Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
File: rf_xvXcSh87UxN1tioUdKtdwZh0.mft (raw, json)
Hash identifier: cx4Db9i0zefndhFbvDJVpXXLJQ6NnR+vE9mll4ypLSI=
Subject key identifier: A6:36:59:01:57:0A:72:65:38:91:4E:D8:92:5C:24:22:B3:F6:DD:C0
Authority key identifier: AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
Certificate issuer: /CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Certificate serial: 01A14729A14346BFF850036CE600CE99F1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
Manifest number: 1AAC
Signing time: Sat 17 Oct 2026 00:01:12 +0000
Manifest this update: Sat 17 Oct 2026 00:01:12 +0000
Manifest next update: Sun 18 Oct 2026 00:01:12 +0000
Files and hashes: 1: YHt9YKkoQObFkpk4bFMfaZH83j0.roa (hash: 4fsNZayDAjiJa4ZZH0ABpTRn6fHRN9+IikwCGEjvWBc=)
2: rf_xvXcSh87UxN1tioUdKtdwZh0.crl (hash: 5CrFiNwgElHOXrJobfQgoMqujuAkqQQBZLGPUFPOPVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:a1:43:46:bf:f8:50:03:6c:e6:00:ce:99:f1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adfff1bd771287ced4c4dd6d8a851d2ad770661d
Validity
Not Before: Oct 17 00:01:12 2026 GMT
Not After : Oct 18 00:01:12 2026 GMT
Subject: CN=a6365901570a726538914ed8925c2422b3f6ddc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:b8:c1:a2:89:03:3f:96:94:b6:28:11:2e:
b9:bf:75:5c:bf:2f:82:38:b2:36:55:a2:c8:a6:d2:
06:99:2d:2c:0a:fb:ab:75:6b:18:85:20:1c:f0:bd:
76:97:e1:df:ab:39:1d:77:8e:7a:2a:2e:08:b9:c6:
d5:86:61:1d:2b:3a:46:17:be:f6:d4:c4:e2:ce:4e:
25:ca:aa:cf:99:8c:09:1c:26:47:1e:83:44:f9:88:
63:fb:27:32:b3:62:ee:70:df:a0:a0:b1:ab:ac:9a:
aa:e2:2b:8d:86:1b:7a:2e:63:b1:94:2a:ad:08:f5:
4b:9d:99:48:4e:19:5f:1a:c8:2e:a5:1a:71:35:89:
82:64:eb:48:40:88:2a:ec:64:1f:eb:84:0d:eb:17:
17:6d:6a:9b:29:c3:29:6e:96:dc:18:27:73:05:0a:
fd:3d:e1:49:d2:d3:e0:7f:fd:fd:1f:5b:d0:2a:83:
a0:1d:41:2d:1a:23:e2:99:c7:fd:e3:c4:bd:c0:1d:
cf:eb:ff:15:d6:07:5b:1f:48:47:48:bb:2d:ea:41:
41:5b:5e:c5:b6:53:9a:e9:5e:69:ce:f7:a7:8e:13:
ca:85:45:42:92:39:bf:3e:b8:18:a6:e2:cb:9f:66:
a2:7a:b5:9a:41:30:7c:30:e6:a9:84:93:46:b7:6b:
f7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:36:59:01:57:0A:72:65:38:91:4E:D8:92:5C:24:22:B3:F6:DD:C0
X509v3 Authority Key Identifier:
keyid:AD:FF:F1:BD:77:12:87:CE:D4:C4:DD:6D:8A:85:1D:2A:D7:70:66:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf_xvXcSh87UxN1tioUdKtdwZh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/623e11-e70c-4f5b-852c-4943b4b42ebb/1/rf_xvXcSh87UxN1tioUdKtdwZh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3b:e4:19:e2:20:02:a3:62:52:f2:2a:60:ae:4a:1f:9f:c0:
