
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
File: MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft (raw, json)
Hash identifier: NcDcupe/pxgZ1pC9IlelRctZeJUFOop9s4fmHrjtlaw=
Subject key identifier: BB:10:EE:67:13:3E:0E:BF:20:85:70:D8:05:01:B6:13:FA:30:99:EF
Authority key identifier: 32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
Certificate issuer: /CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Certificate serial: 01A14203A111C2772C459E5E152DA6A907A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
Manifest number: 0120
Signing time: Fri 16 Oct 2026 00:01:36 +0000
Manifest this update: Fri 16 Oct 2026 00:01:36 +0000
Manifest next update: Sat 17 Oct 2026 00:01:36 +0000
Files and hashes: 1: MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl (hash: ILC55fCuxi7PywERbA1lXUGRnd9PR3+gBBoDUozvn+M=)
2: kFL249yBJc4sSXnfovKwJ6mjCww.roa (hash: HJelDmFXzIdgkYrGpNACjTkxKKW9AU78etwdV7+OHDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:03:a1:11:c2:77:2c:45:9e:5e:15:2d:a6:a9:07:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Validity
Not Before: Oct 16 00:01:36 2026 GMT
Not After : Oct 17 00:01:36 2026 GMT
Subject: CN=bb10ee67133e0ebf208570d80501b613fa3099ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:2f:11:5d:7d:56:51:99:52:f8:bd:2f:be:
ee:05:28:c3:d4:20:5b:49:55:ba:ee:ca:41:52:92:
3f:06:f1:fe:09:b2:60:de:a0:ad:2b:0b:ad:2e:a5:
cd:84:17:d2:47:e0:b1:f8:6b:e2:a3:18:bf:ac:1f:
2a:e4:36:46:a7:ee:74:6e:2c:c7:56:a6:02:c4:ae:
19:58:09:87:4c:93:64:9d:20:eb:4f:5c:ff:c4:ec:
e5:74:c8:be:c5:f5:f1:0a:2b:0c:ba:82:28:84:ae:
45:f0:a6:8c:e5:11:83:92:13:ef:47:fc:f6:7c:c3:
86:b4:53:e2:4d:96:2a:e2:c1:73:ee:01:d5:ed:21:
1c:81:58:63:92:2e:1d:c5:af:e3:31:bd:ba:23:95:
9f:70:05:f0:86:26:72:c1:26:e3:d6:90:9e:0f:f2:
d9:3a:35:1c:c4:46:23:ea:e9:0e:d2:b5:94:70:1f:
bf:35:44:30:e6:52:56:60:bd:ca:b1:27:6f:fe:a5:
b7:30:2e:6b:92:37:e5:49:b2:c7:81:2b:57:10:77:
f0:e6:7c:6b:74:47:76:b8:08:84:63:ae:25:86:bc:
54:20:11:94:f3:ac:4b:ea:fd:a8:08:30:56:5b:6f:
c3:73:33:1c:73:4d:99:18:1a:70:e1:99:9a:f1:b2:
d6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:EE:67:13:3E:0E:BF:20:85:70:D8:05:01:B6:13:FA:30:99:EF
X509v3 Authority Key Identifier:
keyid:32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e9:57:1e:b5:61:ce:e0:e8:4d:13:3c:f2:40:e2:5f:40:30:
90:e3:4d:84:2f:8f:b5:a6:44:41:b7:ef:47:fa:5a:40:d2:a3:
f3:08:42:94:80:ab:18:8f:5b:f6:5b:e4:99:b8:94:ea:b1:e1:
98:ed:94:db:73:00:1b:28:67:fe:6c:a2:26:3d:5f:59:e5:32:
a8:16:70:5f:e7:73:b6:bd:b2:54:bc:5b:15:85:73:55:5a:82:
6b:02:6e:b5:26:51:fc:8c:32:54:2e:c5:6e:5d:eb:89:08:b6:
73:67:f9:f9:41:eb:5b:d3:22:8d:f2:81:71:a6:67:36:08:5c:
b1:c4:07:b8:c0:18:ce:ec:a3:a5:2d:4b:38:10:d4:c6:5c:bf:
a6:d9:02:ce:ba:ed:e3:02:70:44:00:6b:40:f0:7c:be:15:06:
47:07:2a:3d:26:5c:b5:f3:26:69:c4:e1:25:d2:a3:b5:8f:be:
1d:89:8b:d3:65:55:fc:1a:6a:59:47:4c:e2:2c:f1:17:8a:2f:
8a:52:5a:a1:9d:d0:59:76:7f:48:4a:c2:eb:c4:c1:f4:26:5c:
3a:c5:8b:ed:4e:86:d1:a4:d8:e4:0d:1b:f6:63:bf:4a:e1:3e:
07:e9:e8:e4:8c:b6:37:6e:0e:6c:41:5c:32:0c:5c:a4:7c:77:
61:7a:86:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFCA6ERwncsRZ5eFS2mqQenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMjBjZDZjZjNmODY1ZWY2Y2ZhMDQyMjJjMjIzY2YyMGVl
N2UwNDgwHhcNMjYxMDE2MDAwMTM2WhcNMjYxMDE3MDAwMTM2WjAzMTEwLwYDVQQD
EyhiYjEwZWU2NzEzM2UwZWJmMjA4NTcwZDgwNTAxYjYxM2ZhMzA5OWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZkvEV19VlGZUvi9L77uBSjD1CBb
SVW67spBUpI/BvH+CbJg3qCtKwutLqXNhBfSR+Cx+Gvioxi/rB8q5DZGp+50bizH
VqYCxK4ZWAmHTJNknSDrT1z/xOzldMi+xfXxCisMuoIohK5F8KaM5RGDkhPvR/z2
fMOGtFPiTZYq4sFz7gHV7SEcgVhjki4dxa/jMb26I5WfcAXwhiZywSbj1pCeD/LZ
OjUcxEYj6ukO0rWUcB+/NUQw5lJWYL3KsSdv/qW3MC5rkjflSbLHgStXEHfw5nxr
dEd2uAiEY64lhrxUIBGU86xL6v2oCDBWW2/DczMcc02ZGBpw4Zma8bLWXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsQ7mcTPg6/IIVw2AUBthP6MJnvMB8GA1UdIwQY
MBaAFDIgzWzz+GXvbPoEIiwiPPIO5+BIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWlETmJQUDRaZTlzLWdRaUxDSTg4ZzduNEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYt
MTczODI1MzliMDAwLzEvTWlETmJQUDRaZTlzLWdRaUxDSTg4ZzduNEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZjIxOTItZjJkOS00YTU2LTkzZjYtMTczODI1MzliMDAw
LzEvTWlETmJQUDRaZTlzLWdRaUxDSTg4ZzduNEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOlXHrVh
zuDoTRM88kDiX0AwkONNhC+PtaZEQbfvR/paQNKj8whClICrGI9b9lvkmbiU6rHh
mO2U23MAGyhn/myiJj1fWeUyqBZwX+dztr2yVLxbFYVzVVqCawJutSZR/IwyVC7F
bl3riQi2c2f5+UHrW9MijfKBcaZnNghcscQHuMAYzuyjpS1LOBDUxly/ptkCzrrt
4wJwRABrQPB8vhUGRwcqPSZctfMmacThJdKjtY++HYmL02VV/BpqWUdM4izxF4ov
ilJaoZ3QWXZ/SErC68TB9CZcOsWL7U6G0aTY5A0b9mO/SuE+B+no5Iy2N24ObEFc
MgxcpHx3YXqGxA==
-----END CERTIFICATE-----
Generated at Fri Oct 16 08:02:58 2026 by rpki-client