Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
File: 1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft (raw, json)
Hash identifier: n95EDuTpNwSoJcVeJRJzCULEe1c1josIu2WP2fr5p24=
Subject key identifier: 66:AC:F0:45:87:A1:A3:93:73:28:AB:40:8E:77:0F:92:97:3F:18:B6
Authority key identifier: D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C
Certificate issuer: /CN=d536c56e9438566a67a51a55a7f64d1ec03e188c
Certificate serial: 01A1DF15A23B7D4A41F105AE17EEA02C4DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
Manifest number: C2
Signing time: Sun 15 Nov 2026 12:01:39 +0000
Manifest this update: Sun 15 Nov 2026 12:01:39 +0000
Manifest next update: Mon 16 Nov 2026 12:01:39 +0000
Files and hashes: 1: 1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl (hash: tJf/zUF3PeKE5OukB4Y6Omd4Glm0GglgX4dPquJYsSg=)
2: zk7MjylnCvn-B1kvRqqmUutpFj4.roa (hash: T/X9zuBsRb/KQOzAd2jNr3MosQ+HVKXq0FztU7ekrQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:a2:3b:7d:4a:41:f1:05:ae:17:ee:a0:2c:4d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d536c56e9438566a67a51a55a7f64d1ec03e188c
Validity
Not Before: Nov 15 12:01:39 2026 GMT
Not After : Nov 16 12:01:39 2026 GMT
Subject: CN=66acf04587a1a3937328ab408e770f92973f18b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:0a:ea:f9:ba:bd:1a:a8:36:ad:cd:d8:7a:
38:66:b3:bd:1a:dd:37:7f:37:01:ba:72:5c:e9:62:
bf:01:73:69:ee:84:97:1d:a1:5a:24:27:e1:dd:d1:
75:ec:d0:41:31:35:9c:d4:c2:7f:84:a3:e4:18:19:
9d:64:62:04:dd:85:96:84:7c:bf:ce:85:cc:49:c3:
5f:b1:de:a0:93:3e:69:d8:dd:c4:7f:7e:a4:63:47:
c7:79:32:9e:7a:90:d0:2b:26:35:4e:bc:0b:7e:4b:
6a:fa:a6:58:21:11:4c:53:f4:3f:95:28:62:ee:c5:
fc:53:e9:d6:6c:cc:53:b7:9c:c6:f7:73:20:2c:cf:
97:e2:1c:e2:c9:f2:c1:36:ce:fc:78:38:7d:5e:db:
ed:d1:d1:a2:3c:0a:96:c7:95:97:09:06:2a:07:01:
0d:9c:17:84:a1:ad:c5:0a:d8:3e:dd:02:e3:b4:aa:
39:2d:60:3f:0d:29:b1:60:85:d7:b2:6c:2a:52:20:
a5:da:3d:57:39:c6:32:62:ed:32:cf:b7:bd:d7:4c:
36:02:0c:77:8e:c9:ef:fb:f6:db:f7:89:c8:f1:88:
77:85:1d:15:e1:6b:84:70:f4:6a:96:d9:54:10:42:
00:d0:e0:25:bf:7e:d9:2e:d8:36:b9:94:23:29:6d:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:F0:45:87:A1:A3:93:73:28:AB:40:8E:77:0F:92:97:3F:18:B6
X509v3 Authority Key Identifier:
keyid:D5:36:C5:6E:94:38:56:6A:67:A5:1A:55:A7:F6:4D:1E:C0:3E:18:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/69daa8-bd55-4629-b5d6-0d784ac7c0b5/1/1TbFbpQ4VmpnpRpVp_ZNHsA-GIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:16:71:4c:fb:36:06:16:e4:58:75:1a:fa:70:e7:e4:cc:c8:
