Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
File: d2l0J3BW692_vbT4CPmoboJGA68.mft (raw, json)
Hash identifier: AKMSEVSm6/MsjLEjK9FfuN2BNw1hrEz1j05MxaC8G/c=
Subject key identifier: E6:8A:2A:C1:30:74:E7:88:79:3D:AD:74:B9:A2:E1:8D:94:A6:4F:B8
Authority key identifier: 77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
Certificate issuer: /CN=776974277056ebddbfbdb4f808f9a86e824603af
Certificate serial: 01A1574263C00A878BCEBB017EAC086BADFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
Manifest number: 012B
Signing time: Tue 20 Oct 2026 03:02:10 +0000
Manifest this update: Tue 20 Oct 2026 03:02:10 +0000
Manifest next update: Wed 21 Oct 2026 03:02:10 +0000
Files and hashes: 1: d2l0J3BW692_vbT4CPmoboJGA68.crl (hash: tjKhJRb93RnzrdXIJ7tL8iGboFO2L5YJ2cBvZbR7uAE=)
2: xEz93NHfqwGn_fMxSE5Ih9PWlqo.roa (hash: jiLVzZN8tDJN0WGRU4SoHiqOhPAJ15uV1gf5zwz/HNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:42:63:c0:0a:87:8b:ce:bb:01:7e:ac:08:6b:ad:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=776974277056ebddbfbdb4f808f9a86e824603af
Validity
Not Before: Oct 20 03:02:10 2026 GMT
Not After : Oct 21 03:02:10 2026 GMT
Subject: CN=e68a2ac13074e788793dad74b9a2e18d94a64fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:f6:b7:2a:9d:d4:78:33:c5:29:5d:6c:34:
aa:e1:a7:16:4e:ef:d8:db:57:2c:0e:eb:4e:4a:27:
b6:66:27:28:8d:70:14:1f:61:bf:f5:5e:eb:ed:d4:
50:ba:9a:1a:29:07:53:dc:e2:af:a8:1d:41:a1:75:
68:cb:6b:eb:40:77:6e:c6:bb:99:e5:07:94:95:71:
d2:c6:97:09:ce:2c:8e:34:81:68:91:63:d3:67:4b:
e2:da:da:d2:45:33:69:ce:44:e9:bf:66:90:32:6d:
4a:c2:19:8c:77:ce:99:00:9d:a6:a2:36:69:bd:44:
7e:d0:39:85:b9:40:f9:69:2e:08:29:1c:4a:f3:d9:
e0:c7:9e:2d:6b:d8:56:2f:f8:b0:fd:9d:eb:29:f8:
2c:b2:d5:34:af:e4:48:9a:f1:5a:18:b3:c3:5f:9f:
fe:43:9e:be:d7:be:f9:f1:46:4e:07:ef:72:a0:b6:
53:62:9b:a1:ed:00:39:5b:36:a1:5c:e2:e5:40:b3:
98:e1:56:be:08:90:2a:ed:e7:52:74:bb:eb:de:6b:
fa:35:00:5e:21:21:ec:5d:9a:85:22:61:39:6f:63:
6f:b2:85:81:98:a6:2e:8e:40:bb:38:a0:48:9c:5c:
25:fc:0d:90:ec:64:85:aa:9a:e9:c2:40:9e:b8:e1:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:2A:C1:30:74:E7:88:79:3D:AD:74:B9:A2:E1:8D:94:A6:4F:B8
X509v3 Authority Key Identifier:
keyid:77:69:74:27:70:56:EB:DD:BF:BD:B4:F8:08:F9:A8:6E:82:46:03:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2l0J3BW692_vbT4CPmoboJGA68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/d2l0J3BW692_vbT4CPmoboJGA68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:89:9f:b9:95:f7:39:ce:2d:9c:65:c7:c2:28:8c:d2:2a:98:
