Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
File: a09TDEYWY1E1ClclpwD7xdcchoA.mft (raw, json)
Hash identifier: zFcTXRRLCKXXpyciUCKTb8O7HbVfKcOPSBxx+TMocJU=
Subject key identifier: A5:BD:78:BA:9A:BB:7A:E8:06:8D:87:CF:27:75:8B:C6:C9:7A:64:34
Authority key identifier: 6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
Certificate issuer: /CN=6b4f530c46166351350a5725a700fbc5d71c8680
Certificate serial: 01A1968E401995056F326A1405492527025D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
Manifest number: DA
Signing time: Sun 01 Nov 2026 10:01:07 +0000
Manifest this update: Sun 01 Nov 2026 10:01:07 +0000
Manifest next update: Mon 02 Nov 2026 10:01:07 +0000
Files and hashes: 1: XqJMbW2vk4W1hoGUE-ij3mmWaU8.roa (hash: wwjL59OW3UC7V7CAOSmVDLYL1/AFybNZY6xPPQkXT94=)
2: a09TDEYWY1E1ClclpwD7xdcchoA.crl (hash: gbBvXgoK6yHt9EopO4fThbYZE2Lg8uyauHutxHMhuco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:8e:40:19:95:05:6f:32:6a:14:05:49:25:27:02:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f530c46166351350a5725a700fbc5d71c8680
Validity
Not Before: Nov 1 10:01:07 2026 GMT
Not After : Nov 2 10:01:07 2026 GMT
Subject: CN=a5bd78ba9abb7ae8068d87cf27758bc6c97a6434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7c:ec:49:70:56:7f:6f:c9:ce:5e:c5:ca:76:
36:0b:bf:3e:e1:4f:b6:be:42:e4:ba:d9:11:91:6c:
18:f6:80:bf:58:b1:de:c5:49:03:9b:15:47:68:73:
1b:d2:71:11:81:0e:9a:5a:9e:94:d0:b9:e5:6b:1b:
51:46:e9:ee:0d:d3:dc:28:fb:3e:28:95:6b:ff:ee:
fe:ef:76:6b:1a:0e:a5:7f:10:39:62:0a:3d:0d:41:
58:30:5e:03:9f:a2:fb:8d:c0:e5:9f:2b:e0:0e:d1:
aa:88:f3:a0:a0:42:a2:d5:e1:2c:c8:8e:a8:4d:49:
cb:c4:17:d7:10:db:1e:f6:44:35:d9:05:13:15:07:
8c:12:51:2d:fe:73:41:90:77:c1:87:b9:1a:b8:4c:
68:7a:7a:0d:c2:1e:42:91:58:7c:3e:2e:bf:b6:0b:
6b:d5:82:f9:db:a2:32:62:cc:9e:15:a7:8f:4a:76:
39:38:1d:ad:2c:cf:8d:b1:5e:9b:d6:a5:6c:93:95:
26:67:3a:f8:27:65:b2:8e:64:dd:f9:91:76:71:d3:
f5:37:4a:c1:5c:30:bb:6e:0d:b2:1a:c2:ed:c8:ae:
07:fe:b1:68:72:2a:5e:48:54:72:24:df:53:92:95:
20:ab:a0:d5:90:a8:af:69:64:6d:26:a2:e4:04:cd:
91:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:78:BA:9A:BB:7A:E8:06:8D:87:CF:27:75:8B:C6:C9:7A:64:34
X509v3 Authority Key Identifier:
keyid:6B:4F:53:0C:46:16:63:51:35:0A:57:25:A7:00:FB:C5:D7:1C:86:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a09TDEYWY1E1ClclpwD7xdcchoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c4d904-caa0-48db-8329-b870b9ef8dd1/1/a09TDEYWY1E1ClclpwD7xdcchoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:27:86:97:a4:0a:50:17:f2:b1:ca:32:1b:83:cc:33:7b:28:
