Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
File: _0cFo2PcHY0OpRybmh7L04B70FQ.mft (raw, json)
Hash identifier: Av1QL5mG10yB24I/i0lmz4bVN2BdD9tJuwQAewDP2ws=
Subject key identifier: B1:06:DE:5A:0D:30:B8:12:0C:A2:AF:51:DE:A7:17:D4:C1:B1:C7:52
Authority key identifier: FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
Certificate issuer: /CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Certificate serial: 01A178BA357786C968766381986712D6161E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 15:00:31 +0000
Manifest this update: Mon 26 Oct 2026 15:00:31 +0000
Manifest next update: Tue 27 Oct 2026 15:00:31 +0000
Files and hashes: 1: DJeUFnamTZ95ip1wqQB6GBsmyiQ.roa (hash: MVnppoj2mz3TnYvjg2uHh/9JjoQIHJwR2BBiRIQrPeE=)
2: GHjJjwBpoAdhz9IMpI8-MFbmhXg.roa (hash: Yg81SKjjSUrf7wcCQo3l8C3jEm5E2w8HUv9yWnStEig=)
3: _0cFo2PcHY0OpRybmh7L04B70FQ.crl (hash: WYt9aR8caiQdy/IlD1O5ag9eXsr0HPbRV2Vxds1imuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:ba:35:77:86:c9:68:76:63:81:98:67:12:d6:16:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4705a363dc1d8d0ea51c9b9a1ecbd3807bd054
Validity
Not Before: Oct 26 15:00:31 2026 GMT
Not After : Oct 27 15:00:31 2026 GMT
Subject: CN=b106de5a0d30b8120ca2af51dea717d4c1b1c752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:ae:e8:5f:76:05:9d:e6:65:b5:51:bc:c7:
91:71:3b:6f:14:5e:22:a9:3b:0b:be:75:4a:ff:d0:
eb:8c:ec:4f:ac:78:86:7e:73:fd:51:37:45:d3:f7:
97:44:74:e3:21:1e:7a:b1:c7:88:5e:eb:d8:6d:ac:
f1:aa:e8:e6:6b:c5:7a:6a:6a:21:b6:32:7b:dd:39:
bd:1d:2f:b7:05:5c:dc:37:fe:57:ce:1b:41:d1:ac:
c7:a8:5d:52:2e:f7:08:57:b5:17:ca:51:f1:57:3c:
c5:55:36:1b:25:a7:0f:37:1c:51:16:f7:a3:06:ad:
36:a9:35:ec:5b:ea:d5:7e:d0:ca:22:3d:d8:f6:2c:
11:c1:88:70:96:c1:f4:6c:4b:ee:17:6f:0b:7e:ee:
b6:7e:a3:49:2b:ea:df:ed:fd:63:ab:18:ee:92:9c:
89:aa:01:fe:3d:f3:4b:f4:37:2d:2f:94:10:94:f1:
bb:70:61:d8:06:b2:78:94:9f:fa:48:52:d1:44:67:
01:f0:2d:85:cf:68:13:47:c5:de:3d:c6:aa:f8:5e:
d7:8f:47:1f:31:88:51:df:36:96:6a:3c:27:4a:90:
2e:bf:46:c4:b8:a3:83:6c:93:b9:26:a8:92:04:89:
4d:ca:e0:7f:75:c6:8a:b3:75:74:34:c5:c0:6d:aa:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:DE:5A:0D:30:B8:12:0C:A2:AF:51:DE:A7:17:D4:C1:B1:C7:52
X509v3 Authority Key Identifier:
keyid:FF:47:05:A3:63:DC:1D:8D:0E:A5:1C:9B:9A:1E:CB:D3:80:7B:D0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0cFo2PcHY0OpRybmh7L04B70FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/05b3d1-116f-4d60-a176-56bbe38f7407/1/_0cFo2PcHY0OpRybmh7L04B70FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:07:2f:db:ed:d0:a1:e0:79:91:45:c8:6b:70:7b:9b:25:20:
8b:1d:61:d6:c3:7f:50:fe:9f:c5:60:45:90:8c:b6:51:cb:ab:
d6:67:ce:a2:d4:51:f3:dd:d3:51:2e:1d:89:f3:f6:4f:f5:99:
64:ad:b7:ed:20:8a:bb:fe:99:db:a8:58:2d:5e:7b:df:c1:2a:
eb:ca:f8:83:55:6e:f6:ed:c3:18:e5:17:1a:2d:1b:16:2c:b9:
f1:4a:98:e8:5b:81:39:96:d1:8a:53:a3:83:56:de:03:9d:d0:
23:69:ab:d5:5e:6f:11:24:14:3f:8f:7d:e1:d8:5a:f4:a9:2f:
bc:6d:98:2a:37:f3:86:25:e8:e3:a4:39:df:6a:0a:64:a8:5a:
09:5c:8d:14:e3:54:11:a4:19:cf:0c:21:eb:b0:de:f0:95:8b:
74:66:0d:1a:8e:70:18:27:0b:1b:9d:33:2e:48:83:62:d2:3f:
53:db:ab:81:4d:28:6a:72:eb:44:46:fd:aa:72:c9:d0:5b:97:
37:c0:0a:5d:7d:79:14:06:62:94:df:8f:f0:db:3b:06:06:e6:
c1:fd:0c:2a:18:38:5c:b0:14:16:c1:f6:08:2d:99:7a:5d:0c:
35:94:dc:7e:f3:3d:eb:53:eb:c9:99:3e:44:49:2f:2b:82:5e:
6c:d3:c5:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF4ujV3hslodmOBmGcS1hYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDcwNWEzNjNkYzFkOGQwZWE1MWM5YjlhMWVjYmQzODA3
YmQwNTQwHhcNMjYxMDI2MTUwMDMxWhcNMjYxMDI3MTUwMDMxWjAzMTEwLwYDVQQD
EyhiMTA2ZGU1YTBkMzBiODEyMGNhMmFmNTFkZWE3MTdkNGMxYjFjNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9eu6F92BZ3mZbVRvMeRcTtvFF4i
qTsLvnVK/9DrjOxPrHiGfnP9UTdF0/eXRHTjIR56sceIXuvYbazxqujma8V6amoh
tjJ73Tm9HS+3BVzcN/5XzhtB0azHqF1SLvcIV7UXylHxVzzFVTYbJacPNxxRFvej
Bq02qTXsW+rVftDKIj3Y9iwRwYhwlsH0bEvuF28Lfu62fqNJK+rf7f1jqxjukpyJ
qgH+PfNL9DctL5QQlPG7cGHYBrJ4lJ/6SFLRRGcB8C2Fz2gTR8XePcaq+F7Xj0cf
MYhR3zaWajwnSpAuv0bEuKODbJO5JqiSBIlNyuB/dcaKs3V0NMXAbaouAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEG3loNMLgSDKKvUd6nF9TBscdSMB8GA1UdIwQY
MBaAFP9HBaNj3B2NDqUcm5oey9OAe9BUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYt
NTZiYmUzOGY3NDA3LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNWIzZDEtMTE2Zi00ZDYwLWExNzYtNTZiYmUzOGY3NDA3
LzEvXzBjRm8yUGNIWTBPcFJ5Ym1oN0wwNEI3MEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQcv2+3Q
oeB5kUXIa3B7myUgix1h1sN/UP6fxWBFkIy2Ucur1mfOotRR893TUS4difP2T/WZ
ZK237SCKu/6Z26hYLV5738Eq68r4g1Vu9u3DGOUXGi0bFiy58UqY6FuBOZbRilOj
g1beA53QI2mr1V5vESQUP4994dha9KkvvG2YKjfzhiXo46Q532oKZKhaCVyNFONU
EaQZzwwh67De8JWLdGYNGo5wGCcLG50zLkiDYtI/U9urgU0oanLrREb9qnLJ0FuX
N8AKXX15FAZilN+P8Ns7Bgbmwf0MKhg4XLAUFsH2CC2Zel0MNZTcfvM961PryZk+
REkvK4JebNPFKg==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:57:50 2026 by rpki-client