Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
File: a09TDEYWY1E1ClclpwD7xdcchoA.mft (raw, json)
Hash identifier: QxPHGZxT12QohIYmHX8iJwI8tFC6c+nYUgx/NyppCt8=
Subject key identifier: 08:E1:FC:21:30:3E:F1:14:0C:50:9B:26:FB:E8:8E:31:F4:4F:37:84
Authority key identifier: 6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
Certificate issuer: /CN=6b4f530c46166351350a5725a700fbc5d71c8680
Certificate serial: 01A1A22521E032DAC10A99EEAE1D5543FE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
Manifest number: E0
Signing time: Tue 03 Nov 2026 16:01:44 +0000
Manifest this update: Tue 03 Nov 2026 16:01:44 +0000
Manifest next update: Wed 04 Nov 2026 16:01:44 +0000
Files and hashes: 1: XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa (hash: wwjL59OW3UC7V7CAOSmVDLYL1/AFybNZY6xPPQkXT94=)
2: a09TDEYWY1E1ClclpwD7xdcchoA.crl (hash: +6WdzpH4dlcYt013vDsiIdyazG4w0GMPZCxFToSl9Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:25:21:e0:32:da:c1:0a:99:ee:ae:1d:55:43:fe:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f530c46166351350a5725a700fbc5d71c8680
Validity
Not Before: Nov 3 16:01:44 2026 GMT
Not After : Nov 4 16:01:44 2026 GMT
Subject: CN=08e1fc21303ef1140c509b26fbe88e31f44f3784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:56:85:78:3b:21:8b:23:35:01:e4:37:58:58:
7d:3d:17:48:d9:86:2e:af:27:b3:6b:4d:9e:b5:ef:
42:7f:f1:6c:77:72:2b:ea:c5:6b:6a:c4:0f:a1:55:
74:63:59:aa:83:33:42:ba:98:31:bc:97:13:51:b4:
51:d5:4d:7a:8b:c6:76:ec:a9:7e:90:03:38:ed:c3:
a7:59:37:52:41:0d:5a:7e:89:ba:94:30:a1:02:d4:
dd:3f:78:86:3f:cd:61:d2:f8:46:78:e0:3d:86:ec:
d5:ee:b6:a3:06:59:ae:59:6a:1c:7a:26:3c:28:9a:
9d:d5:cd:34:61:e3:51:d6:b6:50:49:f4:92:62:2e:
5b:5d:a0:42:09:99:00:f3:a2:87:9b:3e:88:48:51:
2b:d8:db:3c:e2:53:3f:d4:53:bb:fa:20:9d:31:42:
da:2c:6c:20:10:16:b0:65:64:50:55:79:c0:e3:78:
f7:20:f3:78:ee:ff:96:11:89:ad:01:bd:35:14:d1:
68:e4:71:24:99:f9:47:8d:01:a8:10:01:d8:5b:44:
72:1e:9c:75:bb:40:ca:54:f1:6e:f2:e8:81:9a:da:
bd:81:3e:09:d9:03:bb:d0:69:61:1a:2e:bc:c0:09:
df:c5:01:29:5a:f4:03:10:b9:22:d6:2c:ee:39:49:
f1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E1:FC:21:30:3E:F1:14:0C:50:9B:26:FB:E8:8E:31:F4:4F:37:84
X509v3 Authority Key Identifier:
keyid:6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5a:1d:f0:49:01:9c:3c:67:84:33:23:2f:29:e5:16:82:e4:
c3:a8:72:76:23:7e:b5:2e:ba:7f:44:68:ee:45:3d:30:9c:40:
f9:dc:e7:b3:93:59:f9:27:68:ac:b1:8b:a3:fe:9d:f9:63:d8:
4a:d5:55:56:02:c9:2f:92:55:86:62:db:72:a5:87:8b:ab:ae:
0d:c1:1f:cd:08:a4:ed:70:59:74:41:f6:a6:3a:a7:c9:bf:77:
c1:47:b3:89:49:40:cb:29:e2:79:5b:cd:2e:d7:91:80:83:22:
4c:f0:cc:9e:9d:2a:3f:bd:c1:78:71:ba:14:27:e8:53:71:fa:
f9:1c:dd:fe:e4:92:ce:0d:f3:93:67:bb:55:fe:2a:a3:73:68:
f7:8b:a9:f2:5a:40:ba:cd:23:01:99:41:8e:a2:51:07:7e:23:
ca:ff:0a:8a:ba:08:e6:d0:b2:4f:0c:3e:b3:9f:f3:1e:3c:b2:
02:84:a1:1c:e1:29:29:4d:80:3e:ab:c7:aa:a0:84:06:94:19:
4a:07:1a:b1:4d:ce:b2:2f:48:30:bf:c7:61:85:5f:a1:16:55:
90:e7:e2:d6:6b:22:f7:ab:86:67:50:cb:06:d3:ca:62:2b:9d:
c7:72:11:62:66:a1:e0:c9:90:ef:b7:74:90:6c:dd:89:81:89:
d8:49:54:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGiJSHgMtrBCpnurh1VQ/5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGY1MzBjNDYxNjYzNTEzNTBhNTcyNWE3MDBmYmM1ZDcx
Yzg2ODAwHhcNMjYxMTAzMTYwMTQ0WhcNMjYxMTA0MTYwMTQ0WjAzMTEwLwYDVQQD
EygwOGUxZmMyMTMwM2VmMTE0MGM1MDliMjZmYmU4OGUzMWY0NGYzNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlaFeDshiyM1AeQ3WFh9PRdI2YYu
ryeza02ete9Cf/Fsd3Ir6sVrasQPoVV0Y1mqgzNCupgxvJcTUbRR1U16i8Z27Kl+
kAM47cOnWTdSQQ1afom6lDChAtTdP3iGP81h0vhGeOA9huzV7rajBlmuWWoceiY8
KJqd1c00YeNR1rZQSfSSYi5bXaBCCZkA86KHmz6ISFEr2Ns84lM/1FO7+iCdMULa
LGwgEBawZWRQVXnA43j3IPN47v+WEYmtAb01FNFo5HEkmflHjQGoEAHYW0RyHpx1
u0DKVPFu8uiBmtq9gT4J2QO70GlhGi68wAnfxQEpWvQDELki1izuOUnx9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjh/CEwPvEUDFCbJvvojjH0TzeEMB8GA1UdIwQY
MBaAFGtPUwxGFmNRNQpXJacA+8XXHIaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jNGQ5MDQtY2FhMC00OGRiLTgzMjkt
Yjg3MGI5ZWY4ZGQxLzEvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jNGQ5MDQtY2FhMC00OGRiLTgzMjktYjg3MGI5ZWY4ZGQx
LzEvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALVod8EkB
nDxnhDMjLynlFoLkw6hydiN+tS66f0Ro7kU9MJxA+dzns5NZ+SdorLGLo/6d+WPY
StVVVgLJL5JVhmLbcqWHi6uuDcEfzQik7XBZdEH2pjqnyb93wUeziUlAyynieVvN
LteRgIMiTPDMnp0qP73BeHG6FCfoU3H6+Rzd/uSSzg3zk2e7Vf4qo3No94up8lpA
us0jAZlBjqJRB34jyv8KiroI5tCyTww+s5/zHjyyAoShHOEpKU2APqvHqqCEBpQZ
SgcasU3Osi9IML/HYYVfoRZVkOfi1msi96uGZ1DLBtPKYiudx3IRYmah4MmQ77d0
kGzdiYGJ2ElUmw==
-----END CERTIFICATE-----
Generated at Wed Nov 4 01:14:43 2026 by rpki-client