Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
File: R6guVXeaHqTvmWf4IdXMBbe9mek.mft (raw, json)
Hash identifier: mU5zW6njZVPm8blATTKEosgu0JsrFUq5b5sWQdpbXvw=
Subject key identifier: E6:B2:1E:72:8D:2E:68:67:FA:25:B0:23:2D:B7:AA:D8:A7:4C:11:56
Authority key identifier: 47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
Certificate issuer: /CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Certificate serial: 01A17C604236AB62B1F66F8F61E81E1EE261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
Manifest number: 1AC4
Signing time: Tue 27 Oct 2026 08:00:45 +0000
Manifest this update: Tue 27 Oct 2026 08:00:45 +0000
Manifest next update: Wed 28 Oct 2026 08:00:45 +0000
Files and hashes: 1: Nq9p6JOG9d1MPZ5qd-sAijdFSJ0.roa (hash: yO2lwMxsUQ5IOFH/LC6sgXWOkjPeUa5h0hHMk+SpB7A=)
2: R6guVXeaHqTvmWf4IdXMBbe9mek.crl (hash: bKQqUDDFPoFBhPPNLX2TIFwmB+DrdXwyXcKoj4E8xf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:42:36:ab:62:b1:f6:6f:8f:61:e8:1e:1e:e2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47a82e55779a1ea4ef9967f821d5cc05b7bd99e9
Validity
Not Before: Oct 27 08:00:45 2026 GMT
Not After : Oct 28 08:00:45 2026 GMT
Subject: CN=e6b21e728d2e6867fa25b0232db7aad8a74c1156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b5:7e:45:38:f1:40:1b:3f:32:35:29:e6:e0:
44:23:53:e0:d1:41:c9:86:2c:44:e3:8a:e8:a4:1b:
09:6e:e2:54:18:de:55:44:cd:bc:45:8d:00:5a:8b:
76:45:3f:5c:2b:ab:45:05:1a:65:97:68:98:2d:45:
76:2a:b7:1b:27:ad:a5:ea:09:27:cc:3c:69:c2:07:
cb:34:49:3d:4b:f6:6a:af:e2:45:8d:28:83:87:a0:
d7:f0:54:5a:55:af:db:91:a3:d5:b3:c6:05:63:bc:
6c:df:0a:11:77:d2:3f:c6:4e:fb:5f:57:dc:35:ae:
31:04:3e:37:2c:c1:6e:9a:ba:8b:48:d4:63:bd:e1:
c9:69:ed:b8:f0:d7:3c:26:90:a2:36:dd:5e:88:d9:
40:2c:9d:4d:7b:6b:53:43:f6:c1:f4:ba:10:ea:b6:
0f:46:99:dc:38:82:8a:d1:76:ce:3e:d6:09:11:1a:
93:e1:e5:6a:d5:72:5f:50:df:6c:22:65:60:2b:38:
85:63:89:8a:78:26:ff:51:d8:4f:ac:cd:6e:68:67:
09:d1:75:16:66:dd:c7:c1:97:f6:6a:54:bb:e5:18:
25:e5:c7:5c:c4:fa:e3:c7:ee:f3:63:1b:09:01:fd:
aa:ed:c1:85:2a:96:6a:07:8b:de:87:9b:34:48:ba:
ef:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B2:1E:72:8D:2E:68:67:FA:25:B0:23:2D:B7:AA:D8:A7:4C:11:56
X509v3 Authority Key Identifier:
