Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File: dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier: RFsVMO1ijmbSiW+sWNzJzQ8ZTi0DTRA0+mle9RGGuSI=
Subject key identifier: 08:18:CF:A3:56:0B:4D:9A:29:3B:9C:DB:96:CE:6C:11:56:46:E6:E0
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 01A1DF1502A6B87802D5CA24FAA515280F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number: 1A8B
Signing time: Sun 15 Nov 2026 12:00:58 +0000
Manifest this update: Sun 15 Nov 2026 12:00:58 +0000
Manifest next update: Mon 16 Nov 2026 12:00:58 +0000
Files and hashes: 1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: LuIHIPy7ttE0cxWMyNOjvKM6vCxrWmc8+lrXPL8DyLk=)
3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:02:a6:b8:78:02:d5:ca:24:fa:a5:15:28:0f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Nov 15 12:00:58 2026 GMT
Not After : Nov 16 12:00:58 2026 GMT
Subject: CN=0818cfa3560b4d9a293b9cdb96ce6c115646e6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:29:e9:e1:c4:53:bf:50:8c:e7:ad:1d:94:3d:
dc:46:31:46:a1:fb:12:1c:6f:1d:08:d4:5d:6e:27:
56:7f:db:5f:ae:12:10:76:3d:e4:0a:6e:83:1d:0f:
bb:6f:58:30:bc:96:7f:91:1b:34:d7:97:44:51:ab:
6d:78:13:39:20:fa:f6:b0:96:0b:e5:3c:f6:1c:50:
7a:12:b3:53:44:d3:3a:77:64:cc:42:d7:93:6f:91:
c6:02:c1:dd:34:96:42:a6:54:09:98:0a:ed:03:74:
41:be:f3:8e:6d:93:60:9b:1e:e8:66:fd:7b:43:8a:
66:6f:d1:91:9b:ad:21:df:11:9a:17:58:f7:6d:da:
58:4f:6e:5b:54:76:5d:6e:7e:20:13:15:01:3c:90:
cc:12:09:ef:12:f5:79:f1:5d:d3:0d:00:eb:ae:ce:
52:3a:c6:e4:f6:e9:6b:1f:3e:a6:fd:2f:79:e9:03:
3b:55:3c:95:75:f3:cd:a8:6e:6c:49:9f:0e:a9:ed:
d6:fe:21:4a:6d:68:be:d4:f8:ab:b4:c5:3b:f8:ac:
5a:aa:a1:9c:5d:7e:32:9c:70:4b:3a:34:cf:46:27:
ca:ef:75:58:77:b4:21:2d:48:f4:d4:66:1c:eb:7a:
9f:45:f4:6d:40:02:80:75:a8:4d:40:39:e0:43:ff:
57:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:18:CF:A3:56:0B:4D:9A:29:3B:9C:DB:96:CE:6C:11:56:46:E6:E0
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:93:66:b3:1b:4b:8b:64:76:9f:cd:2d:55:1e:b9:5a:21:3f:
1c:5e:68:17:fa:31:0d:28:30:91:6e:f0:9a:e1:37:d9:f6:48:
48:2e:79:6c:f8:9d:ed:8b:74:19:a3:95:4b:be:95:ba:6a:6a:
88:29:6e:e9:d5:05:20:13:4f:f7:e5:f4:ac:ce:e8:ea:3f:7d:
9f:78:f6:2a:9f:e3:c3:64:5b:10:8e:04:89:d2:ca:ec:53:cd:
61:4c:aa:2e:5e:7f:f3:56:64:c7:4b:86:40:01:f3:dd:b8:32:
41:be:7e:5f:26:73:f0:e5:f0:3d:a9:a5:48:2b:83:84:dc:47:
ae:29:e6:9f:fd:46:3e:4c:b7:80:72:9b:53:5d:d1:0e:81:fd:
4b:45:b1:b8:1d:9b:4d:7d:75:83:37:94:4a:05:fd:ae:80:4f:
c8:80:27:47:8d:2b:7b:3f:90:61:bb:df:80:24:77:5c:b2:85:
19:b3:44:91:33:fc:ed:5c:db:3e:0a:6a:02:ab:5b:9f:c2:09:
13:99:a2:98:99:8c:f5:fd:fe:db:19:5f:07:ea:c8:61:07:dd:
4b:d7:dc:ab:07:07:75:f8:31:19:b8:74:a9:fe:52:4f:cf:15:
41:26:c8:92:70:96:4b:c2:67:20:79:25:24:f5:34:08:47:69:
a4:d4:fb:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfFQKmuHgC1cok+qUVKA9rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YzdmOGU5MWI4MWZlNjQ4NzMwN2M1MjI2ZWIwNDRmOTIz
OTZjZWEwHhcNMjYxMTE1MTIwMDU4WhcNMjYxMTE2MTIwMDU4WjAzMTEwLwYDVQQD
EygwODE4Y2ZhMzU2MGI0ZDlhMjkzYjljZGI5NmNlNmMxMTU2NDZlNmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnynp4cRTv1CM560dlD3cRjFGofsS
HG8dCNRdbidWf9tfrhIQdj3kCm6DHQ+7b1gwvJZ/kRs015dEUatteBM5IPr2sJYL
5Tz2HFB6ErNTRNM6d2TMQteTb5HGAsHdNJZCplQJmArtA3RBvvOObZNgmx7oZv17
Q4pmb9GRm60h3xGaF1j3bdpYT25bVHZdbn4gExUBPJDMEgnvEvV58V3TDQDrrs5S
Osbk9ulrHz6m/S956QM7VTyVdfPNqG5sSZ8Oqe3W/iFKbWi+1PirtMU7+KxaqqGc
XX4ynHBLOjTPRifK73VYd7QhLUj01GYc63qfRfRtQAKAdahNQDngQ/9XJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgYz6NWC02aKTuc25bObBFWRubgMB8GA1UdIwQY
MBaAFHTH+Okbgf5khzB8UibrBE+SOWzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEt
OGI2NGY3YzNhNzZlLzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEtOGI2NGY3YzNhNzZl
LzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZNmsxtL
i2R2n80tVR65WiE/HF5oF/oxDSgwkW7wmuE32fZISC55bPid7Yt0GaOVS76Vumpq
iClu6dUFIBNP9+X0rM7o6j99n3j2Kp/jw2RbEI4EidLK7FPNYUyqLl5/81Zkx0uG
QAHz3bgyQb5+XyZz8OXwPamlSCuDhNxHrinmn/1GPky3gHKbU13RDoH9S0WxuB2b
TX11gzeUSgX9roBPyIAnR40rez+QYbvfgCR3XLKFGbNEkTP87VzbPgpqAqtbn8IJ
E5mimJmM9f3+2xlfB+rIYQfdS9fcqwcHdfgxGbh0qf5ST88VQSbIknCWS8JnIHkl
JPU0CEdppNT7Kg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:45:54 2026 by rpki-client