6dd846b7451a/1/RI63RgCeGCwI7YT4F30ACKZIWD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:85:10:2c:25:87:dc:06:ca:86:4d:2d:c1:6a:ca:22:84:9c:
44:63:03:1c:cc:b7:da:08:ad:68:fb:13:ed:eb:0e:5c:10:dc:
12:40:d0:30:a4:f8:0a:de:3f:59:07:71:d3:8e:77:d9:f4:f2:
aa:1a:cd:f4:f8:64:e8:56:44:f2:45:44:0b:49:e5:3f:5e:97:
ea:df:d6:06:8c:ef:f9:2f:9b:66:f5:55:1a:d1:48:98:af:54:
b2:74:31:e0:f4:6a:9c:3b:50:b3:8a:3b:61:82:31:22:c5:21:
6c:e4:46:52:01:fe:c5:c7:4d:ad:38:e8:81:30:61:5c:ca:b0:
5b:6b:bb:fd:be:1e:23:a9:34:c9:4c:18:21:32:85:f8:4d:7f:
54:68:4e:ec:d3:2d:c9:d6:0d:12:57:00:a4:d6:ad:52:dc:c4:
a4:6e:68:02:32:d9:ec:f8:61:b7:f6:89:75:82:ff:98:55:e7:
9c:de:6b:76:c0:ce:3d:be:a4:49:93:59:0a:82:50:86:13:21:
dc:95:3b:ab:63:e0:98:f9:ec:34:6c:67:55:6a:a0:79:74:22:
25:10:55:86:ae:04:3b:1a:a1:7f:8d:55:4b:ea:1c:15:3e:76:
49:16:1a:6a:06:00:21:57:e6:5f:5c:07:7a:7a:00:63:75:55:
88:f5:19:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpo2ruGZq6OmsFskQ8XpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0OGViNzQ2MDA5ZTE4MmMwOGVkODRmODE3N2QwMDA4YTY0
ODU4M2QwHhcNMjYwOTI0MjMwMDU3WhcNMjYwOTI1MjMwMDU3WjAzMTEwLwYDVQQD
EygyZjZlYzgxNmZjYmNlZDg4NDQ5OGNlNTU4OTMwNzgzMWE5MzdlYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMUcK2MXoyg2TqqlHkKU3mcvYsy5
LAS+82uMzHyMnEQXjOP63owYm+wBfqUZO5AFOEUzcxP8DpdojN6PeIZKPrHORWRB
Vcr2AQ0q4p4eF6dk4C+adfyMph4B8PcVxqoJrP2G8X/5LADKhfeketFXpMj0rsrm
be9ntK1y/CnGQr/0eHx/BzVzoBJ2TkfaAHBBVKEX5GUZHT+10gqw4WSJwmkAXTCO
S9zbrhh5R0cXwzuHl1Ce+ZI5x5FovRZwqE5i7r+3gR46PmiJ5+FQ8l5ydkSnLK61
q5OimXX4b4nsgXtV789Ig+QbburpvNcY365qYylCADnAeEweurlc2WLtYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9uyBb8vO2IRJjOVYkweDGpN+peMB8GA1UdIwQY
MBaAFESOt0YAnhgsCO2E+Bd9AAimSFg9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83Yjk3NjYtNWQ4NS00N2Q3LTk3YWEt
NmRkODQ2Yjc0NTFhLzEvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83Yjk3NjYtNWQ4NS00N2Q3LTk3YWEtNmRkODQ2Yjc0NTFh
LzEvUkk2M1JnQ2VHQ3dJN1lUNEYzMEFDS1pJV0QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4UQLCWH
3AbKhk0twWrKIoScRGMDHMy32gitaPsT7esOXBDcEkDQMKT4Ct4/WQdx04532fTy
qhrN9Phk6FZE8kVEC0nlP16X6t/WBozv+S+bZvVVGtFImK9UsnQx4PRqnDtQs4o7
YYIxIsUhbORGUgH+xcdNrTjogTBhXMqwW2u7/b4eI6k0yUwYITKF+E1/VGhO7NMt
ydYNElcApNatUtzEpG5oAjLZ7Phht/aJdYL/mFXnnN5rdsDOPb6kSZNZCoJQhhMh
3JU7q2PgmPnsNGxnVWqgeXQiJRBVhq4EOxqhf41VS+ocFT52SRYaagYAIVfmX1wH
enoAY3VViPUZ9g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:12:52 2026 by rpki-client