Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
File: 9aUA85diOrHVYASDVGf8zz0KOw8.mft (raw, json)
Hash identifier: Cj9rOr2giPhDs1hP6n9WH3Fc+GSDYe4zJJWrDmPI+Sg=
Subject key identifier: 7A:A5:D4:EB:17:E7:9F:54:4A:96:95:DD:35:0D:E8:1D:CA:1E:BA:00
Authority key identifier: F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
Certificate issuer: /CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Certificate serial: 01A13E25C3B0CEB6A04553B08FBDB0B8B909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
Manifest number: 113E
Signing time: Thu 15 Oct 2026 06:00:24 +0000
Manifest this update: Thu 15 Oct 2026 06:00:24 +0000
Manifest next update: Fri 16 Oct 2026 06:00:24 +0000
Files and hashes: 1: 9aUA85diOrHVYASDVGf8zz0KOw8.crl (hash: IEfwJE40ZvLz5a0xAOMHOaKkX0Mbs/fKPpOn9YNyAQI=)
2: TgwXo42orCf9sT1fT8jrPa56jeU.roa (hash: GfcY69aJuiib4Ntp1/VS83/ai4i4eQHgc9DzBgB534U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:c3:b0:ce:b6:a0:45:53:b0:8f:bd:b0:b8:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a500f397623ab1d56004835467fccf3d0a3b0f
Validity
Not Before: Oct 15 06:00:24 2026 GMT
Not After : Oct 16 06:00:24 2026 GMT
Subject: CN=7aa5d4eb17e79f544a9695dd350de81dca1eba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:fd:9c:54:d5:5e:39:21:f6:82:78:0f:98:
c0:c7:5f:e9:3d:6c:4f:0a:84:97:f5:ad:0e:db:8a:
b3:ce:ef:a5:52:19:6e:40:e1:4e:53:ae:d5:df:dc:
6a:9e:fe:0b:73:ab:67:91:e8:0e:36:9f:1e:59:ca:
52:1e:65:58:79:69:fc:07:44:bb:17:07:05:ce:ac:
c5:c2:f2:e5:f2:c9:bc:27:24:ec:02:47:05:15:0a:
7e:7f:25:7d:29:35:db:70:56:9c:1c:d9:44:5a:23:
56:4e:9a:ca:d7:00:80:b2:ee:24:7e:37:55:20:da:
c2:48:10:3e:72:ec:94:ba:df:7b:fa:97:83:1c:33:
08:80:2e:60:01:20:68:0b:d8:56:49:71:72:97:58:
1a:73:b3:50:7f:a8:30:65:23:e3:c7:1f:71:41:91:
ac:62:a3:1d:44:78:1f:27:f3:a8:c2:61:19:a1:15:
c3:f6:a9:c4:86:5c:4b:be:18:ba:17:e3:55:e1:b1:
25:57:8f:b2:2b:b7:54:bb:fa:57:3f:70:72:2e:95:
8b:a1:ee:5c:be:62:5f:a2:e3:1b:22:75:88:6c:53:
85:99:16:89:14:3e:c2:8f:d5:3b:ba:f3:a0:f6:61:
a5:63:87:88:98:4f:d3:6b:ac:24:27:b0:b0:f3:72:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A5:D4:EB:17:E7:9F:54:4A:96:95:DD:35:0D:E8:1D:CA:1E:BA:00
X509v3 Authority Key Identifier:
keyid:F5:A5:00:F3:97:62:3A:B1:D5:60:04:83:54:67:FC:CF:3D:0A:3B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aUA85diOrHVYASDVGf8zz0KOw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a760f3-0062-4374-8290-e76fd9c9dc8c/1/9aUA85diOrHVYASDVGf8zz0KOw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:af:6b:9d:d7:dc:f9:cb:20:e7:5c:6a:4b:af:9f:5d:6b:2c:
