Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: iHiuFdOVTXE0i6o5OJxAAStA1WHdge4SLNXSIAf/2Wc=
Subject key identifier: 91:70:F2:AE:DF:96:8F:A2:C1:41:E0:84:D8:7B:D6:40:C3:0B:54:39
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 01A174DDFF1D50264D589194493EB7E8EDED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0822
Signing time: Sun 25 Oct 2026 21:01:08 +0000
Manifest this update: Sun 25 Oct 2026 21:01:08 +0000
Manifest next update: Mon 26 Oct 2026 21:01:08 +0000
Files and hashes: 1: lCKnN3wUqbP-CPa03KTotKN0fLM.roa (hash: EhGufh2zzSKdj2oKiV1opxdo5FL6vfw4pZOXSr82bEg=)
2: nV1VVM1ywEoowWBVXFtkDsQx3KU.roa (hash: f9pOQmKZkcV0sZ4BCuIBSnyl7KtosULuBDlP1t0HctQ=)
3: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: p4aIxusuoYD3s7wJhze7ALmJoXOMarW/Sn7p/6TdbCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:ff:1d:50:26:4d:58:91:94:49:3e:b7:e8:ed:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Oct 25 21:01:08 2026 GMT
Not After : Oct 26 21:01:08 2026 GMT
Subject: CN=9170f2aedf968fa2c141e084d87bd640c30b5439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:a5:ed:81:0c:b5:07:c0:b9:9e:00:1b:55:
09:48:06:b5:86:df:4b:40:70:3b:57:78:5b:4a:2a:
a3:6e:2d:78:ef:b4:f2:55:84:0a:ae:0d:5d:d7:af:
35:76:71:31:62:a4:62:d5:66:4c:57:a6:30:43:dd:
d1:b0:1e:69:77:83:ad:da:04:d4:3b:4b:b6:6b:f9:
b4:b7:6e:41:58:dd:43:a2:19:c3:ac:38:e6:d7:4a:
94:17:27:80:2f:92:9e:9c:60:db:6a:cb:ef:26:82:
e8:98:b3:32:df:18:e4:2c:73:91:43:14:bc:6b:b1:
f5:15:ae:fb:c0:5f:8f:a3:4b:42:96:7e:ba:3e:29:
7b:65:27:8d:30:e6:f8:12:53:11:50:94:1c:e9:07:
bf:d3:eb:d0:97:41:81:6e:06:65:36:20:16:a0:d2:
bd:53:d9:e0:b9:b9:00:d3:9b:9d:0b:55:f9:7f:9c:
d9:52:5b:13:e1:b3:66:62:d7:5c:8b:6a:92:20:77:
92:9b:e4:d4:14:db:8b:57:79:f7:12:fe:22:94:b8:
a7:c4:1d:a9:bc:90:e7:e2:6a:d5:01:d2:72:f5:6b:
10:00:46:99:63:de:cb:a9:b8:05:f7:16:da:de:f9:
2b:f4:70:d6:8e:8f:a1:93:fb:00:af:bc:7b:12:d0:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:70:F2:AE:DF:96:8F:A2:C1:41:E0:84:D8:7B:D6:40:C3:0B:54:39
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:df:5c:38:62:25:64:b2:de:e2:57:e9:2f:b5:18:32:fe:d7:
12:fa:96:46:18:df:0c:ed:78:f6:97:b3:43:90:40:8e:56:09:
0e:c9:28:09:cc:0a:7a:13:cc:d5:b1:ae:03:0e:e1:96:d2:98:
f6:8d:d8:d2:b2:dc:2d:7e:cd:25:28:02:e6:72:95:c9:5f:18:
6d:7e:87:ee:bb:0d:07:8c:7a:1a:c5:ea:9b:d9:04:64:6b:26:
36:c9:82:73:46:8b:8e:33:fa:57:12:ea:18:10:41:01:7d:d6:
7c:7f:d1:45:3d:92:0b:22:09:6c:e2:8c:ca:74:10:00:6c:df:
51:ad:66:16:1a:92:aa:2b:9a:5e:f3:5a:77:60:9c:32:33:ee:
d2:61:26:59:6e:ba:bd:60:34:fd:56:9c:c7:8b:13:c7:67:3a:
ef:dc:30:89:d5:19:bc:20:a9:9f:58:e5:0a:c9:ea:2b:3c:90:
6e:b5:6b:48:c4:ef:0f:83:ca:79:65:64:0f:8d:e7:84:bd:35:
6a:08:e7:7d:08:f7:48:b3:02:27:e2:67:73:41:51:d9:8a:94:
1c:1a:e9:85:27:4c:ce:66:72:d2:a1:15:43:91:2b:79:f1:b0:
e2:7e:3b:04:32:7f:56:14:0c:3c:56:1e:5c:b5:4f:f8:a9:a3:
97:f0:2a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF03f8dUCZNWJGUST636O3tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmOGQ4NTQ3MzQyZTJmYzllY2ZhZGZjZWYwMGNmMjczZWY5
ZDZlOTAwHhcNMjYxMDI1MjEwMTA4WhcNMjYxMDI2MjEwMTA4WjAzMTEwLwYDVQQD
Eyg5MTcwZjJhZWRmOTY4ZmEyYzE0MWUwODRkODdiZDY0MGMzMGI1NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaOl7YEMtQfAuZ4AG1UJSAa1ht9L
QHA7V3hbSiqjbi1477TyVYQKrg1d1681dnExYqRi1WZMV6YwQ93RsB5pd4Ot2gTU
O0u2a/m0t25BWN1DohnDrDjm10qUFyeAL5KenGDbasvvJoLomLMy3xjkLHORQxS8
a7H1Fa77wF+Po0tCln66Pil7ZSeNMOb4ElMRUJQc6Qe/0+vQl0GBbgZlNiAWoNK9
U9ngubkA05udC1X5f5zZUlsT4bNmYtdci2qSIHeSm+TUFNuLV3n3Ev4ilLinxB2p
vJDn4mrVAdJy9WsQAEaZY97LqbgF9xba3vkr9HDWjo+hk/sAr7x7EtAU9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFw8q7flo+iwUHghNh71kDDC1Q5MB8GA1UdIwQY
MBaAFL+NhUc0Li/J7PrfzvAM8nPvnW6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNmY3MzQtYzY1NS00M2ExLTk5MzQt
MWU3MTkzMGZjYzBmLzEvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNmY3MzQtYzY1NS00M2ExLTk5MzQtMWU3MTkzMGZjYzBm
LzEvdjQyRlJ6UXVMOG5zLXRfTzhBenljLS1kYnBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXd9cOGIl
ZLLe4lfpL7UYMv7XEvqWRhjfDO149pezQ5BAjlYJDskoCcwKehPM1bGuAw7hltKY
9o3Y0rLcLX7NJSgC5nKVyV8YbX6H7rsNB4x6GsXqm9kEZGsmNsmCc0aLjjP6VxLq
GBBBAX3WfH/RRT2SCyIJbOKMynQQAGzfUa1mFhqSqiuaXvNad2CcMjPu0mEmWW66
vWA0/Vacx4sTx2c679wwidUZvCCpn1jlCsnqKzyQbrVrSMTvD4PKeWVkD43nhL01
agjnfQj3SLMCJ+Jnc0FR2YqUHBrphSdMzmZy0qEVQ5ErefGw4n47BDJ/VhQMPFYe
XLVP+Kmjl/Aqtw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:19:14 2026 by rpki-client