0f:d7:58:47:e8:4f:08:5f:da:c9:25:70:0d:da:e5:5a:7e:cc:
64:8f:67:03:c4:00:77:4f:58:a7:1f:2d:16:ed:41:9f:d2:69:
13:f2:a6:3f:b1:26:da:d6:61:73:ce:e9:fc:a3:f0:8c:ec:b0:
09:f2:86:21:03:e8:66:81:4a:fd:20:c9:9d:1a:f3:b3:7e:31:
95:a1:b7:f5:3f:52:4a:bc:ef:42:e5:2f:94:07:42:e4:98:9f:
28:ae:e3:41:77:0e:40:96:44:8a:d0:55:9e:64:56:29:29:af:
57:9b:33:aa:f6:ad:27:3c:93:e3:00:b5:37:ba:b2:bb:2e:85:
2a:97:ac:ba:31:32:0f:a9:f3:43:c5:6b:56:be:07:3c:de:44:
0f:8e:82:1e:6b:46:89:97:e1:06:84:a6:fb:50:5c:35:08:cf:
14:bf:4a:da:54:99:29:61:58:63:9a:f4:11:23:3f:fe:22:d4:
f2:b5:c5:31:b6:6c:49:bc:b3:e4:ce:aa:c8:3d:5c:23:ac:ae:
c3:08:6a:9b:ac:00:d3:78:33:18:7b:2e:2a:a7:42:25:f8:f9:
1a:cc:c1:c9:10:c4:05:69:0d:0d:47:bf:d9:b0:2e:f4:10:9d:
12:34:4e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGWjkAZlQVvMmoUBUklJwJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGY1MzBjNDYxNjYzNTEzNTBhNTcyNWE3MDBmYmM1ZDcx
Yzg2ODAwHhcNMjYxMTAxMTAwMTA3WhcNMjYxMTAyMTAwMTA3WjAzMTEwLwYDVQQD
EyhhNWJkNzhiYTlhYmI3YWU4MDY4ZDg3Y2YyNzc1OGJjNmM5N2E2NDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHzsSXBWf2/Jzl7FynY2C78+4U+2
vkLkutkRkWwY9oC/WLHexUkDmxVHaHMb0nERgQ6aWp6U0LnlaxtRRunuDdPcKPs+
KJVr/+7+73ZrGg6lfxA5Ygo9DUFYMF4Dn6L7jcDlnyvgDtGqiPOgoEKi1eEsyI6o
TUnLxBfXENse9kQ12QUTFQeMElEt/nNBkHfBh7kauExoenoNwh5CkVh8Pi6/tgtr
1YL526IyYsyeFaePSnY5OB2tLM+NsV6b1qVsk5UmZzr4J2WyjmTd+ZF2cdP1N0rB
XDC7bg2yGsLtyK4H/rFocipeSFRyJN9TkpUgq6DVkKivaWRtJqLkBM2R1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKW9eLqau3roBo2Hzyd1i8bJemQ0MB8GA1UdIwQY
MBaAFGtPUwxGFmNRNQpXJacA+8XXHIaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jNGQ5MDQtY2FhMC00OGRiLTgzMjkt
Yjg3MGI5ZWY4ZGQxLzEvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jNGQ5MDQtY2FhMC00OGRiLTgzMjktYjg3MGI5ZWY4ZGQx
LzEvYTA5VERFWVdZMUUxQ2xjbHB3RDd4ZGNjaG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCeGl6QK
UBfyscoyG4PMM3soD9dYR+hPCF/aySVwDdrlWn7MZI9nA8QAd09Ypx8tFu1Bn9Jp
E/KmP7Em2tZhc87p/KPwjOywCfKGIQPoZoFK/SDJnRrzs34xlaG39T9SSrzvQuUv
lAdC5JifKK7jQXcOQJZEitBVnmRWKSmvV5szqvatJzyT4wC1N7qyuy6FKpesujEy
D6nzQ8VrVr4HPN5ED46CHmtGiZfhBoSm+1BcNQjPFL9K2lSZKWFYY5r0ESM//iLU
8rXFMbZsSbyz5M6qyD1cI6yuwwhqm6wA03gzGHsuKqdCJfj5GszByRDEBWkNDUe/
2bAu9BCdEjROZg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 19:53:16 2026 by rpki-client