Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
File: aDei-kt4dzpmIA_qTFhQepLzEgM.mft (raw, json)
Hash identifier: /+ZTdFoad4drU1SoWEUdUeeKodD4A3ngmp5nndB/Vlo=
Subject key identifier: 9C:4E:81:66:18:52:0A:BD:7D:4B:36:19:B6:AD:10:9B:F4:99:56:C1
Authority key identifier: 68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
Certificate issuer: /CN=6837a2fa4b78773a66200fea4c58507a92f31203
Certificate serial: 01A179CD09ABB46720C84B74F603A960CAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
Manifest number: 0815
Signing time: Mon 26 Oct 2026 20:00:42 +0000
Manifest this update: Mon 26 Oct 2026 20:00:42 +0000
Manifest next update: Tue 27 Oct 2026 20:00:42 +0000
Files and hashes: 1: 4iNI26R-dGov0Tl2yDZjMNRLbfA.roa (hash: Mbs7tF0S261BkHnLQzWDasyVwFU+7wR+ArpU3P29zD8=)
2: aDei-kt4dzpmIA_qTFhQepLzEgM.crl (hash: yPoLtZo50Vu84VDGVmFozsR9NAowZKpsnCcpAWHP57U=)
3: dE-JGprnxw6rfyqiHGwVstJ3B-s.roa (hash: P5+Wa8hBNG0OAzbkWpR9P6pZV6VqpgnBr0Mr7oMWvCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cd:09:ab:b4:67:20:c8:4b:74:f6:03:a9:60:ca:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6837a2fa4b78773a66200fea4c58507a92f31203
Validity
Not Before: Oct 26 20:00:42 2026 GMT
Not After : Oct 27 20:00:42 2026 GMT
Subject: CN=9c4e816618520abd7d4b3619b6ad109bf49956c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:bf:66:4a:75:97:ec:98:01:62:c0:f6:e1:
f1:13:aa:f6:6c:be:67:26:8c:b6:00:67:90:9f:03:
8e:77:08:01:1e:e9:5a:3b:4f:66:89:4f:29:f6:e0:
30:07:21:10:43:fa:e4:71:9a:a6:7f:d4:ed:64:78:
d0:68:47:54:4b:ef:1e:5a:c8:8f:ab:13:78:0b:21:
21:c6:3e:87:9a:0f:1c:33:0c:ac:94:7f:1f:a6:32:
15:29:83:00:73:3d:ab:50:ce:57:22:e4:8a:84:88:
78:8c:e3:83:fc:9c:99:f8:ac:f1:2b:eb:35:66:00:
54:e7:eb:f6:2a:88:68:9d:be:d6:a1:0f:17:35:a2:
d9:80:28:78:33:b2:47:c4:d7:95:fb:be:02:b3:56:
d9:35:57:ad:dc:c2:95:47:6a:8c:6a:69:6c:aa:40:
27:43:2f:67:18:09:47:20:fd:63:35:14:ed:2e:d0:
e2:6c:03:61:55:01:9e:e3:34:cc:df:d6:c7:b6:ad:
59:4c:bd:d2:08:95:f0:95:c7:c4:dc:eb:96:af:0b:
69:5a:a1:b0:da:57:ea:6b:b1:46:99:b1:db:b7:69:
9d:1e:1d:79:62:34:47:fc:44:f6:d9:ab:43:ab:16:
04:c3:44:79:09:8a:fe:c6:05:61:72:19:ff:0e:84:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:81:66:18:52:0A:BD:7D:4B:36:19:B6:AD:10:9B:F4:99:56:C1
X509v3 Authority Key Identifier:
