Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
File: r0b7jUGkckKuPujOHw-o74EWmLU.mft (raw, json)
Hash identifier: SC6SIHNDyOcX60zwx9Lk8YVE5HopOr9QRPT31H+eu+g=
Subject key identifier: 31:B6:97:AD:8F:9B:D3:B4:48:40:AF:9B:E5:B2:6D:9E:89:61:F8:46
Authority key identifier: AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
Certificate issuer: /CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Certificate serial: 01A1822C37B2E2AC96FA46A8118BC7062D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 11:01:38 +0000
Manifest this update: Wed 28 Oct 2026 11:01:38 +0000
Manifest next update: Thu 29 Oct 2026 11:01:38 +0000
Files and hashes: 1: WBZ4Ns1KlqrebDqaMN4GOQg5rUw.roa (hash: yOstMXBtzsYtaixKzlv1YIAu5cES+ZEO3HPCVKprX3s=)
2: r0b7jUGkckKuPujOHw-o74EWmLU.crl (hash: QB175MVzRz0afbSUKj/tILqFFtWC4OJfWhH08kE1Dc0=)
3: y_vc6s_Py2qwffoPUemYyQ3C93I.roa (hash: jTDTDDTAp7a9jlbajKDV/IreUhiB7BfxphmCimNa3V0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2c:37:b2:e2:ac:96:fa:46:a8:11:8b:c7:06:2d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af46fb8d41a47242ae3ee8ce1f0fa8ef811698b5
Validity
Not Before: Oct 28 11:01:38 2026 GMT
Not After : Oct 29 11:01:38 2026 GMT
Subject: CN=31b697ad8f9bd3b44840af9be5b26d9e8961f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b2:e9:de:28:6f:b8:82:e1:e2:d0:a5:e2:6d:
1b:ab:16:09:e3:3f:9f:e8:6a:55:dd:d1:fb:56:27:
ca:2f:fc:0f:de:b7:6c:20:78:a5:99:cb:b9:ce:12:
30:f4:82:64:33:b6:e5:98:cb:4a:e6:07:09:e5:a8:
b8:25:7b:cc:15:0e:0a:1d:a6:80:e1:ab:31:63:ee:
56:51:51:2c:70:39:73:de:87:10:19:8b:65:8c:ce:
79:36:6f:2c:51:1c:1d:80:c0:5a:06:62:ba:f5:34:
17:fa:50:a6:a2:7c:2a:e7:70:73:1b:c6:23:aa:51:
6b:e3:bf:e9:44:de:fb:14:f9:63:1e:ea:4f:f9:92:
f8:da:ea:d9:5e:b3:8b:12:02:c8:61:30:64:cf:36:
79:d8:15:cd:e9:b7:c8:ef:f1:d3:00:37:d4:df:a3:
c1:10:c3:87:d4:f5:d0:ba:5d:81:82:07:0b:c4:e3:
c7:97:41:ec:84:54:bf:3d:2d:91:8f:7d:2d:7f:03:
c0:23:b5:1f:0c:8d:ae:fb:5e:d4:6b:ee:a6:8f:85:
62:0e:36:1f:e4:d8:0f:e5:f0:aa:04:d0:07:34:6e:
72:4a:f1:60:b7:98:3f:d2:70:8b:12:81:22:8f:f3:
04:8f:35:b9:f3:14:8c:fb:bf:dd:a8:7d:0a:4c:18:
39:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B6:97:AD:8F:9B:D3:B4:48:40:AF:9B:E5:B2:6D:9E:89:61:F8:46
X509v3 Authority Key Identifier:
keyid:AF:46:FB:8D:41:A4:72:42:AE:3E:E8:CE:1F:0F:A8:EF:81:16:98:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0b7jUGkckKuPujOHw-o74EWmLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d8275e-c479-4ed8-beea-da89ed2eb55e/1/r0b7jUGkckKuPujOHw-o74EWmLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7a:d3:15:6f:1b:cd:bb:80:e3:38:9f:5c:2b:a4:b4:59:1b:
40:e6:cb:47:57:94:2a:f5:5c:ae:b9:a4:f7:34:4e:75:05:6a:
d2:68:33:91:af:de:3f:48:55:d7:2b:d9:80:05:94:13:54:23:
c4:d1:72:63:41:c0:aa:5f:f6:98:d2:27:02:7e:7a:4d:c5:8f:
cb:43:54:1d:c0:12:07:ff:2e:2d:0a:fb:53:10:ea:6c:8f:70:
d7:97:76:29:e4:63:3c:80:78:ab:48:19:7c:92:b6:91:98:5b:
54:e6:17:b0:a6:11:77:f9:85:fb:8b:32:b4:01:a4:c2:5d:e0:
e8:a2:65:af:11:96:ab:94:4d:a2:01:9e:41:93:9d:3f:c3:6d:
d8:0a:bc:62:ba:de:69:7a:79:ec:70:55:86:ad:be:29:76:55:
b9:c7:7c:0b:10:09:8b:df:da:1e:02:ec:cb:a8:bf:af:0e:ee:
2f:fd:0b:1d:30:bb:05:6b:79:5e:61:a2:e8:81:8b:0b:ca:59:
75:c6:d3:a4:99:4f:6c:70:4f:46:7a:52:f9:a3:c3:2b:a4:70:
b0:47:d9:df:14:09:e6:c1:0a:dd:79:10:1f:d7:89:d7:a4:10:
43:e6:4e:e4:9f:08:42:67:32:fb:d3:0f:78:92:13:d8:0c:68:
37:00:3d:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCLDey4qyW+kaoEYvHBi14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNDZmYjhkNDFhNDcyNDJhZTNlZThjZTFmMGZhOGVmODEx
Njk4YjUwHhcNMjYxMDI4MTEwMTM4WhcNMjYxMDI5MTEwMTM4WjAzMTEwLwYDVQQD
EygzMWI2OTdhZDhmOWJkM2I0NDg0MGFmOWJlNWIyNmQ5ZTg5NjFmODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47Lp3ihvuILh4tCl4m0bqxYJ4z+f
6GpV3dH7VifKL/wP3rdsIHilmcu5zhIw9IJkM7blmMtK5gcJ5ai4JXvMFQ4KHaaA
4asxY+5WUVEscDlz3ocQGYtljM55Nm8sURwdgMBaBmK69TQX+lCmonwq53BzG8Yj
qlFr47/pRN77FPljHupP+ZL42urZXrOLEgLIYTBkzzZ52BXN6bfI7/HTADfU36PB
EMOH1PXQul2BggcLxOPHl0HshFS/PS2Rj30tfwPAI7UfDI2u+17Ua+6mj4ViDjYf
5NgP5fCqBNAHNG5ySvFgt5g/0nCLEoEij/MEjzW58xSM+7/dqH0KTBg5XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDG2l62Pm9O0SECvm+WybZ6JYfhGMB8GA1UdIwQY
MBaAFK9G+41BpHJCrj7ozh8PqO+BFpi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEt
ZGE4OWVkMmViNTVlLzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kODI3NWUtYzQ3OS00ZWQ4LWJlZWEtZGE4OWVkMmViNTVl
LzEvcjBiN2pVR2tja0t1UHVqT0h3LW83NEVXbUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnrTFW8b
zbuA4zifXCuktFkbQObLR1eUKvVcrrmk9zROdQVq0mgzka/eP0hV1yvZgAWUE1Qj
xNFyY0HAql/2mNInAn56TcWPy0NUHcASB/8uLQr7UxDqbI9w15d2KeRjPIB4q0gZ
fJK2kZhbVOYXsKYRd/mF+4sytAGkwl3g6KJlrxGWq5RNogGeQZOdP8Nt2Aq8Yrre
aXp57HBVhq2+KXZVucd8CxAJi9/aHgLsy6i/rw7uL/0LHTC7BWt5XmGi6IGLC8pZ
dcbTpJlPbHBPRnpS+aPDK6RwsEfZ3xQJ5sEK3XkQH9eJ16QQQ+ZO5J8IQmcy+9MP
eJIT2AxoNwA9uQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:27 2026 by rpki-client