Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
File: 1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft (raw, json)
Hash identifier: Qn3p+3jcwqUME5U9rKXHguBoptA6oxuqr5Pu1Zao2rQ=
Subject key identifier: 00:F3:A0:28:CC:FF:C3:53:19:BE:54:66:D3:D7:22:54:E4:25:4E:8A
Authority key identifier: D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
Certificate issuer: /CN=d66d02c2de23ecfafa1bf6e69aaf0a053ad2a937
Certificate serial: 01A1769583E8A19F96B3D73A285D4976C9A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 05:01:12 +0000
Manifest this update: Mon 26 Oct 2026 05:01:12 +0000
Manifest next update: Tue 27 Oct 2026 05:01:12 +0000
Files and hashes: 1: 1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl (hash: NMLj4vy0sgb9Lxwtra1uIGct3LWW+vU9u4mBSUDQeEs=)
2: hMarOzjNa2uxI8It-wCPwhewjWo.roa (hash: gB5bYavb7EtB4+yn9c+a+9zhOOm6c6i62Jr+VY6qKDs=)
3: yA2CQChnx3EpiN_3TuOHVzDA_Dc.roa (hash: JvGltTZCmUOve8Ou1vnPFV1Ww+E5BNMMbd0O8++rizE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:83:e8:a1:9f:96:b3:d7:3a:28:5d:49:76:c9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66d02c2de23ecfafa1bf6e69aaf0a053ad2a937
Validity
Not Before: Oct 26 05:01:12 2026 GMT
Not After : Oct 27 05:01:12 2026 GMT
Subject: CN=00f3a028ccffc35319be5466d3d72254e4254e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:39:c4:23:8c:85:a7:bf:d3:2d:73:a6:cf:
27:26:5d:b1:35:53:3c:df:dc:c5:d0:b8:01:d6:1d:
b7:35:26:79:4a:8d:58:04:5b:8c:ac:28:f4:36:90:
1e:b2:4a:36:b4:89:f3:6a:5a:59:dc:1e:4e:73:d2:
c4:08:fe:82:f4:b9:d2:1f:36:da:83:2a:33:5a:95:
22:77:a5:e9:7f:8f:14:40:1b:73:ac:f7:6f:2f:40:
80:bc:ca:75:7c:1c:6b:cb:79:49:9f:cb:fd:18:02:
7b:fd:6b:da:dc:ee:e9:1b:18:31:8b:0d:93:3a:a1:
32:7e:13:f7:08:3f:8b:27:9a:df:86:3c:78:ba:8d:
00:bf:d3:ca:db:5b:5a:b6:37:92:13:98:a4:f1:4b:
96:02:b6:9e:f7:2d:6e:29:55:dc:ba:71:58:98:6c:
a7:47:17:74:86:c3:93:7c:d9:5c:96:87:5d:13:4d:
66:56:52:b5:da:16:8e:07:e3:d2:c1:ef:b4:a1:71:
68:fe:1b:51:56:64:b3:31:50:25:7a:f4:60:ff:fa:
84:93:f9:52:fa:e9:b8:1b:05:f5:f8:af:bf:93:a3:
2d:ce:ae:74:06:4b:37:55:e4:c5:02:df:01:20:b2:
cd:1d:e7:23:59:54:90:1d:92:6e:7b:49:9c:1f:87:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F3:A0:28:CC:FF:C3:53:19:BE:54:66:D3:D7:22:54:E4:25:4E:8A
X509v3 Authority Key Identifier:
keyid:D6:6D:02:C2:DE:23:EC:FA:FA:1B:F6:E6:9A:AF:0A:05:3A:D2:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/afa106-6af8-4310-b4d4-e369d6602e6f/1/1m0Cwt4j7Pr6G_bmmq8KBTrSqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f1:fd:4c:9b:7c:d4:5e:25:36:51:d7:5b:8d:50:bf:f4:0b:
