Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
File: IcOUybOja2n57l-JNqL1G5XqzrQ.mft (raw, json)
Hash identifier: EsagdDWZ/+gF8fqNUoCn7HSOfofczF/G1XAhQE/L2BU=
Subject key identifier: 93:BF:48:E7:58:32:16:A7:2A:13:93:4F:89:1C:04:8E:3B:EF:21:C5
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 01A17CCE24E12F9C6E82AF67714F06B4D7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 10:00:46 +0000
Manifest this update: Tue 27 Oct 2026 10:00:46 +0000
Manifest next update: Wed 28 Oct 2026 10:00:46 +0000
Files and hashes: 1: 2vB0H2qYyz6SI0m9_Uc6vD9cNDE.roa (hash: nA5TN8D8VR57ajti92sbOf79Vloshs+N1jBn946xsJk=)
2: IcOUybOja2n57l-JNqL1G5XqzrQ.crl (hash: h8ufemUPFMFLBpGoF8kIYQ4ZHCzKJHbcwrkbPdgAFIo=)
3: O_6FFbhc4JZemzwdUopF30jTO70.roa (hash: YpXPwTYN0lUePsEcimr/XTryk56n06KBrcCoSPFO4DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:ce:24:e1:2f:9c:6e:82:af:67:71:4f:06:b4:d7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Oct 27 10:00:46 2026 GMT
Not After : Oct 28 10:00:46 2026 GMT
Subject: CN=93bf48e7583216a72a13934f891c048e3bef21c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:20:3b:13:aa:e2:76:ec:41:18:36:1d:75:
60:33:90:b3:2c:ee:60:8a:b9:e8:9b:ad:a6:d2:01:
10:63:b5:d4:d6:bf:48:55:c1:6c:86:bc:51:31:47:
ec:f4:ce:71:a1:89:7a:65:c0:57:95:2d:1c:be:50:
22:c6:a5:b5:eb:2b:4b:59:df:21:b5:97:03:50:9f:
d8:8e:e6:84:e7:33:31:4b:cf:b0:c8:b0:4d:b1:36:
f2:e5:d6:e8:2e:82:23:e8:36:c4:89:4c:5e:4c:3a:
71:70:23:6f:28:42:ef:f8:f4:4a:13:bf:d4:52:d2:
2d:2f:c4:58:f6:42:5a:f8:ba:51:dc:e5:da:7a:8e:
12:ef:88:96:81:a3:f9:93:50:52:e9:39:48:b8:19:
ef:4d:5c:01:3b:27:2e:0f:5a:c6:e6:f5:1d:87:46:
02:db:53:1a:2a:fe:5b:08:ec:16:1b:50:a2:ba:65:
6b:a2:25:28:7f:a4:94:01:6c:af:93:01:13:7f:a1:
94:8e:8b:d5:43:96:66:6b:e7:b6:85:22:ba:0a:49:
78:a7:f5:5c:ec:b2:9d:33:72:d9:a4:51:70:07:64:
8a:c0:c7:53:89:85:e6:6a:16:b2:8d:14:8f:22:f0:
3e:fb:6d:ee:91:53:a9:9a:d0:7e:06:00:32:75:9d:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:48:E7:58:32:16:A7:2A:13:93:4F:89:1C:04:8E:3B:EF:21:C5
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7d:55:5b:bd:e4:cc:06:cc:6b:29:3c:1a:5f:e2:61:38:41:
61:77:e4:73:82:89:5f:c1:95:87:ab:38:7c:79:b6:3e:97:99:
9c:15:76:94:25:d9:54:98:aa:3b:4e:2f:05:c0:7e:0b:4a:b8:
9f:da:e5:72:1b:ce:67:b1:6b:d8:34:14:48:90:3c:28:c4:9f:
b9:92:26:c8:08:ba:34:9a:c2:d9:70:44:70:24:ac:16:90:04:
31:9b:57:87:e2:c2:9f:eb:94:bc:9b:0e:db:57:94:b4:79:91:
90:6d:e3:03:37:ca:23:22:49:1d:b1:2c:3d:cc:b8:6e:bd:82:
24:d2:7e:6b:6d:d9:8a:f5:a7:ba:ef:f0:cb:e5:0e:38:5c:f6:
07:9f:6b:e3:de:52:e7:3d:09:43:5e:81:0e:80:47:78:4b:b1:
df:f0:8d:ab:56:4b:3d:59:61:ce:dc:fe:86:e0:6d:c2:54:30:
95:27:40:39:bb:79:0d:1c:d9:68:a2:d2:bf:bf:d0:46:3f:81:
45:3d:d3:0f:fc:a8:ac:73:87:b8:ec:ec:8b:51:04:e0:3e:5b:
0d:d1:87:c4:70:3e:4e:3c:1e:17:30:96:27:40:3c:a8:93:d5:
c0:28:ae:2b:b5:aa:8f:c4:dc:f5:ad:f0:a1:31:3a:9e:97:7b:
36:30:b6:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8ziThL5xugq9ncU8GtNf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYzM5NGM5YjNhMzZiNjlmOWVlNWY4OTM2YTJmNTFiOTVl
YWNlYjQwHhcNMjYxMDI3MTAwMDQ2WhcNMjYxMDI4MTAwMDQ2WjAzMTEwLwYDVQQD
Eyg5M2JmNDhlNzU4MzIxNmE3MmExMzkzNGY4OTFjMDQ4ZTNiZWYyMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf8gOxOq4nbsQRg2HXVgM5CzLO5g
irnom62m0gEQY7XU1r9IVcFshrxRMUfs9M5xoYl6ZcBXlS0cvlAixqW16ytLWd8h
tZcDUJ/YjuaE5zMxS8+wyLBNsTby5dboLoIj6DbEiUxeTDpxcCNvKELv+PRKE7/U
UtItL8RY9kJa+LpR3OXaeo4S74iWgaP5k1BS6TlIuBnvTVwBOycuD1rG5vUdh0YC
21MaKv5bCOwWG1CiumVroiUof6SUAWyvkwETf6GUjovVQ5Zma+e2hSK6Ckl4p/Vc
7LKdM3LZpFFwB2SKwMdTiYXmahayjRSPIvA++23ukVOpmtB+BgAydZ2sowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO/SOdYMhanKhOTT4kcBI477yHFMB8GA1UdIwQY
MBaAFCHDlMmzo2tp+e5fiTai9RuV6s60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2Yt
MWU0MzZkY2I4NWM1LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MWZhY2MtNjY5Zi00NDU2LTk2M2YtMWU0MzZkY2I4NWM1
LzEvSWNPVXliT2phMm41N2wtSk5xTDFHNVhxenJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJX1VW73k
zAbMayk8Gl/iYThBYXfkc4KJX8GVh6s4fHm2PpeZnBV2lCXZVJiqO04vBcB+C0q4
n9rlchvOZ7Fr2DQUSJA8KMSfuZImyAi6NJrC2XBEcCSsFpAEMZtXh+LCn+uUvJsO
21eUtHmRkG3jAzfKIyJJHbEsPcy4br2CJNJ+a23ZivWnuu/wy+UOOFz2B59r495S
5z0JQ16BDoBHeEux3/CNq1ZLPVlhztz+huBtwlQwlSdAObt5DRzZaKLSv7/QRj+B
RT3TD/yorHOHuOzsi1EE4D5bDdGHxHA+TjweFzCWJ0A8qJPVwCiuK7Wqj8Tc9a3w
oTE6npd7NjC2KA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:43:53 2026 by rpki-client