keyid:68:37:A2:FA:4B:78:77:3A:66:20:0F:EA:4C:58:50:7A:92:F3:12:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDei-kt4dzpmIA_qTFhQepLzEgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b769e3-e215-44a5-8a2e-0e9df99d9339/1/aDei-kt4dzpmIA_qTFhQepLzEgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:59:de:e0:b9:4a:75:bd:7f:38:99:4d:fe:a3:f7:18:9c:ce:
e9:ca:03:3c:0f:84:27:77:19:bc:8e:f3:6d:17:c6:d8:a0:d1:
36:23:ba:d8:96:1e:b7:c8:02:e7:45:89:2d:ad:6c:83:9d:89:
7a:72:78:0d:2e:5c:dc:4c:bd:d3:c9:b5:ba:d8:b3:a1:f5:fb:
11:b8:c2:d2:09:fd:86:2c:ca:36:a2:ef:2a:1a:2f:5d:f1:93:
bc:7c:ef:10:c0:11:d1:2f:de:0f:db:1b:4a:cb:15:8c:a3:69:
13:54:9e:a2:4b:d2:c3:33:ec:7f:30:32:1e:08:c4:86:2a:1d:
82:88:be:d3:af:c4:4a:e5:e3:76:f8:9c:cd:c0:77:82:f2:8a:
51:6d:ed:e4:79:8c:11:98:a7:9b:a7:44:e9:e9:e9:91:10:a3:
5a:36:8d:76:ce:f0:59:86:f0:b7:ff:1a:6e:80:d2:98:36:51:
9b:3b:bc:d0:59:b2:3f:74:f7:dc:bf:6c:7e:ce:0e:18:1c:67:
99:f7:57:4e:4f:67:df:d1:53:85:b2:f7:32:d7:42:47:b8:79:
75:c6:01:cf:72:d4:84:ca:58:1c:a6:0a:5e:d4:4a:5b:0a:6f:
27:70:74:fa:43:f1:0b:b2:39:09:bc:dd:f0:14:68:67:ed:e3:
80:26:d1:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5zQmrtGcgyEt09gOpYMrCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MzdhMmZhNGI3ODc3M2E2NjIwMGZlYTRjNTg1MDdhOTJm
MzEyMDMwHhcNMjYxMDI2MjAwMDQyWhcNMjYxMDI3MjAwMDQyWjAzMTEwLwYDVQQD
Eyg5YzRlODE2NjE4NTIwYWJkN2Q0YjM2MTliNmFkMTA5YmY0OTk1NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA242/Zkp1l+yYAWLA9uHxE6r2bL5n
Joy2AGeQnwOOdwgBHulaO09miU8p9uAwByEQQ/rkcZqmf9TtZHjQaEdUS+8eWsiP
qxN4CyEhxj6Hmg8cMwyslH8fpjIVKYMAcz2rUM5XIuSKhIh4jOOD/JyZ+KzxK+s1
ZgBU5+v2Kohonb7WoQ8XNaLZgCh4M7JHxNeV+74Cs1bZNVet3MKVR2qMamlsqkAn
Qy9nGAlHIP1jNRTtLtDibANhVQGe4zTM39bHtq1ZTL3SCJXwlcfE3OuWrwtpWqGw
2lfqa7FGmbHbt2mdHh15YjRH/ET22atDqxYEw0R5CYr+xgVhchn/DoQuRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxOgWYYUgq9fUs2GbatEJv0mVbBMB8GA1UdIwQY
MBaAFGg3ovpLeHc6ZiAP6kxYUHqS8xIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUt
MGU5ZGY5OWQ5MzM5LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iNzY5ZTMtZTIxNS00NGE1LThhMmUtMGU5ZGY5OWQ5MzM5
LzEvYURlaS1rdDRkenBtSUFfcVRGaFFlcEx6RWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFne4LlK
db1/OJlN/qP3GJzO6coDPA+EJ3cZvI7zbRfG2KDRNiO62JYet8gC50WJLa1sg52J
enJ4DS5c3Ey908m1utizofX7EbjC0gn9hizKNqLvKhovXfGTvHzvEMAR0S/eD9sb
SssVjKNpE1SeokvSwzPsfzAyHgjEhiodgoi+06/ESuXjdviczcB3gvKKUW3t5HmM
EZinm6dE6enpkRCjWjaNds7wWYbwt/8aboDSmDZRmzu80FmyP3T33L9sfs4OGBxn
mfdXTk9n39FThbL3MtdCR7h5dcYBz3LUhMpYHKYKXtRKWwpvJ3B0+kPxC7I5Cbzd
8BRoZ+3jgCbRDw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 02:01:05 2026 by rpki-client