51:45:bc:b0:43:8b:b9:44:f1:fe:dd:7a:ae:5c:38:b4:14:7d:
71:9d:68:07:a2:8b:44:80:8e:97:56:57:01:f4:bc:b0:f4:90:
ea:0e:62:57:44:ef:c9:5e:5a:de:a6:eb:dc:4f:06:4b:99:db:
43:c3:a6:ef:7b:82:3f:78:b7:25:df:ad:cd:34:5c:eb:9c:f2:
e6:87:8e:56:e6:fa:c0:70:a2:cb:47:d5:54:34:85:59:1f:93:
b3:db:d7:af:cb:c1:b9:92:1e:34:50:2f:33:4f:19:4e:e5:93:
fb:8f:d5:d3:22:b6:ad:9c:69:a7:c1:7a:1c:47:0b:b3:34:f8:
41:1a:a7:9e:ce:d1:89:df:d9:4c:a6:e4:ed:45:bd:8c:b5:db:
08:2d:fd:71:a0:72:4a:b7:29:d8:70:fd:ad:c3:c3:12:13:2c:
ed:09:0f:47:be:54:ff:e0:50:a2:28:18:45:f1:ee:a2:6a:53:
67:8e:b9:7a:c3:80:12:e1:67:cf:57:6d:ce:c1:21:61:5f:41:
62:21:aa:e4:91:79:5f:c2:b9:08:1e:50:2b:4f:9a:01:dd:7d:
87:67:6f:34:a4:39:bf:4f:21:d8:10:ac:7c:50:26:d4:62:82:
1e:d9:83:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2lYPooZ+Ws9c6KF1JdsmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmQwMmMyZGUyM2VjZmFmYTFiZjZlNjlhYWYwYTA1M2Fk
MmE5MzcwHhcNMjYxMDI2MDUwMTEyWhcNMjYxMDI3MDUwMTEyWjAzMTEwLwYDVQQD
EygwMGYzYTAyOGNjZmZjMzUzMTliZTU0NjZkM2Q3MjI1NGU0MjU0ZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Q5xCOMhae/0y1zps8nJl2xNVM8
39zF0LgB1h23NSZ5So1YBFuMrCj0NpAesko2tInzalpZ3B5Oc9LECP6C9LnSHzba
gyozWpUid6Xpf48UQBtzrPdvL0CAvMp1fBxry3lJn8v9GAJ7/Wva3O7pGxgxiw2T
OqEyfhP3CD+LJ5rfhjx4uo0Av9PK21tatjeSE5ik8UuWArae9y1uKVXcunFYmGyn
Rxd0hsOTfNlcloddE01mVlK12haOB+PSwe+0oXFo/htRVmSzMVAlevRg//qEk/lS
+um4GwX1+K+/k6Mtzq50Bks3VeTFAt8BILLNHecjWVSQHZJue0mcH4cRLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADzoCjM/8NTGb5UZtPXIlTkJU6KMB8GA1UdIwQY
MBaAFNZtAsLeI+z6+hv25pqvCgU60qk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW0wQ3d0NGo3UHI2R19ibW1xOEtCVHJTcVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQt
ZTM2OWQ2NjAyZTZmLzEvMW0wQ3d0NGo3UHI2R19ibW1xOEtCVHJTcVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZmExMDYtNmFmOC00MzEwLWI0ZDQtZTM2OWQ2NjAyZTZm
LzEvMW0wQ3d0NGo3UHI2R19ibW1xOEtCVHJTcVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPH9TJt8
1F4lNlHXW41Qv/QLUUW8sEOLuUTx/t16rlw4tBR9cZ1oB6KLRICOl1ZXAfS8sPSQ
6g5iV0TvyV5a3qbr3E8GS5nbQ8Om73uCP3i3Jd+tzTRc65zy5oeOVub6wHCiy0fV
VDSFWR+Ts9vXr8vBuZIeNFAvM08ZTuWT+4/V0yK2rZxpp8F6HEcLszT4QRqnns7R
id/ZTKbk7UW9jLXbCC39caBySrcp2HD9rcPDEhMs7QkPR75U/+BQoigYRfHuompT
Z465esOAEuFnz1dtzsEhYV9BYiGq5JF5X8K5CB5QK0+aAd19h2dvNKQ5v08h2BCs
fFAm1GKCHtmDIg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:38:58 2026 by rpki-client