Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
File: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft (raw, json)
Hash identifier: NacK7nye1GLDbeZBt/4SKzZEWw+pv8QMNiOiSWpov/4=
Subject key identifier: 03:FD:DF:45:D7:CB:45:65:BB:C9:47:4B:DF:F3:75:EE:4E:9E:5F:B8
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 01A18118C3ABAAE22A54263C2B717447D4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
Manifest number: 0BC5
Signing time: Wed 28 Oct 2026 06:00:46 +0000
Manifest this update: Wed 28 Oct 2026 06:00:46 +0000
Manifest next update: Thu 29 Oct 2026 06:00:46 +0000
Files and hashes: 1: bes3Ak7lAYiWjjD6sUuNX8KOJ5k.roa (hash: lgQ99fWD6Q82webEcbroGsEXSi8mGfzgwcI7IvYH5SE=)
2: p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl (hash: 9Exvmh/RwnJKEtiTC/qYffsu0y0gSy1e8T1hz8pm4fE=)
3: pyzNTgyDpRY88na56omeNzoc2p8.roa (hash: AtQp7azQyTl2ubez83Xz2smb6q4U417Sym3wqe3HC6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:18:c3:ab:aa:e2:2a:54:26:3c:2b:71:74:47:d4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Oct 28 06:00:46 2026 GMT
Not After : Oct 29 06:00:46 2026 GMT
Subject: CN=03fddf45d7cb4565bbc9474bdff375ee4e9e5fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:f5:ec:f2:90:03:51:f0:dc:ad:99:4f:31:
98:04:47:1a:3a:ca:86:fa:88:49:ea:95:a0:2a:e0:
ac:8f:3d:2e:4f:cb:35:52:78:7c:67:42:7e:19:51:
a2:bb:c2:ad:15:2a:2a:15:7a:14:87:c3:2b:0e:d2:
90:87:2a:36:90:fe:4c:ce:1d:84:10:f2:3a:d6:79:
91:69:fc:74:9f:8a:aa:b2:0a:62:9c:29:d5:ae:db:
19:68:53:96:32:ce:e4:2e:30:6c:cb:c9:73:d6:27:
51:95:cb:e3:b2:0a:c9:06:76:60:34:a1:ee:b7:f0:
56:a4:df:2a:82:46:f4:fb:64:60:a5:75:45:af:ef:
71:52:26:79:8f:b5:8c:4f:03:e6:39:f3:ad:1c:e1:
90:a7:a3:ca:70:82:ff:a3:b0:a0:9a:c4:a4:f5:2d:
65:49:84:68:50:72:36:d8:f6:3c:9f:72:30:02:e8:
06:03:75:98:3e:5b:80:3b:67:9f:a2:00:58:49:50:
d1:f9:f0:ba:21:f6:84:77:4e:11:0e:25:75:84:27:
c0:38:33:69:bd:0f:89:4b:d1:f8:68:01:58:e8:16:
b6:e8:5e:40:43:f1:9e:f4:d6:14:79:7c:fd:d9:03:
f0:bc:1a:d7:0a:63:83:fc:6f:a0:fd:b0:5a:03:ea:
bf:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:DF:45:D7:CB:45:65:BB:C9:47:4B:DF:F3:75:EE:4E:9E:5F:B8
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:5c:6d:2a:66:7c:b6:74:10:1f:02:d3:a5:d1:f4:25:b0:
45:5e:1d:f9:55:18:93:43:fd:1c:ed:12:57:07:77:a2:d7:94:
3b:50:11:41:df:29:15:a6:8e:c8:37:11:e7:4c:2d:50:c9:50:
d7:ad:1b:44:80:f1:30:59:79:2c:e3:a7:b3:37:31:c8:ee:35:
82:06:77:a2:de:c8:67:51:d3:71:75:2c:dc:68:8c:1e:ac:c6:
f6:cf:b2:bb:e2:f7:51:fb:7c:ca:a1:21:cd:cb:77:41:c5:f1:
7e:e5:ac:bb:4b:82:47:5a:0a:41:1c:40:f9:86:10:83:83:29:
28:cb:71:58:d9:e4:a4:7a:38:07:72:5a:02:09:41:c8:d9:1c:
4d:22:b1:60:1d:26:21:c7:a3:37:cb:24:c6:d8:b8:c3:7b:91:
47:b8:32:ed:2a:29:a3:18:7f:c4:85:17:78:7d:4d:07:91:ea:
9e:ac:40:bd:fc:ea:4a:a2:ba:9a:6e:19:e6:a1:92:69:8d:9d:
33:30:95:ac:ad:4e:b2:43:3d:50:84:61:ef:3e:e2:3e:f7:0b:
ad:eb:66:44:32:2f:d6:2b:d5:f4:7a:40:e7:40:4e:7d:45:2f:
ac:1d:c2:dd:a8:4b:1d:94:6f:9f:92:28:cf:c0:19:2a:32:eb:
87:3e:41:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBGMOrquIqVCY8K3F0R9ThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YTUzOGFhYzMzNzc4NDYwZTE5NzAxYWFiNTk1MmM3YWEy
NWYwNWMwHhcNMjYxMDI4MDYwMDQ2WhcNMjYxMDI5MDYwMDQ2WjAzMTEwLwYDVQQD
EygwM2ZkZGY0NWQ3Y2I0NTY1YmJjOTQ3NGJkZmYzNzVlZTRlOWU1ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8P17PKQA1Hw3K2ZTzGYBEcaOsqG
+ohJ6pWgKuCsjz0uT8s1Unh8Z0J+GVGiu8KtFSoqFXoUh8MrDtKQhyo2kP5Mzh2E
EPI61nmRafx0n4qqsgpinCnVrtsZaFOWMs7kLjBsy8lz1idRlcvjsgrJBnZgNKHu
t/BWpN8qgkb0+2RgpXVFr+9xUiZ5j7WMTwPmOfOtHOGQp6PKcIL/o7CgmsSk9S1l
SYRoUHI22PY8n3IwAugGA3WYPluAO2efogBYSVDR+fC6IfaEd04RDiV1hCfAODNp
vQ+JS9H4aAFY6Ba26F5AQ/Ge9NYUeXz92QPwvBrXCmOD/G+g/bBaA+q/hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP930XXy0Vlu8lHS9/zde5Onl+4MB8GA1UdIwQY
MBaAFKelOKrDN3hGDhlwGqtZUseqJfBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEt
ODdiMDEwZWE2MjM1LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hODMzMzctNmUxNi00Y2Q5LTkyMWEtODdiMDEwZWE2MjM1
LzEvcDZVNHFzTTNlRVlPR1hBYXExbFN4Nm9sOEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhNcbSpm
fLZ0EB8C06XR9CWwRV4d+VUYk0P9HO0SVwd3oteUO1ARQd8pFaaOyDcR50wtUMlQ
160bRIDxMFl5LOOnszcxyO41ggZ3ot7IZ1HTcXUs3GiMHqzG9s+yu+L3Uft8yqEh
zct3QcXxfuWsu0uCR1oKQRxA+YYQg4MpKMtxWNnkpHo4B3JaAglByNkcTSKxYB0m
IcejN8skxti4w3uRR7gy7Sopoxh/xIUXeH1NB5HqnqxAvfzqSqK6mm4Z5qGSaY2d
MzCVrK1OskM9UIRh7z7iPvcLretmRDIv1ivV9HpA50BOfUUvrB3C3ahLHZRvn5Io
z8AZKjLrhz5BNQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:37:31 2026 by rpki-client