Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
File: 937JWiBMO1gCWeG0L6kOF8b0NdY.mft (raw, json)
Hash identifier: QPc5FTz+gpdS78pXQqkpKh9Unten7/ejNWSQ2Wrq1YU=
Subject key identifier: 28:97:C9:E8:B8:C4:78:48:64:08:51:95:BE:B4:2C:63:9D:3E:87:4F
Authority key identifier: F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6
Certificate issuer: /CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
Certificate serial: 01A1694747EE90D07F2626B52B0C85713069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
Manifest number: 01CA
Signing time: Fri 23 Oct 2026 15:00:41 +0000
Manifest this update: Fri 23 Oct 2026 15:00:41 +0000
Manifest next update: Sat 24 Oct 2026 15:00:41 +0000
Files and hashes: 1: 937JWiBMO1gCWeG0L6kOF8b0NdY.crl (hash: XivrjfiAdh5iFSTmxWEKp/rdk5mB3Inr5lQ6FeSSuMQ=)
2: XqcpVCeX0-cvU-SqoEfBG7M0CYI.roa (hash: Um6sqZHxrN2dTouXpZfutLZlTxwDMybqIAW6glre92s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:47:47:ee:90:d0:7f:26:26:b5:2b:0c:85:71:30:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77ec95a204c3b580259e1b42fa90e17c6f435d6
Validity
Not Before: Oct 23 15:00:41 2026 GMT
Not After : Oct 24 15:00:41 2026 GMT
Subject: CN=2897c9e8b8c4784864085195beb42c639d3e874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:e4:11:f6:6e:a7:83:2a:0e:cd:9c:eb:72:
8c:be:3c:b8:2f:60:18:6f:09:05:3f:c1:92:ee:9a:
63:c9:fc:de:67:57:f3:36:c8:a6:5f:77:fb:c1:e5:
03:1e:f9:55:f7:ff:20:b3:6a:d4:40:38:78:2d:fc:
1d:91:39:83:d4:06:86:27:cb:9f:84:12:5b:be:ca:
d1:ad:53:81:3c:7c:1f:0e:a5:f3:08:3d:fe:ac:83:
1a:5c:6f:1b:66:d4:fc:4e:2f:49:d0:7f:03:a9:4b:
04:1c:60:89:e8:90:42:79:e0:fc:ff:f2:14:5e:3a:
af:ae:1a:12:4c:48:ed:68:09:89:f9:10:88:50:94:
dc:76:53:ed:c1:f2:a9:1a:bc:07:4e:c2:d4:55:45:
e2:39:60:63:71:17:1f:cc:d1:b3:2d:b5:1c:2e:30:
75:47:54:fe:bb:e8:8b:0c:da:e6:31:e8:05:fd:27:
55:7c:1a:f9:65:72:3d:63:40:87:43:45:1d:45:8e:
3b:4d:ea:b4:dd:94:39:23:9c:43:9a:ac:e5:75:19:
93:59:d7:d9:54:29:4b:f5:75:71:8a:62:3a:e2:5a:
b5:ce:2f:ef:5b:34:ec:2d:36:d7:b2:a2:c4:3e:8e:
b6:06:57:cc:e2:1c:44:e9:69:99:92:7d:1e:ed:61:
e5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:97:C9:E8:B8:C4:78:48:64:08:51:95:BE:B4:2C:63:9D:3E:87:4F
X509v3 Authority Key Identifier:
keyid:F7:7E:C9:5A:20:4C:3B:58:02:59:E1:B4:2F:A9:0E:17:C6:F4:35:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/937JWiBMO1gCWeG0L6kOF8b0NdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9da4e6-ed0e-4cc6-80ca-e6034edccf52/1/937JWiBMO1gCWeG0L6kOF8b0NdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4c:06:f0:19:a0:80:f8:dc:4c:06:1a:ae:39:f0:70:46:5f:
