Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
File: 0q5eM4eU5g1di1I72yto7ErHYs4.mft (raw, json)
Hash identifier: n8T+03V1Zlf5ZamP0+pyaS+7PaDWKIxqg2h2dFo2ZGE=
Subject key identifier: 34:F3:CC:46:D8:68:E9:31:CC:F8:E2:CA:87:87:1F:85:40:B3:1B:ED
Authority key identifier: D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
Certificate issuer: /CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Certificate serial: 01A1758248E571EF0774758A1E159C2E31AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 00:00:34 +0000
Manifest this update: Mon 26 Oct 2026 00:00:34 +0000
Manifest next update: Tue 27 Oct 2026 00:00:34 +0000
Files and hashes: 1: 0jE3hZkv3e72FXBQNOB1Z87I7hE.roa (hash: ufiFlOn3uZQmY7BK2PstScG7xVreKj7F3Ayx+q4ondk=)
2: 0q5eM4eU5g1di1I72yto7ErHYs4.crl (hash: lY0G8jF3qXCge/ZsrNAmlVU0m4wgZzBADw3yKzhzYG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:48:e5:71:ef:07:74:75:8a:1e:15:9c:2e:31:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ae5e338794e60d5d8b523bdb2b68ec4ac762ce
Validity
Not Before: Oct 26 00:00:34 2026 GMT
Not After : Oct 27 00:00:34 2026 GMT
Subject: CN=34f3cc46d868e931ccf8e2ca87871f8540b31bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:ab:c8:65:d8:3b:59:25:2a:da:fb:82:c8:
fa:de:3b:0d:5e:fa:37:95:fa:5a:9d:4d:a3:8c:6d:
4a:f2:95:71:28:18:0a:4b:4d:53:7b:a3:a6:a8:0d:
e3:bc:0c:77:13:b1:30:f3:77:93:9c:a4:1d:e4:44:
d1:1a:71:9e:36:e7:e8:f9:6a:87:ea:07:85:87:a6:
27:4d:b9:cf:05:6e:ea:7a:2b:6a:ea:05:30:fa:6e:
d4:f0:14:8e:fe:3f:42:36:f6:15:a0:bc:9a:c9:9b:
db:00:8f:35:73:a3:e8:25:26:c3:80:ea:ff:05:6c:
0b:bf:0f:22:29:88:2f:ab:cb:23:d1:56:b2:36:90:
b6:15:f1:6e:ef:98:e2:a3:e5:1e:1f:9c:f1:65:09:
3c:77:59:14:01:29:9b:fb:9b:2e:b8:13:a4:3b:38:
f7:5b:6e:16:82:5b:36:26:73:b3:12:7f:f7:a5:48:
40:3b:f6:91:6b:9e:21:ae:d0:a0:88:d6:8b:ca:b4:
f1:86:40:fa:29:3a:55:0c:15:a8:c8:11:8b:e4:ee:
54:b8:17:ab:ce:fc:ca:d9:78:b1:29:07:34:68:08:
20:ae:f7:42:4e:60:1c:b9:49:8b:dc:8d:42:56:3d:
d3:73:2a:99:c3:7f:96:2d:6d:82:36:2a:77:ab:8d:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:CC:46:D8:68:E9:31:CC:F8:E2:CA:87:87:1F:85:40:B3:1B:ED
X509v3 Authority Key Identifier:
keyid:D2:AE:5E:33:87:94:E6:0D:5D:8B:52:3B:DB:2B:68:EC:4A:C7:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0q5eM4eU5g1di1I72yto7ErHYs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d5df03-b5ee-4bf7-aedf-8d8e9ea14325/1/0q5eM4eU5g1di1I72yto7ErHYs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:77:2a:3a:d3:1d:6f:5a:dd:5a:15:f4:b0:f4:1e:ba:d0:1f:
30:08:d1:41:a1:44:f2:d9:58:40:db:33:24:ff:6a:93:1e:dd:
c7:be:46:44:ae:ba:a2:af:7d:98:cd:c5:b6:7a:92:ac:66:45:
61:fd:58:91:9e:02:f2:48:0f:a1:a1:57:bc:05:c8:a3:66:6f:
b1:db:76:3e:ba:ad:f3:9d:e1:75:ce:d6:0d:c7:4a:59:4d:6c:
67:92:37:e7:9a:b3:7a:3e:39:b9:cc:49:3f:7d:ee:08:07:38:
21:e4:88:fc:86:e7:f1:c7:b0:9a:24:d7:c6:29:fb:1f:50:82:
66:b1:c7:1c:ee:cd:59:9e:e9:3d:ab:9f:da:c2:ff:06:75:79:
dc:b9:36:d9:15:6e:27:24:c4:eb:97:05:45:1f:d9:36:cd:9a:
ee:e2:f4:5d:aa:50:f8:78:60:dc:0d:77:8b:44:bc:ca:44:51:
6b:26:b5:c4:12:1b:ad:86:be:be:f7:8b:75:d1:bf:88:92:d7:
e7:30:3a:08:d5:ed:77:65:ff:7e:68:dd:7a:2b:2f:99:41:6c:
72:08:65:85:db:20:d5:db:c4:10:0c:cf:14:eb:a0:ac:d2:f2:
cd:7f:e9:e7:ae:90:65:9c:76:ed:85:da:51:e5:24:3d:99:5a:
6e:91:90:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1gkjlce8HdHWKHhWcLjGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYWU1ZTMzODc5NGU2MGQ1ZDhiNTIzYmRiMmI2OGVjNGFj
NzYyY2UwHhcNMjYxMDI2MDAwMDM0WhcNMjYxMDI3MDAwMDM0WjAzMTEwLwYDVQQD
EygzNGYzY2M0NmQ4NjhlOTMxY2NmOGUyY2E4Nzg3MWY4NTQwYjMxYmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrqryGXYO1klKtr7gsj63jsNXvo3
lfpanU2jjG1K8pVxKBgKS01Te6OmqA3jvAx3E7Ew83eTnKQd5ETRGnGeNufo+WqH
6geFh6YnTbnPBW7qeitq6gUw+m7U8BSO/j9CNvYVoLyayZvbAI81c6PoJSbDgOr/
BWwLvw8iKYgvq8sj0VayNpC2FfFu75jio+UeH5zxZQk8d1kUASmb+5suuBOkOzj3
W24Wgls2JnOzEn/3pUhAO/aRa54hrtCgiNaLyrTxhkD6KTpVDBWoyBGL5O5UuBer
zvzK2XixKQc0aAggrvdCTmAcuUmL3I1CVj3TcyqZw3+WLW2CNip3q42BbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTzzEbYaOkxzPjiyoeHH4VAsxvtMB8GA1UdIwQY
MBaAFNKuXjOHlOYNXYtSO9sraOxKx2LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYt
OGQ4ZTllYTE0MzI1LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNWRmMDMtYjVlZS00YmY3LWFlZGYtOGQ4ZTllYTE0MzI1
LzEvMHE1ZU00ZVU1ZzFkaTFJNzJ5dG83RXJIWXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGncqOtMd
b1rdWhX0sPQeutAfMAjRQaFE8tlYQNszJP9qkx7dx75GRK66oq99mM3FtnqSrGZF
Yf1YkZ4C8kgPoaFXvAXIo2Zvsdt2Prqt853hdc7WDcdKWU1sZ5I355qzej45ucxJ
P33uCAc4IeSI/Ibn8cewmiTXxin7H1CCZrHHHO7NWZ7pPauf2sL/BnV53Lk22RVu
JyTE65cFRR/ZNs2a7uL0XapQ+Hhg3A13i0S8ykRRaya1xBIbrYa+vveLddG/iJLX
5zA6CNXtd2X/fmjdeisvmUFscghlhdsg1dvEEAzPFOugrNLyzX/p566QZZx27YXa
UeUkPZlabpGQbg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 10:22:11 2026 by rpki-client