1d:ac:45:2a:7a:34:3e:f1:45:ba:98:a1:85:ae:cc:2f:f4:5b:
ae:1b:e2:1f:60:c2:57:cc:ea:8e:65:1f:be:1b:c8:63:91:47:
96:ff:1b:8b:1e:81:5e:2e:91:80:76:37:07:cf:37:88:bb:99:
a1:2e:04:2d:1d:55:67:ed:12:9d:59:76:c5:73:0d:4b:3d:e0:
c4:d4:6e:0c:dc:8c:0e:24:c3:db:61:f9:29:f1:b0:29:96:08:
c0:c4:b8:af:11:8f:06:e3:98:03:8a:61:e4:34:8b:0c:e2:ae:
bb:b3:18:ef:fb:d1:b7:49:f9:fc:5c:65:dd:8c:be:6c:8d:c6:
fd:0c:17:00:66:b8:db:0f:fe:65:2c:2f:98:3e:af:6d:14:8e:
b3:29:7d:bb:f9:5b:5e:80:8e:13:6e:d1:61:8b:00:8a:38:f7:
d1:28:41:66:ca:4f:29:2a:cb:17:52:6f:0a:54:c7:19:2a:12:
d0:1f:10:c9:3b:6c:f1:13:26:8b:1c:ad:8e:83:d8:bc:48:62:
4c:0f:1c:eb:3c:c8:95:c5:18:89:55:0b:e1:56:27:90:f3:1b:
2e:6f:46:11:34:44:8e:4c:a4:a1:6f:c7:d7:27:2e:9c:5b:c9:
af:8d:d6:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHKaFDRr/4UANs5gDOmfH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZmZmMWJkNzcxMjg3Y2VkNGM0ZGQ2ZDhhODUxZDJhZDc3
MDY2MWQwHhcNMjYxMDE3MDAwMTEyWhcNMjYxMDE4MDAwMTEyWjAzMTEwLwYDVQQD
EyhhNjM2NTkwMTU3MGE3MjY1Mzg5MTRlZDg5MjVjMjQyMmIzZjZkZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/C4waKJAz+WlLYoES65v3Vcvy+C
OLI2VaLIptIGmS0sCvurdWsYhSAc8L12l+Hfqzkdd456Ki4IucbVhmEdKzpGF772
1MTizk4lyqrPmYwJHCZHHoNE+Yhj+ycys2LucN+goLGrrJqq4iuNhht6LmOxlCqt
CPVLnZlIThlfGsgupRpxNYmCZOtIQIgq7GQf64QN6xcXbWqbKcMpbpbcGCdzBQr9
PeFJ0tPgf/39H1vQKoOgHUEtGiPimcf948S9wB3P6/8V1gdbH0hHSLst6kFBW17F
tlOa6V5pzvenjhPKhUVCkjm/PrgYpuLLn2aierWaQTB8MOaphJNGt2v35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY2WQFXCnJlOJFO2JJcJCKz9t3AMB8GA1UdIwQY
MBaAFK3/8b13EofO1MTdbYqFHSrXcGYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMt
NDk0M2I0YjQyZWJiLzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy82MjNlMTEtZTcwYy00ZjViLTg1MmMtNDk0M2I0YjQyZWJi
LzEvcmZfeHZYY1NoODdVeE4xdGlvVWRLdGR3WmgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTvkGeIg
AqNiUvIqYK5KH5/AHaxFKno0PvFFupihha7ML/RbrhviH2DCV8zqjmUfvhvIY5FH
lv8bix6BXi6RgHY3B883iLuZoS4ELR1VZ+0SnVl2xXMNSz3gxNRuDNyMDiTD22H5
KfGwKZYIwMS4rxGPBuOYA4ph5DSLDOKuu7MY7/vRt0n5/Fxl3Yy+bI3G/QwXAGa4
2w/+ZSwvmD6vbRSOsyl9u/lbXoCOE27RYYsAijj30ShBZspPKSrLF1JvClTHGSoS
0B8QyTts8RMmixytjoPYvEhiTA8c6zzIlcUYiVUL4VYnkPMbLm9GETREjkykoW/H
1ycunFvJr43W8g==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:57 2026 by rpki-client