Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: e4uUIkZoWLYuXbFj/s2UhbH01EHB0ZtSgVgBX8sQ+bM=
Subject key identifier: E8:48:90:29:8B:3A:D3:26:0D:E4:3D:21:77:1A:C6:5C:11:7D:62:C7
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 01A17FCFB1C3394F645BC1C01E3CD1E52B3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 00:01:20 +0000
Manifest this update: Wed 28 Oct 2026 00:01:20 +0000
Manifest next update: Thu 29 Oct 2026 00:01:20 +0000
Files and hashes: 1: PtYo6MwEWy1vpndhzACUN02erEo.roa (hash: 3/Pp/u1BR3pOxJGz3l7tc76JM7PepsEG/RPZ3ABSNvU=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: 5k2etGGFICiTZaf498YKW8bUmJxSI2XvB0YNHr/P49U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:b1:c3:39:4f:64:5b:c1:c0:1e:3c:d1:e5:2b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Oct 28 00:01:20 2026 GMT
Not After : Oct 29 00:01:20 2026 GMT
Subject: CN=e84890298b3ad3260de43d21771ac65c117d62c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:f0:2b:50:67:b9:fa:7a:42:09:41:23:05:
e6:15:fa:5e:a3:c1:09:85:ba:60:60:13:25:76:a4:
19:76:64:f8:3d:0c:d5:4a:e7:56:a4:3a:98:05:6f:
43:90:71:60:18:60:d4:69:ef:84:39:fd:00:8a:8e:
28:bf:8d:24:74:69:b1:07:64:8f:21:20:e8:9b:6d:
a4:fb:48:7c:67:40:34:fb:d0:22:c8:62:30:9e:c2:
5c:8a:c5:5b:2d:76:f1:90:00:58:e2:f1:f6:da:03:
57:c1:59:b5:cf:e7:4b:b5:c6:17:77:19:ba:dd:4d:
d7:49:7d:08:54:c8:27:9c:53:32:fc:52:e4:9e:9f:
b2:1c:4c:8a:53:85:48:c3:d0:87:06:56:30:f1:00:
bf:03:4a:16:7e:94:97:70:ec:c9:6a:f3:88:2d:29:
19:56:3d:44:db:e7:46:41:d5:a9:86:8b:4e:e9:7c:
58:78:7d:e8:6e:36:a3:50:a0:f5:20:00:e0:68:32:
da:58:af:af:a7:7d:5f:92:65:48:09:a4:df:3e:a9:
7b:b7:65:8f:9d:ca:c0:25:a7:5b:8c:c6:cb:c2:14:
a3:d9:d3:3e:5d:61:41:ed:9c:08:8c:5e:08:e5:ae:
4b:27:8c:f6:7e:76:fb:ed:f5:bd:8e:72:e5:7a:63:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:48:90:29:8B:3A:D3:26:0D:E4:3D:21:77:1A:C6:5C:11:7D:62:C7
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b7:2a:63:e2:6d:56:3c:fa:5e:b2:cb:5c:05:32:bf:7c:81:
f2:eb:99:02:3f:95:bf:ae:bf:6c:cc:69:50:15:08:6a:64:a0:
30:c8:33:05:3a:2e:34:41:ae:4c:ff:9f:3e:aa:e8:94:bf:ce:
58:71:15:26:ef:69:9d:bf:fa:52:99:cc:a0:25:9c:77:5b:23:
00:b6:3e:e2:33:4c:5c:82:a0:20:1e:99:45:9b:d5:5b:7b:23:
2c:e8:66:cd:fc:51:46:d9:14:72:8c:95:35:d0:e9:49:5a:4f:
4b:5a:c8:8a:db:8c:a6:19:9a:c6:0b:3a:70:b9:b1:82:0a:a3:
29:37:7c:49:a6:b2:f5:ca:14:e5:89:6e:f3:e2:42:a4:f0:ab:
2e:f5:ea:3f:e4:ac:ae:74:c9:0e:41:ca:13:7e:2a:7b:35:78:
6a:a2:1e:20:a5:35:50:91:57:fe:7f:dc:37:f8:32:4f:18:5a:
81:77:30:ee:e8:2d:b7:9f:de:04:a0:e6:57:44:28:f0:79:09:
2f:94:99:1c:39:e4:9d:62:8d:43:6e:93:b6:e4:81:6e:d2:6b:
5d:7f:ed:64:9d:7f:97:eb:27:4c:2d:c3:2d:c0:22:74:cc:28:
e9:91:e5:a4:d0:32:25:25:2d:b0:d1:97:36:5b:0b:f6:9a:29:
e7:a9:84:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/z7HDOU9kW8HAHjzR5Ss7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0
NmE0ZGQwHhcNMjYxMDI4MDAwMTIwWhcNMjYxMDI5MDAwMTIwWjAzMTEwLwYDVQQD
EyhlODQ4OTAyOThiM2FkMzI2MGRlNDNkMjE3NzFhYzY1YzExN2Q2MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgTwK1Bnufp6QglBIwXmFfpeo8EJ
hbpgYBMldqQZdmT4PQzVSudWpDqYBW9DkHFgGGDUae+EOf0Aio4ov40kdGmxB2SP
ISDom22k+0h8Z0A0+9AiyGIwnsJcisVbLXbxkABY4vH22gNXwVm1z+dLtcYXdxm6
3U3XSX0IVMgnnFMy/FLknp+yHEyKU4VIw9CHBlYw8QC/A0oWfpSXcOzJavOILSkZ
Vj1E2+dGQdWphotO6XxYeH3objajUKD1IADgaDLaWK+vp31fkmVICaTfPql7t2WP
ncrAJadbjMbLwhSj2dM+XWFB7ZwIjF4I5a5LJ4z2fnb77fW9jnLlemNO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOhIkCmLOtMmDeQ9IXcaxlwRfWLHMB8GA1UdIwQY
MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt
MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4
LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLcqY+Jt
Vjz6XrLLXAUyv3yB8uuZAj+Vv66/bMxpUBUIamSgMMgzBTouNEGuTP+fPqrolL/O
WHEVJu9pnb/6UpnMoCWcd1sjALY+4jNMXIKgIB6ZRZvVW3sjLOhmzfxRRtkUcoyV
NdDpSVpPS1rIituMphmaxgs6cLmxggqjKTd8Saay9coU5Ylu8+JCpPCrLvXqP+Ss
rnTJDkHKE34qezV4aqIeIKU1UJFX/n/cN/gyTxhagXcw7ugtt5/eBKDmV0Qo8HkJ
L5SZHDnknWKNQ26TtuSBbtJrXX/tZJ1/l+snTC3DLcAidMwo6ZHlpNAyJSUtsNGX
NlsL9pop56mERQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:19:35 2026 by rpki-client