Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
File: sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft (raw, json)
Hash identifier: l/GnHhkq5GKf9SNrUFkJJOwtHTmKgLBZRSewnUZxIkA=
Subject key identifier: A8:BE:94:B9:5A:D1:2B:D5:95:75:64:5B:02:EE:3A:6B:0C:76:B3:13
Authority key identifier: B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
Certificate issuer: /CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Certificate serial: 01A15440CB16620570DA13504C6CBC32606D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 13:01:34 +0000
Manifest this update: Mon 19 Oct 2026 13:01:34 +0000
Manifest next update: Tue 20 Oct 2026 13:01:34 +0000
Files and hashes: 1: Q-FFM01cbkfw_d8UfrmIQr3mDSE.roa (hash: SPQggi+U+SwusUS7292cc4kZDqdLk+Y6Fxy1n2N8dxo=)
2: sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl (hash: P4hQnT7iR3ym6aFF3N4/Sy7aWuOVvgCuroJU/c1JF4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:40:cb:16:62:05:70:da:13:50:4c:6c:bc:32:60:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0beed6ede9eb285bd2a6abb985adcdbe8f2779a
Validity
Not Before: Oct 19 13:01:34 2026 GMT
Not After : Oct 20 13:01:34 2026 GMT
Subject: CN=a8be94b95ad12bd59575645b02ee3a6b0c76b313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:9b:83:52:79:11:78:a4:ec:50:c6:80:8f:
23:92:30:f7:b8:08:a9:fa:41:07:f2:a5:27:4b:9c:
bb:31:05:e8:43:95:63:cd:4f:07:8f:9e:7c:1e:9c:
d8:7a:5c:4c:50:8b:b5:14:e1:3b:4f:a7:06:eb:c0:
a2:fb:68:cf:da:dd:5a:e9:24:37:6f:91:06:a0:f5:
73:56:0c:71:b8:60:cc:c2:9d:f7:9c:13:34:4c:8f:
6f:12:6b:b9:5a:f9:ec:fb:82:5b:d2:54:62:e4:d8:
c0:de:94:f6:3a:2f:de:e1:c6:1c:62:c3:a3:3e:31:
20:42:40:04:ee:8c:58:54:14:16:58:b5:6f:ed:73:
18:27:a3:53:39:81:67:2f:d5:cc:9a:af:22:56:e7:
ae:31:32:6a:ee:bd:60:95:e6:34:91:57:75:14:09:
ae:59:cc:7b:27:49:19:32:4a:23:35:02:a2:1a:d6:
8a:6d:fe:9f:28:55:fb:1a:36:d6:a3:b6:10:64:ee:
2c:82:97:29:04:ca:c8:78:fe:07:53:ae:ac:15:9e:
55:f4:62:74:a2:54:da:60:85:31:0d:bd:fb:2e:80:
98:c8:ae:cd:15:50:92:e7:9f:72:37:ea:60:9e:ca:
b6:cb:ff:65:66:e3:82:29:24:0d:4e:2c:f7:30:08:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:94:B9:5A:D1:2B:D5:95:75:64:5B:02:EE:3A:6B:0C:76:B3:13
X509v3 Authority Key Identifier:
keyid:B0:BE:ED:6E:DE:9E:B2:85:BD:2A:6A:BB:98:5A:DC:DB:E8:F2:77:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL7tbt6esoW9Kmq7mFrc2-jyd5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0d6d-f949-46db-981f-b38d7f709d70/1/sL7tbt6esoW9Kmq7mFrc2-jyd5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a7:7d:fc:d6:07:67:90:df:62:4f:37:f5:a7:88:37:cd:d5:
61:96:a6:30:ea:cd:5f:e5:cc:94:be:ee:f5:6d:dd:62:c5:48:
47:90:98:38:88:cb:97:4e:45:84:5c:3e:29:61:33:1b:c3:d1:
e6:4c:04:41:e7:e2:94:9e:24:de:97:86:fc:15:2b:08:ac:08:
39:85:13:88:ec:49:4e:f8:79:98:9f:44:8e:2c:c8:49:8d:54:
2d:f6:56:4c:db:dd:1f:c9:a7:30:31:f0:15:60:ae:44:51:cc:
a9:3f:36:ee:92:d3:a6:20:c9:e9:7f:85:0d:e6:fa:52:7c:76:
21:29:61:0a:47:fd:5e:23:9e:27:e3:6c:c2:06:fb:2f:75:45:
e2:0e:f6:95:4c:f8:92:de:b8:2d:82:d7:24:b7:a4:da:02:38:
ca:95:45:9a:ad:7c:92:a5:ef:a8:3e:2b:c0:20:f2:5f:0f:0e:
5f:38:69:91:8c:13:ae:69:d1:4d:ad:a1:af:6a:4c:9d:ae:e6:
d8:89:a4:99:13:08:76:82:9a:dc:43:f4:b8:c4:06:af:08:9a:
58:0b:8c:e8:7a:0b:15:97:45:8b:82:96:e5:4c:28:0a:5d:32:
d8:7a:37:81:b3:46:f4:27:40:8d:1d:a2:2b:43:a5:2d:ed:7a:
07:39:f2:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFUQMsWYgVw2hNQTGy8MmBtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmVlZDZlZGU5ZWIyODViZDJhNmFiYjk4NWFkY2RiZThm
Mjc3OWEwHhcNMjYxMDE5MTMwMTM0WhcNMjYxMDIwMTMwMTM0WjAzMTEwLwYDVQQD
EyhhOGJlOTRiOTVhZDEyYmQ1OTU3NTY0NWIwMmVlM2E2YjBjNzZiMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruabg1J5EXik7FDGgI8jkjD3uAip
+kEH8qUnS5y7MQXoQ5VjzU8Hj558HpzYelxMUIu1FOE7T6cG68Ci+2jP2t1a6SQ3
b5EGoPVzVgxxuGDMwp33nBM0TI9vEmu5Wvns+4Jb0lRi5NjA3pT2Oi/e4cYcYsOj
PjEgQkAE7oxYVBQWWLVv7XMYJ6NTOYFnL9XMmq8iVueuMTJq7r1gleY0kVd1FAmu
Wcx7J0kZMkojNQKiGtaKbf6fKFX7GjbWo7YQZO4sgpcpBMrIeP4HU66sFZ5V9GJ0
olTaYIUxDb37LoCYyK7NFVCS559yN+pgnsq2y/9lZuOCKSQNTiz3MAjKcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi+lLla0SvVlXVkWwLuOmsMdrMTMB8GA1UdIwQY
MBaAFLC+7W7enrKFvSpqu5ha3Nvo8neaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYt
YjM4ZDdmNzA5ZDcwLzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hZDBkNmQtZjk0OS00NmRiLTk4MWYtYjM4ZDdmNzA5ZDcw
LzEvc0w3dGJ0NmVzb1c5S21xN21GcmMyLWp5ZDVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqd9/NYH
Z5DfYk839aeIN83VYZamMOrNX+XMlL7u9W3dYsVIR5CYOIjLl05FhFw+KWEzG8PR
5kwEQefilJ4k3peG/BUrCKwIOYUTiOxJTvh5mJ9EjizISY1ULfZWTNvdH8mnMDHw
FWCuRFHMqT827pLTpiDJ6X+FDeb6Unx2ISlhCkf9XiOeJ+Nswgb7L3VF4g72lUz4
kt64LYLXJLek2gI4ypVFmq18kqXvqD4rwCDyXw8OXzhpkYwTrmnRTa2hr2pMna7m
2ImkmRMIdoKa3EP0uMQGrwiaWAuM6HoLFZdFi4KW5UwoCl0y2Ho3gbNG9CdAjR2i
K0OlLe16BznyhA==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:53:17 2026 by rpki-client