Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: ZXbjSw/HOAPBQgXxxhM6EQfPg4xGCDNm1h32LtZxIbc=
Subject key identifier: 1B:B9:E9:6E:9F:B3:05:8C:F3:59:0B:AF:07:CC:70:35:A8:2E:A9:E2
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 01A18D53E6E1C110E5F6B1CB3F985E0C1A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 1AD7
Signing time: Fri 30 Oct 2026 15:00:48 +0000
Manifest this update: Fri 30 Oct 2026 15:00:48 +0000
Manifest next update: Sat 31 Oct 2026 15:00:48 +0000
Files and hashes: 1: YEoEVaZZgvqaYQs0c-KsGpSetUI.roa (hash: skVAsfQ5Llg9Q4qr15jtmY0awC3+4GF+G11QXTFhMHI=)
2: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: BtY9zihf8r97kXm3O4rkBtYZHehJfnUB74vr+rsxP9Y=)
3: q0hXo__MCYbBoR7iChz8rniPI6M.roa (hash: iTsszB/0K2SiC8hyLh2CRCMWHvU50TZNj9sPsIVxWo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:e6:e1:c1:10:e5:f6:b1:cb:3f:98:5e:0c:1a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Oct 30 15:00:48 2026 GMT
Not After : Oct 31 15:00:48 2026 GMT
Subject: CN=1bb9e96e9fb3058cf3590baf07cc7035a82ea9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:cc:1e:ce:67:57:3e:8a:5d:3b:da:ba:e5:
24:5a:34:56:8c:00:bb:98:81:5c:c4:b7:07:3a:11:
1e:06:17:54:38:7a:1f:92:c9:b7:a4:64:00:3d:ab:
69:53:44:df:3e:4a:d9:39:02:d3:ec:2d:2c:14:b0:
c4:ae:35:92:f3:73:bd:b0:e0:68:f3:bd:0d:6a:34:
76:1e:1f:a8:a5:63:14:69:de:24:1c:ce:a3:35:c0:
67:ec:0c:24:e6:af:1a:a2:81:fd:c8:9e:29:c7:42:
65:f6:35:9c:d1:d4:2d:96:04:70:ed:0f:a7:53:03:
3b:0b:6e:18:21:90:d0:b1:dd:58:35:87:2b:db:2c:
55:5f:ae:28:fb:21:06:9a:67:39:77:b5:f5:0e:50:
ec:cf:05:fb:d4:e9:7e:2d:b4:a8:e8:42:34:13:13:
32:ab:aa:6c:c5:f7:33:90:63:d6:b1:a5:37:b2:78:
ec:54:52:fd:fc:69:bc:ea:f9:33:ea:1f:e3:21:42:
37:45:32:57:78:c7:1b:92:51:f9:48:15:f7:dc:3c:
bf:22:65:d7:84:49:6e:e9:02:c1:37:53:53:40:85:
e7:ac:ea:99:e3:8f:3b:b4:6f:8c:3b:5b:48:9f:f5:
89:0e:49:c9:dc:47:df:ec:5d:f5:a7:de:f2:77:41:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B9:E9:6E:9F:B3:05:8C:F3:59:0B:AF:07:CC:70:35:A8:2E:A9:E2
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f5:a5:17:ab:53:04:d6:11:7d:85:5f:9c:f9:f5:e9:ec:7e:
6d:8e:df:17:0f:02:49:69:3c:8c:15:73:af:13:77:26:e8:83:
d0:69:5e:4a:e1:93:f3:47:9b:75:10:52:ae:b6:d5:78:aa:21:
c5:3a:73:7b:d3:94:a5:05:c4:d1:94:9b:32:1c:46:31:b8:f8:
73:ce:82:2b:fc:9d:81:3e:d7:a2:7e:73:eb:26:dc:bf:9c:ee:
3f:78:ad:fd:a0:88:04:3d:98:55:22:d2:66:33:d7:21:44:ae:
90:38:5c:45:39:12:78:6a:1e:b2:39:0e:e1:23:53:0d:c3:b2:
13:b6:d1:3a:84:e1:82:df:a1:1d:6f:a9:56:82:e0:42:a4:1a:
87:f4:44:23:b2:c7:97:14:94:4e:81:86:62:44:68:9b:eb:b4:
84:0c:dc:46:2c:7c:d8:96:d8:a8:02:f6:88:59:b7:85:18:6b:
4d:a9:73:cf:8d:28:8f:39:f0:ba:f5:20:c6:28:fb:3e:57:f5:
02:c3:c2:6b:c1:82:d0:8f:bd:08:cb:56:d6:86:95:0b:b1:91:
88:6e:26:fb:4b:6c:d2:50:74:97:79:57:3d:87:d2:2e:e8:3d:
9a:41:e7:bc:23:ba:7d:78:b1:fa:3b:61:47:09:37:68:43:d1:
60:55:9e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGNU+bhwRDl9rHLP5heDBpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMjAwZDBlN2FkM2NlZjcyMjM4YjUxNjRjNGIyY2RkZTIz
YTZhMWUwHhcNMjYxMDMwMTUwMDQ4WhcNMjYxMDMxMTUwMDQ4WjAzMTEwLwYDVQQD
EygxYmI5ZTk2ZTlmYjMwNThjZjM1OTBiYWYwN2NjNzAzNWE4MmVhOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBLMHs5nVz6KXTvauuUkWjRWjAC7
mIFcxLcHOhEeBhdUOHofksm3pGQAPatpU0TfPkrZOQLT7C0sFLDErjWS83O9sOBo
870NajR2Hh+opWMUad4kHM6jNcBn7Awk5q8aooH9yJ4px0Jl9jWc0dQtlgRw7Q+n
UwM7C24YIZDQsd1YNYcr2yxVX64o+yEGmmc5d7X1DlDszwX71Ol+LbSo6EI0ExMy
q6psxfczkGPWsaU3snjsVFL9/Gm86vkz6h/jIUI3RTJXeMcbklH5SBX33Dy/ImXX
hElu6QLBN1NTQIXnrOqZ4487tG+MO1tIn/WJDknJ3Eff7F31p97yd0HKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBu56W6fswWM81kLrwfMcDWoLqniMB8GA1UdIwQY
MBaAFJsgDQ560873Iji1FkxLLN3iOmoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2Mt
YTRmMDhkYmI4NWE1LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mY2JjYzYtNzM5Yi00ZjVjLWFlM2MtYTRmMDhkYmI4NWE1
LzEvbXlBTkRuclR6dmNpT0xVV1RFc3MzZUk2YWg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfWlF6tT
BNYRfYVfnPn16ex+bY7fFw8CSWk8jBVzrxN3JuiD0GleSuGT80ebdRBSrrbVeKoh
xTpze9OUpQXE0ZSbMhxGMbj4c86CK/ydgT7Xon5z6ybcv5zuP3it/aCIBD2YVSLS
ZjPXIUSukDhcRTkSeGoesjkO4SNTDcOyE7bROoThgt+hHW+pVoLgQqQah/REI7LH
lxSUToGGYkRom+u0hAzcRix82JbYqAL2iFm3hRhrTalzz40ojznwuvUgxij7Plf1
AsPCa8GC0I+9CMtW1oaVC7GRiG4m+0ts0lB0l3lXPYfSLug9mkHnvCO6fXix+jth
Rwk3aEPRYFWeQQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:43 2026 by rpki-client