e6:74:60:5c:a1:c3:e7:42:10:d5:2f:90:fa:29:f6:63:0b:e6:
e3:52:bd:f8:b8:d8:6e:4c:75:5a:13:66:33:46:e6:9c:bb:7f:
71:e4:74:b2:7d:9a:91:f0:4c:71:95:38:1a:e0:d7:36:f5:76:
e6:1e:89:bd:4a:95:37:d8:17:2c:ac:92:0f:3f:88:c6:3e:14:
d7:2b:9e:59:70:d9:84:1a:e5:6a:a7:71:7b:fb:c3:c9:55:fb:
78:5f:76:21:4e:d1:d3:8d:67:f0:76:4f:ee:4c:49:99:67:e8:
8c:63:8a:d3:6c:15:18:bf:f4:2e:7d:fe:75:4f:05:df:3e:76:
65:e0:be:a7:44:2b:0a:00:48:2c:10:5b:20:58:8d:8e:41:89:
91:e5:84:99:27:34:b5:ea:a7:94:60:42:ca:f3:d9:3d:8e:55:
fe:42:22:a3:dc:0b:1c:ab:77:18:fa:44:1f:6f:e4:84:38:0e:
c6:c9:4e:85:7d:e2:af:75:d9:39:1a:a2:a7:3c:e8:97:c9:7c:
d1:e9:8b:4f:57:eb:a1:44:22:bd:32:90:53:00:a9:4c:98:54:
ce:74:0c:9c:82:81:a6:b4:cf:00:7a:bc:2f:08:b4:f4:e5:47:
cb:3e:b6:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JcOwzragRVOwj72wuLkJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTUwMGYzOTc2MjNhYjFkNTYwMDQ4MzU0NjdmY2NmM2Qw
YTNiMGYwHhcNMjYxMDE1MDYwMDI0WhcNMjYxMDE2MDYwMDI0WjAzMTEwLwYDVQQD
Eyg3YWE1ZDRlYjE3ZTc5ZjU0NGE5Njk1ZGQzNTBkZTgxZGNhMWViYTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniX9nFTVXjkh9oJ4D5jAx1/pPWxP
CoSX9a0O24qzzu+lUhluQOFOU67V39xqnv4Lc6tnkegONp8eWcpSHmVYeWn8B0S7
FwcFzqzFwvLl8sm8JyTsAkcFFQp+fyV9KTXbcFacHNlEWiNWTprK1wCAsu4kfjdV
INrCSBA+cuyUut97+peDHDMIgC5gASBoC9hWSXFyl1gac7NQf6gwZSPjxx9xQZGs
YqMdRHgfJ/OowmEZoRXD9qnEhlxLvhi6F+NV4bElV4+yK7dUu/pXP3ByLpWLoe5c
vmJfouMbInWIbFOFmRaJFD7Cj9U7uvOg9mGlY4eImE/Ta6wkJ7Cw83JzIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHql1OsX559USpaV3TUN6B3KHroAMB8GA1UdIwQY
MBaAFPWlAPOXYjqx1WAEg1Rn/M89CjsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAt
ZTc2ZmQ5YzlkYzhjLzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9hNzYwZjMtMDA2Mi00Mzc0LTgyOTAtZTc2ZmQ5YzlkYzhj
LzEvOWFVQTg1ZGlPckhWWUFTRFZHZjh6ejBLT3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARK9rndfc
+csg51xqS6+fXWss5nRgXKHD50IQ1S+Q+in2Ywvm41K9+LjYbkx1WhNmM0bmnLt/
ceR0sn2akfBMcZU4GuDXNvV25h6JvUqVN9gXLKySDz+Ixj4U1yueWXDZhBrlaqdx
e/vDyVX7eF92IU7R041n8HZP7kxJmWfojGOK02wVGL/0Ln3+dU8F3z52ZeC+p0Qr
CgBILBBbIFiNjkGJkeWEmSc0teqnlGBCyvPZPY5V/kIio9wLHKt3GPpEH2/khDgO
xslOhX3ir3XZORqipzzol8l80emLT1froUQivTKQUwCpTJhUznQMnIKBprTPAHq8
Lwi09OVHyz62OQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:30:27 2026 by rpki-client