2f:e7:d2:84:9d:fa:bf:b1:bf:ef:39:4f:4a:e7:8c:46:af:94:
3f:65:89:91:45:0f:a1:d1:31:ec:48:f4:b1:46:4f:70:53:d4:
f4:bb:01:b4:7f:a2:b6:85:df:97:c8:30:18:3a:2f:c3:a2:59:
51:90:ca:94:7b:49:95:f8:ac:fd:14:b4:96:2f:26:c8:c7:a2:
c1:19:ae:ae:1e:50:1c:30:88:43:dc:35:3a:09:0c:7f:da:45:
5f:d3:74:68:05:bc:16:5e:82:29:26:00:b0:83:e5:6c:aa:b8:
08:d3:29:ba:b3:16:df:3e:45:b8:16:b3:70:c8:04:05:a9:ee:
79:c8:d5:e1:44:50:b0:84:42:a2:ca:f2:ee:2b:fe:03:a3:80:
4e:75:de:66:4a:af:f3:b0:8e:7c:9a:45:3f:6f:9a:d4:ef:dd:
c6:03:99:21:f9:64:dc:fa:29:a1:5d:7b:be:ec:d6:ca:50:69:
de:72:c6:5f:21:4f:1e:c3:b4:4e:d2:f6:35:fe:0f:b4:b9:56:
48:5d:11:c9:91:57:8b:8f:f1:df:e0:ca:00:10:47:32:90:85:
55:21:b6:46:94:1b:1c:13:ac:7b:99:5b:c1:65:83:04:91:e1:
49:4f:6c:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFpR0fukNB/Jia1KwyFcTBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3N2VjOTVhMjA0YzNiNTgwMjU5ZTFiNDJmYTkwZTE3YzZm
NDM1ZDYwHhcNMjYxMDIzMTUwMDQxWhcNMjYxMDI0MTUwMDQxWjAzMTEwLwYDVQQD
EygyODk3YzllOGI4YzQ3ODQ4NjQwODUxOTViZWI0MmM2MzlkM2U4NzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NLkEfZup4MqDs2c63KMvjy4L2AY
bwkFP8GS7ppjyfzeZ1fzNsimX3f7weUDHvlV9/8gs2rUQDh4LfwdkTmD1AaGJ8uf
hBJbvsrRrVOBPHwfDqXzCD3+rIMaXG8bZtT8Ti9J0H8DqUsEHGCJ6JBCeeD8//IU
XjqvrhoSTEjtaAmJ+RCIUJTcdlPtwfKpGrwHTsLUVUXiOWBjcRcfzNGzLbUcLjB1
R1T+u+iLDNrmMegF/SdVfBr5ZXI9Y0CHQ0UdRY47Teq03ZQ5I5xDmqzldRmTWdfZ
VClL9XVximI64lq1zi/vWzTsLTbXsqLEPo62BlfM4hxE6WmZkn0e7WHl/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiXyei4xHhIZAhRlb60LGOdPodPMB8GA1UdIwQY
MBaAFPd+yVogTDtYAlnhtC+pDhfG9DXWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ZGE0ZTYtZWQwZS00Y2M2LTgwY2Et
ZTYwMzRlZGNjZjUyLzEvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ZGE0ZTYtZWQwZS00Y2M2LTgwY2EtZTYwMzRlZGNjZjUy
LzEvOTM3SldpQk1PMWdDV2VHMEw2a09GOGIwTmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0wG8Bmg
gPjcTAYarjnwcEZfL+fShJ36v7G/7zlPSueMRq+UP2WJkUUPodEx7Ej0sUZPcFPU
9LsBtH+itoXfl8gwGDovw6JZUZDKlHtJlfis/RS0li8myMeiwRmurh5QHDCIQ9w1
OgkMf9pFX9N0aAW8Fl6CKSYAsIPlbKq4CNMpurMW3z5FuBazcMgEBanuecjV4URQ
sIRCosry7iv+A6OATnXeZkqv87COfJpFP2+a1O/dxgOZIflk3PopoV17vuzWylBp
3nLGXyFPHsO0TtL2Nf4PtLlWSF0RyZFXi4/x3+DKABBHMpCFVSG2RpQbHBOse5lb
wWWDBJHhSU9s1Q==
-----END CERTIFICATE-----
Generated at Fri Oct 23 20:34:18 2026 by rpki-client