ff:e7:7d:8b:f1:5a:b5:28:c2:da:f0:13:60:87:92:f5:8c:f5:
ff:b3:fb:90:63:67:c2:22:c1:ab:a7:56:03:8b:e6:f0:98:e4:
59:5c:fc:89:47:fa:25:33:79:ab:e3:e4:b0:13:26:ab:29:1d:
f7:1f:2f:35:3d:7c:25:e9:54:4f:9a:56:24:0b:ef:13:5c:a4:
79:60:bd:15:57:ff:27:d1:61:22:e7:94:05:69:56:bf:f5:d7:
75:8a:ef:31:8b:6a:d4:ea:06:50:42:69:6c:94:1e:ae:f2:9d:
37:ab:6d:ca:27:18:51:2c:1f:d8:01:78:0c:8a:59:fe:95:a3:
df:43:9e:2a:4a:d4:cd:42:ef:cb:51:fd:c0:3c:bf:97:e8:fa:
8a:fa:9e:99:3d:6c:04:7c:d2:7a:f9:09:9c:b4:a2:13:fc:a1:
32:8a:32:8f:2b:6b:ec:7b:8e:04:dc:5e:3f:3b:9d:a1:f4:08:
31:94:06:76:df:8a:b6:85:7b:76:12:ec:1a:e5:b7:02:dd:ef:
12:ff:71:17:80:1d:e1:c6:6e:66:3d:9b:55:d0:21:90:ef:d5:
20:ca:00:98:2a:73:37:86:fd:e6:36:74:73:76:94:7f:13:f9:
6e:31:97:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXQmPACoeLzrsBfqwIa63+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3Njk3NDI3NzA1NmViZGRiZmJkYjRmODA4ZjlhODZlODI0
NjAzYWYwHhcNMjYxMDIwMDMwMjEwWhcNMjYxMDIxMDMwMjEwWjAzMTEwLwYDVQQD
EyhlNjhhMmFjMTMwNzRlNzg4NzkzZGFkNzRiOWEyZTE4ZDk0YTY0ZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFz2tyqd1HgzxSldbDSq4acWTu/Y
21csDutOSie2ZicojXAUH2G/9V7r7dRQupoaKQdT3OKvqB1BoXVoy2vrQHduxruZ
5QeUlXHSxpcJziyONIFokWPTZ0vi2trSRTNpzkTpv2aQMm1KwhmMd86ZAJ2mojZp
vUR+0DmFuUD5aS4IKRxK89ngx54ta9hWL/iw/Z3rKfgsstU0r+RImvFaGLPDX5/+
Q56+17758UZOB+9yoLZTYpuh7QA5WzahXOLlQLOY4Va+CJAq7edSdLvr3mv6NQBe
ISHsXZqFImE5b2NvsoWBmKYujkC7OKBInFwl/A2Q7GSFqprpwkCeuOHQKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaKKsEwdOeIeT2tdLmi4Y2Upk+4MB8GA1UdIwQY
MBaAFHdpdCdwVuvdv720+Aj5qG6CRgOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDJsMEozQlc2OTJfdmJUNENQbW9ib0pHQTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt
NjRjOWMyY2M5NjA5LzEvZDJsMEozQlc2OTJfdmJUNENQbW9ib0pHQTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5
LzEvZDJsMEozQlc2OTJfdmJUNENQbW9ib0pHQTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASomfuZX3
Oc4tnGXHwiiM0iqY/+d9i/FatSjC2vATYIeS9Yz1/7P7kGNnwiLBq6dWA4vm8Jjk
WVz8iUf6JTN5q+PksBMmqykd9x8vNT18JelUT5pWJAvvE1ykeWC9FVf/J9FhIueU
BWlWv/XXdYrvMYtq1OoGUEJpbJQervKdN6ttyicYUSwf2AF4DIpZ/pWj30OeKkrU
zULvy1H9wDy/l+j6ivqemT1sBHzSevkJnLSiE/yhMooyjytr7HuOBNxePzudofQI
MZQGdt+KtoV7dhLsGuW3At3vEv9xF4Ad4cZuZj2bVdAhkO/VIMoAmCpzN4b95jZ0
c3aUfxP5bjGXhA==
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:02:46 2026 by rpki-client