96:92:a7:ab:41:6a:4f:c9:3d:a2:22:bf:48:7a:8d:83:96:c4:
27:80:e4:39:4b:20:c3:7a:da:69:fc:31:ef:81:23:fd:ef:9e:
fd:fd:c5:9c:e8:e0:ab:42:a8:0e:b3:29:de:54:28:19:4f:4b:
d3:e2:4f:54:8e:92:c2:0b:2f:f7:a9:27:6e:f6:73:0c:03:d1:
7e:75:9f:0d:12:c9:c5:8b:a9:70:af:9e:d0:e8:b9:c8:9b:ce:
ca:90:dc:68:4c:e5:a9:0e:0a:c0:ae:e2:f8:47:88:7f:eb:32:
c2:05:6b:ce:49:7b:61:9d:ba:9f:90:94:5b:2e:e7:fc:3b:14:
f8:31:b0:36:34:f7:85:3d:20:e7:a7:37:67:02:39:17:10:f0:
5b:3a:53:6a:70:54:b3:92:f2:19:71:08:29:ee:31:62:e3:c5:
e2:3e:22:f8:b6:84:22:b3:4a:77:13:58:aa:f1:64:20:b5:fc:
a5:fc:b0:eb:66:3b:bb:eb:da:c8:8d:a3:72:83:b9:86:0c:6d:
18:bd:ec:b9:6e:eb:4b:03:cd:c2:95:cc:2a:06:1a:7a:98:c8:
5c:ea:a8:e7:48:96:e1:9f:ee:42:75:99:4e:69:ff:bf:d3:ba:
98:6b:c5:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfFaI7fUpB8QWuF+6gLE3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzZjNTZlOTQzODU2NmE2N2E1MWE1NWE3ZjY0ZDFlYzAz
ZTE4OGMwHhcNMjYxMTE1MTIwMTM5WhcNMjYxMTE2MTIwMTM5WjAzMTEwLwYDVQQD
Eyg2NmFjZjA0NTg3YTFhMzkzNzMyOGFiNDA4ZTc3MGY5Mjk3M2YxOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppUK6vm6vRqoNq3N2Ho4ZrO9Gt03
fzcBunJc6WK/AXNp7oSXHaFaJCfh3dF17NBBMTWc1MJ/hKPkGBmdZGIE3YWWhHy/
zoXMScNfsd6gkz5p2N3Ef36kY0fHeTKeepDQKyY1TrwLfktq+qZYIRFMU/Q/lShi
7sX8U+nWbMxTt5zG93MgLM+X4hziyfLBNs78eDh9Xtvt0dGiPAqWx5WXCQYqBwEN
nBeEoa3FCtg+3QLjtKo5LWA/DSmxYIXXsmwqUiCl2j1XOcYyYu0yz7e910w2Agx3
jsnv+/bb94nI8Yh3hR0V4WuEcPRqltlUEEIA0OAlv37ZLtg2uZQjKW3sfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGas8EWHoaOTcyirQI53D5KXPxi2MB8GA1UdIwQY
MBaAFNU2xW6UOFZqZ6UaVaf2TR7APhiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRiRmJwUTRWbXBucFJwVnBfWk5Ic0EtR0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82OWRhYTgtYmQ1NS00NjI5LWI1ZDYt
MGQ3ODRhYzdjMGI1LzEvMVRiRmJwUTRWbXBucFJwVnBfWk5Ic0EtR0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82OWRhYTgtYmQ1NS00NjI5LWI1ZDYtMGQ3ODRhYzdjMGI1
LzEvMVRiRmJwUTRWbXBucFJwVnBfWk5Ic0EtR0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApRZxTPs2
BhbkWHUa+nDn5MzIlpKnq0FqT8k9oiK/SHqNg5bEJ4DkOUsgw3raafwx74Ej/e+e
/f3FnOjgq0KoDrMp3lQoGU9L0+JPVI6Swgsv96knbvZzDAPRfnWfDRLJxYupcK+e
0Oi5yJvOypDcaEzlqQ4KwK7i+EeIf+sywgVrzkl7YZ26n5CUWy7n/DsU+DGwNjT3
hT0g56c3ZwI5FxDwWzpTanBUs5LyGXEIKe4xYuPF4j4i+LaEIrNKdxNYqvFkILX8
pfyw62Y7u+vayI2jcoO5hgxtGL3suW7rSwPNwpXMKgYaepjIXOqo50iW4Z/uQnWZ
Tmn/v9O6mGvFGQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:49 2026 by rpki-client