Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: TSBvnVhVs0g4Wpn1r5TDpl9NtEYrc6J/uOUDEG5lkdw=
Subject key identifier: 92:90:2B:DD:FC:60:1E:8E:8C:E6:A5:36:55:87:4D:57:4E:F1:4D:B4
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 01A17093361573F45B37077ECB07F65F41D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 1AC0
Signing time: Sun 25 Oct 2026 01:00:58 +0000
Manifest this update: Sun 25 Oct 2026 01:00:58 +0000
Manifest next update: Mon 26 Oct 2026 01:00:58 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: gHmcvBNjLQozIRXUEH04SAg6L8FOSZcDHCjswLbAWzE=)
2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
3: RyTo54Gn4GlIatASiJIGEZImFMs.roa (hash: f8+0VDhHPJqJ9ImqYRQ61bWQ1EOJmhQHqA1aWAVq45E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:93:36:15:73:f4:5b:37:07:7e:cb:07:f6:5f:41:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Oct 25 01:00:58 2026 GMT
Not After : Oct 26 01:00:58 2026 GMT
Subject: CN=92902bddfc601e8e8ce6a53655874d574ef14db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:b4:2a:32:2f:17:08:04:87:34:7b:49:c4:
1b:5c:07:cd:d9:93:dc:27:cf:bf:9a:da:89:56:2a:
37:8a:31:5f:10:e5:93:af:30:56:04:95:db:37:d6:
20:72:fd:2f:02:9b:de:81:a9:0c:5e:fe:7d:c6:81:
91:08:2e:1c:c9:8e:76:8e:a4:fe:63:de:0c:75:2e:
dc:2b:c6:33:e6:5b:40:d4:d7:de:0b:a8:e8:8a:65:
9a:1f:29:fe:97:0f:93:93:e9:db:ab:62:27:f2:d5:
ed:ba:aa:30:00:c5:53:be:0b:73:7f:73:5f:af:58:
02:18:a0:2f:13:a2:f4:6b:7e:ca:31:f9:0e:6c:26:
7e:9d:12:0f:1a:46:20:a6:83:fa:0b:31:6e:c5:ae:
72:eb:3f:fb:a5:6f:62:b6:69:b8:ba:49:2e:61:d7:
ac:51:e1:6a:da:ee:a0:d9:3f:ec:e9:cd:6b:38:80:
33:0b:69:cc:a4:fc:29:3b:d6:b6:48:4f:81:34:97:
ab:1e:0f:ce:3f:4e:12:aa:63:bc:32:ac:02:0b:bf:
a9:35:66:55:63:70:dd:11:7b:8d:0f:99:1a:51:63:
8a:a6:07:2a:28:52:22:df:d7:1b:4f:c4:18:e1:7b:
46:6f:f6:c1:3f:62:7a:4f:eb:28:2a:db:3e:af:2c:
54:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:90:2B:DD:FC:60:1E:8E:8C:E6:A5:36:55:87:4D:57:4E:F1:4D:B4
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:2f:9a:6f:f2:17:02:90:c9:33:55:0f:b0:dd:7f:5e:86:c6:
d2:4c:ce:9d:81:9e:5e:bb:57:fe:4c:21:b5:f3:6b:08:a4:3e:
0b:b9:3f:8e:f6:13:8f:5c:2e:1d:8a:78:43:d2:fc:a5:a1:1e:
e8:e0:84:dd:09:35:70:d8:a9:bc:8b:11:26:50:29:2f:f4:42:
5f:c6:79:d7:71:0c:38:ae:bd:cd:45:ca:96:66:39:19:97:de:
92:be:03:c6:2d:61:ca:65:c0:15:22:58:eb:13:a6:73:fc:67:
da:1a:77:a7:2f:1a:68:81:6b:4a:92:32:94:e1:ab:9e:0d:48:
58:84:48:18:bb:a8:e8:ba:3a:15:e6:ef:3c:e7:5b:3c:a5:cf:
42:f3:c7:75:1d:16:fd:35:c7:5c:27:61:80:35:01:0f:2a:8c:
57:6b:e9:29:90:a1:d1:b5:fd:ae:5b:6a:33:57:f5:2f:c2:97:
ad:d3:b1:ad:f5:f9:f6:04:eb:27:1a:7b:17:22:08:50:9b:80:
7e:3f:0e:2f:5c:70:91:77:63:63:12:ae:04:67:72:e2:49:88:
69:f0:5c:99:45:51:4d:f7:08:59:14:35:b7:5d:d7:07:00:a6:
c9:fd:32:2a:4a:44:73:0c:49:81:cc:0b:9b:5f:51:b5:80:65:
18:93:67:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFwkzYVc/RbNwd+ywf2X0HQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjYxMDI1MDEwMDU4WhcNMjYxMDI2MDEwMDU4WjAzMTEwLwYDVQQD
Eyg5MjkwMmJkZGZjNjAxZThlOGNlNmE1MzY1NTg3NGQ1NzRlZjE0ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOG0KjIvFwgEhzR7ScQbXAfN2ZPc
J8+/mtqJVio3ijFfEOWTrzBWBJXbN9Ygcv0vApvegakMXv59xoGRCC4cyY52jqT+
Y94MdS7cK8Yz5ltA1NfeC6joimWaHyn+lw+Tk+nbq2In8tXtuqowAMVTvgtzf3Nf
r1gCGKAvE6L0a37KMfkObCZ+nRIPGkYgpoP6CzFuxa5y6z/7pW9itmm4ukkuYdes
UeFq2u6g2T/s6c1rOIAzC2nMpPwpO9a2SE+BNJerHg/OP04SqmO8MqwCC7+pNWZV
Y3DdEXuND5kaUWOKpgcqKFIi39cbT8QY4XtGb/bBP2J6T+soKts+ryxUqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKQK938YB6OjOalNlWHTVdO8U20MB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGy+ab/IX
ApDJM1UPsN1/XobG0kzOnYGeXrtX/kwhtfNrCKQ+C7k/jvYTj1wuHYp4Q9L8paEe
6OCE3Qk1cNipvIsRJlApL/RCX8Z513EMOK69zUXKlmY5GZfekr4Dxi1hymXAFSJY
6xOmc/xn2hp3py8aaIFrSpIylOGrng1IWIRIGLuo6Lo6FebvPOdbPKXPQvPHdR0W
/TXHXCdhgDUBDyqMV2vpKZCh0bX9rltqM1f1L8KXrdOxrfX59gTrJxp7FyIIUJuA
fj8OL1xwkXdjYxKuBGdy4kmIafBcmUVRTfcIWRQ1t13XBwCmyf0yKkpEcwxJgcwL
m19RtYBlGJNnBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 11:35:28 2026 by rpki-client