Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
File: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft (raw, json)
Hash identifier: VnXUzSt6rTcRr1h3aHJFTsQmFB48rJy0hy/40ZpKvU0=
Subject key identifier: 6F:38:2A:7C:11:C9:1C:26:B0:2A:AB:EF:C9:5E:92:0A:85:9B:6F:5F
Authority key identifier: 88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
Certificate issuer: /CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Certificate serial: 01A195E96704DF9E7C58F4ACD440DFA7E79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
Manifest number: 1AD4
Signing time: Sun 01 Nov 2026 07:01:03 +0000
Manifest this update: Sun 01 Nov 2026 07:01:03 +0000
Manifest next update: Mon 02 Nov 2026 07:01:03 +0000
Files and hashes: 1: _MjZeflusMJHZIBBhksr7jcA7vw.roa (hash: BrV6MzyjqOEJzPWdJnGrS0VIFNiT/BKP8d1n0zB4odM=)
2: iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl (hash: pf8O8KGv7Exu1pBbPwUq7i8RBFEzxVj30lC3SMLPrLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:e9:67:04:df:9e:7c:58:f4:ac:d4:40:df:a7:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8877da3d483027a01eddcd0e435e8285f1b1bb9e
Validity
Not Before: Nov 1 07:01:03 2026 GMT
Not After : Nov 2 07:01:03 2026 GMT
Subject: CN=6f382a7c11c91c26b02aabefc95e920a859b6f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:fd:2a:0a:b3:45:02:b3:c3:31:e7:bc:c0:
ca:d2:b9:db:a5:d8:b0:1f:9f:7a:2f:68:02:0f:f2:
2d:87:4c:0e:c3:39:66:9e:24:d8:bc:77:b5:b4:33:
d0:65:e7:3e:12:0a:df:40:66:32:9f:a1:c0:ec:74:
91:90:03:90:d1:8e:b1:3d:59:f4:34:d4:32:d1:04:
e2:0e:8a:73:8f:26:2a:f6:16:a8:d5:2b:54:00:83:
16:92:7c:6e:a3:7c:fa:83:ca:e4:a3:2a:d7:0e:b4:
7e:0d:fd:ae:bd:21:5c:54:f4:7a:b7:dc:f3:88:75:
b5:b7:3f:29:91:f0:be:be:48:5f:ff:1b:62:16:3c:
39:28:70:84:b1:68:ff:c1:28:1b:43:a9:b7:5c:36:
4c:07:4c:4f:9e:5f:9e:af:9a:c8:a9:c8:56:f5:46:
cb:7e:13:51:7a:af:4f:33:88:3d:6e:b0:96:eb:dc:
a0:12:40:43:5e:dc:5e:8c:2c:9a:7b:11:d8:f7:8b:
f3:30:46:9a:46:ce:58:4f:9b:4f:e0:c3:0e:58:85:
e1:7f:72:0b:f4:af:d7:08:99:9b:3e:9b:71:66:63:
52:3e:22:d3:09:87:e2:6d:bb:1b:21:b7:28:36:31:
86:7e:f1:97:f5:12:95:40:26:2a:5c:43:d0:42:96:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:38:2A:7C:11:C9:1C:26:B0:2A:AB:EF:C9:5E:92:0A:85:9B:6F:5F
X509v3 Authority Key Identifier:
keyid:88:77:DA:3D:48:30:27:A0:1E:DD:CD:0E:43:5E:82:85:F1:B1:BB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cb9c66-f7cc-4de1-bdc1-2f5f4c55262f/1/iHfaPUgwJ6Ae3c0OQ16ChfGxu54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:90:cf:d6:38:90:ec:fd:b4:8e:e0:8c:b4:90:96:84:8f:e1:
6b:63:88:b0:29:b0:79:7e:41:2a:b9:8b:ba:dc:44:77:7b:f3:
69:88:eb:78:6b:0f:54:e3:fb:af:41:48:c7:5b:35:a8:69:92:
e7:56:b9:1a:32:ae:7e:e5:13:91:36:b7:1a:93:ef:36:8e:56:
a7:0b:53:82:c6:41:4d:f2:37:ee:81:0a:31:1a:20:32:99:54:
b4:2b:37:af:63:16:ad:b4:14:d8:30:d0:cf:9e:41:17:69:69:
37:9a:e0:87:4a:48:7d:53:4b:84:15:a6:9e:5e:39:ac:c2:3a:
4a:d9:dd:b1:72:29:cd:84:fe:cb:84:a7:1f:b3:46:10:4d:ff:
02:bd:3f:22:3d:2b:10:6d:20:ee:cb:e8:55:8e:18:67:ab:29:
85:88:a8:bf:38:38:78:6f:98:a7:7f:88:b0:3c:ca:6f:f9:ee:
1c:25:70:d6:fe:b5:b7:94:19:37:d0:77:eb:26:47:bd:ab:6e:
5f:fb:ef:04:74:0c:f5:84:82:6f:53:8c:f4:c1:ec:56:88:8e:
a9:96:d3:86:fa:90:01:ef:2c:1f:99:0a:43:8a:ae:c1:9b:cb:
29:e6:b6:df:e9:7f:cd:88:45:04:77:f7:84:d2:c5:42:d1:3c:
99:b1:c1:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGV6WcE3558WPSs1EDfp+efMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NzdkYTNkNDgzMDI3YTAxZWRkY2QwZTQzNWU4Mjg1ZjFi
MWJiOWUwHhcNMjYxMTAxMDcwMTAzWhcNMjYxMTAyMDcwMTAzWjAzMTEwLwYDVQQD
Eyg2ZjM4MmE3YzExYzkxYzI2YjAyYWFiZWZjOTVlOTIwYTg1OWI2ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6N79KgqzRQKzwzHnvMDK0rnbpdiw
H596L2gCD/Ith0wOwzlmniTYvHe1tDPQZec+EgrfQGYyn6HA7HSRkAOQ0Y6xPVn0
NNQy0QTiDopzjyYq9hao1StUAIMWknxuo3z6g8rkoyrXDrR+Df2uvSFcVPR6t9zz
iHW1tz8pkfC+vkhf/xtiFjw5KHCEsWj/wSgbQ6m3XDZMB0xPnl+er5rIqchW9UbL
fhNReq9PM4g9brCW69ygEkBDXtxejCyaexHY94vzMEaaRs5YT5tP4MMOWIXhf3IL
9K/XCJmbPptxZmNSPiLTCYfibbsbIbcoNjGGfvGX9RKVQCYqXEPQQpZkXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG84KnwRyRwmsCqr78lekgqFm29fMB8GA1UdIwQY
MBaAFIh32j1IMCegHt3NDkNegoXxsbueMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEt
MmY1ZjRjNTUyNjJmLzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jYjljNjYtZjdjYy00ZGUxLWJkYzEtMmY1ZjRjNTUyNjJm
LzEvaUhmYVBVZ3dKNkFlM2MwT1ExNkNoZkd4dTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZDP1jiQ
7P20juCMtJCWhI/ha2OIsCmweX5BKrmLutxEd3vzaYjreGsPVOP7r0FIx1s1qGmS
51a5GjKufuUTkTa3GpPvNo5WpwtTgsZBTfI37oEKMRogMplUtCs3r2MWrbQU2DDQ
z55BF2lpN5rgh0pIfVNLhBWmnl45rMI6StndsXIpzYT+y4SnH7NGEE3/Ar0/Ij0r
EG0g7svoVY4YZ6sphYiovzg4eG+Yp3+IsDzKb/nuHCVw1v61t5QZN9B36yZHvatu
X/vvBHQM9YSCb1OM9MHsVoiOqZbThvqQAe8sH5kKQ4quwZvLKea23+l/zYhFBHf3
hNLFQtE8mbHBAg==
-----END CERTIFICATE-----
Generated at Sun Nov 1 10:48:55 2026 by rpki-client