Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
File: cK01PMGg0W1ejhSjdXWm89YFY_g.mft (raw, json)
Hash identifier: OQwRkjG6KqHhS9lqLj9Hln6z0eqsFiT9k7dIwIOVsVk=
Subject key identifier: 6A:9C:A7:98:83:5E:40:7B:D4:E4:F0:9E:B1:D4:AB:42:1E:A1:97:0B
Authority key identifier: 70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
Certificate issuer: /CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Certificate serial: 01A17EF4482AE3AEAC6CEA8E9F123C9CA812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 20:01:40 +0000
Manifest this update: Tue 27 Oct 2026 20:01:40 +0000
Manifest next update: Wed 28 Oct 2026 20:01:40 +0000
Files and hashes: 1: N4mZn2yk8YP_gXohWnBQWYlSt0g.asa (hash: RnHGDbrdo5NYjOwiFA/EE2zdRQ3mHt7+S/1unCOrs8U=)
2: NB9VsHBRBEiYw3McIpBpW336Ki4.roa (hash: RFYXt5Z4dlbdvwt6pd136hK2qoU5DGTk7ZrYTY6dsB8=)
3: YswYZYlKWOyRavy0ATCTvPfm9wQ.roa (hash: aGrODVPH+/3IzPSKFduvxP2Zeu3f9DRc9hp0rYqfO0U=)
4: cK01PMGg0W1ejhSjdXWm89YFY_g.crl (hash: UWl5uf3g7s1jFEULttGysfCNE3OiqAA0t4cVA/da46A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:48:2a:e3:ae:ac:6c:ea:8e:9f:12:3c:9c:a8:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ad353cc1a0d16d5e8e14a37575a6f3d60563f8
Validity
Not Before: Oct 27 20:01:40 2026 GMT
Not After : Oct 28 20:01:40 2026 GMT
Subject: CN=6a9ca798835e407bd4e4f09eb1d4ab421ea1970b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:0e:eb:25:02:86:28:50:9c:f4:fa:9a:0b:
34:8b:6f:de:c3:18:97:e1:fe:5e:ff:1a:5e:50:84:
f8:28:bb:f6:c6:0c:01:49:d9:cf:d7:a9:b9:df:ee:
6d:64:ea:c3:81:ae:e4:9b:70:b4:81:8f:f3:fa:91:
50:45:9d:01:24:01:c8:ff:00:c5:6b:d3:c3:33:1d:
63:88:ec:08:e1:81:0d:09:a9:c8:60:73:c3:9a:36:
f7:e1:89:a3:07:33:56:38:9a:1c:11:bf:c8:c3:d3:
5d:28:cd:d6:b2:5c:a2:cf:cc:a0:ab:35:20:78:20:
40:ff:6a:a4:49:73:65:61:c9:4f:45:ac:04:3e:77:
f1:41:23:23:01:85:9a:ba:0e:c6:eb:f1:00:2f:15:
8f:1f:b9:06:69:db:77:0e:eb:5f:73:a8:91:7c:bf:
c5:50:c5:11:66:23:58:5c:43:80:fb:4c:00:40:04:
02:f3:21:92:5c:1c:ea:48:ca:6b:50:6c:6f:6d:e1:
fb:5e:a9:61:06:d8:ea:98:7e:b0:20:63:dc:47:81:
56:85:30:38:de:2f:a7:43:d8:4c:c1:a5:5d:1a:b8:
bd:30:58:fa:b8:92:5a:31:10:1f:cc:74:ec:57:ac:
12:09:2b:db:50:9a:76:45:17:b4:b6:db:09:5e:19:
9e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:A7:98:83:5E:40:7B:D4:E4:F0:9E:B1:D4:AB:42:1E:A1:97:0B
X509v3 Authority Key Identifier:
keyid:70:AD:35:3C:C1:A0:D1:6D:5E:8E:14:A3:75:75:A6:F3:D6:05:63:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cK01PMGg0W1ejhSjdXWm89YFY_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e26d9c-d851-4a69-95f9-1504ea53e255/1/cK01PMGg0W1ejhSjdXWm89YFY_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4e:31:8f:11:7e:5c:a0:c6:8d:01:b7:c0:f0:92:96:e5:10:
06:5e:30:2f:53:b0:c7:ed:17:19:b5:b0:8c:23:4f:27:a2:7d:
23:c3:41:96:1d:ce:0b:27:f9:48:8e:82:3c:9a:8b:fb:58:09:
5e:15:ea:14:da:fe:c9:0a:9e:0e:db:f0:56:21:b8:bb:2a:a5:
23:eb:5b:45:94:6e:29:d0:d2:69:26:4a:15:06:b3:cf:ab:cf:
45:18:95:7f:1b:c0:13:5d:7f:11:ce:39:65:b3:66:08:36:2f:
88:1c:39:9e:37:27:bc:a4:fb:35:20:a4:9a:74:86:46:e7:40:
32:55:f1:73:a5:48:f8:33:3c:35:f7:32:33:58:e7:a7:54:7b:
09:15:2b:bb:3a:e1:0a:e0:86:a0:7f:c4:34:49:ab:db:1c:36:
e5:d6:5f:7c:d8:68:a2:99:a2:69:ac:89:f1:97:b4:6c:be:b8:
47:84:25:11:93:53:b5:64:65:0f:f1:f0:a7:9b:72:28:e4:a5:
9e:96:10:3c:36:61:6c:85:c5:9f:d0:94:da:2e:67:c9:c3:b9:
1c:7f:5b:8e:b4:6d:61:a5:1a:9f:dc:5a:31:f9:19:38:1f:31:
29:61:6e:01:c0:1d:bc:37:01:4e:32:34:2b:e2:e4:04:5b:e8:
a8:ff:fb:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+9Egq466sbOqOnxI8nKgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYWQzNTNjYzFhMGQxNmQ1ZThlMTRhMzc1NzVhNmYzZDYw
NTYzZjgwHhcNMjYxMDI3MjAwMTQwWhcNMjYxMDI4MjAwMTQwWjAzMTEwLwYDVQQD
Eyg2YTljYTc5ODgzNWU0MDdiZDRlNGYwOWViMWQ0YWI0MjFlYTE5NzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5wO6yUChihQnPT6mgs0i2/ewxiX
4f5e/xpeUIT4KLv2xgwBSdnP16m53+5tZOrDga7km3C0gY/z+pFQRZ0BJAHI/wDF
a9PDMx1jiOwI4YENCanIYHPDmjb34YmjBzNWOJocEb/Iw9NdKM3Wslyiz8ygqzUg
eCBA/2qkSXNlYclPRawEPnfxQSMjAYWaug7G6/EALxWPH7kGadt3Dutfc6iRfL/F
UMURZiNYXEOA+0wAQAQC8yGSXBzqSMprUGxvbeH7XqlhBtjqmH6wIGPcR4FWhTA4
3i+nQ9hMwaVdGri9MFj6uJJaMRAfzHTsV6wSCSvbUJp2RRe0ttsJXhme/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqcp5iDXkB71OTwnrHUq0IeoZcLMB8GA1UdIwQY
MBaAFHCtNTzBoNFtXo4Uo3V1pvPWBWP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1Zjkt
MTUwNGVhNTNlMjU1LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMjZkOWMtZDg1MS00YTY5LTk1ZjktMTUwNGVhNTNlMjU1
LzEvY0swMVBNR2cwVzFlamhTamRYV204OVlGWV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoU4xjxF+
XKDGjQG3wPCSluUQBl4wL1Owx+0XGbWwjCNPJ6J9I8NBlh3OCyf5SI6CPJqL+1gJ
XhXqFNr+yQqeDtvwViG4uyqlI+tbRZRuKdDSaSZKFQazz6vPRRiVfxvAE11/Ec45
ZbNmCDYviBw5njcnvKT7NSCkmnSGRudAMlXxc6VI+DM8NfcyM1jnp1R7CRUruzrh
CuCGoH/ENEmr2xw25dZffNhoopmiaayJ8Ze0bL64R4QlEZNTtWRlD/Hwp5tyKOSl
npYQPDZhbIXFn9CU2i5nycO5HH9bjrRtYaUan9xaMfkZOB8xKWFuAcAdvDcBTjI0
K+LkBFvoqP/7+w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 23:04:02 2026 by rpki-client