keyid:47:A8:2E:55:77:9A:1E:A4:EF:99:67:F8:21:D5:CC:05:B7:BD:99:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6guVXeaHqTvmWf4IdXMBbe9mek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/59afab-e0a8-42d0-873b-6005c0111f1e/1/R6guVXeaHqTvmWf4IdXMBbe9mek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1c:27:b8:fb:fb:ae:63:ae:8b:c3:ad:a4:76:88:d3:87:13:
13:54:7b:bf:a9:74:5a:13:67:5b:77:7b:d9:ee:5b:12:89:62:
85:81:81:e1:eb:fe:97:94:a8:0b:4e:7f:2a:ce:fa:bb:e3:1a:
41:c6:b7:aa:5b:9e:1c:c4:33:30:64:eb:43:68:52:f8:8c:c8:
98:d6:98:4d:f6:91:17:e3:39:6b:db:4a:2b:29:70:2a:1c:30:
89:d3:6b:55:f5:88:4e:4a:50:91:ef:6d:7f:d5:22:a8:6e:27:
3a:2f:0a:3c:fd:14:03:21:91:39:c7:09:d4:92:86:23:21:f5:
fa:3b:c7:ad:eb:e6:eb:b7:79:e0:17:18:22:4c:f9:d6:ae:9d:
ff:67:fb:8c:ab:ab:93:6d:07:f1:66:f0:6b:87:37:11:2e:00:
d2:25:b5:2d:eb:02:4c:5b:68:16:cb:95:bd:8f:ec:66:42:d5:
01:29:6d:ff:c3:28:68:30:69:ac:af:4c:ab:7d:2a:d7:77:6a:
80:c8:7a:67:f9:e8:a1:ce:72:42:d5:ae:9e:45:d2:7d:63:37:
2b:5c:00:a4:fa:ca:24:64:ba:ae:40:d3:d2:b4:3f:1f:5d:2f:
4a:b7:bb:7d:5b:20:e8:8c:8a:e5:a0:ad:20:64:c8:f7:ff:44:
01:82:7f:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YEI2q2Kx9m+PYegeHuJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YTgyZTU1Nzc5YTFlYTRlZjk5NjdmODIxZDVjYzA1Yjdi
ZDk5ZTkwHhcNMjYxMDI3MDgwMDQ1WhcNMjYxMDI4MDgwMDQ1WjAzMTEwLwYDVQQD
EyhlNmIyMWU3MjhkMmU2ODY3ZmEyNWIwMjMyZGI3YWFkOGE3NGMxMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLV+RTjxQBs/MjUp5uBEI1Pg0UHJ
hixE44ropBsJbuJUGN5VRM28RY0AWot2RT9cK6tFBRpll2iYLUV2KrcbJ62l6gkn
zDxpwgfLNEk9S/Zqr+JFjSiDh6DX8FRaVa/bkaPVs8YFY7xs3woRd9I/xk77X1fc
Na4xBD43LMFumrqLSNRjveHJae248Nc8JpCiNt1eiNlALJ1Ne2tTQ/bB9LoQ6rYP
RpncOIKK0XbOPtYJERqT4eVq1XJfUN9sImVgKziFY4mKeCb/UdhPrM1uaGcJ0XUW
Zt3HwZf2alS75Rgl5cdcxPrjx+7zYxsJAf2q7cGFKpZqB4veh5s0SLrvJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOayHnKNLmhn+iWwIy23qtinTBFWMB8GA1UdIwQY
MBaAFEeoLlV3mh6k75ln+CHVzAW3vZnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2It
NjAwNWMwMTExZjFlLzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81OWFmYWItZTBhOC00MmQwLTg3M2ItNjAwNWMwMTExZjFl
LzEvUjZndVZYZWFIcVR2bVdmNElkWE1CYmU5bWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBwnuPv7
rmOui8OtpHaI04cTE1R7v6l0WhNnW3d72e5bEolihYGB4ev+l5SoC05/Ks76u+Ma
Qca3qlueHMQzMGTrQ2hS+IzImNaYTfaRF+M5a9tKKylwKhwwidNrVfWITkpQke9t
f9UiqG4nOi8KPP0UAyGROccJ1JKGIyH1+jvHrevm67d54BcYIkz51q6d/2f7jKur
k20H8Wbwa4c3ES4A0iW1LesCTFtoFsuVvY/sZkLVASlt/8MoaDBprK9Mq30q13dq
gMh6Z/nooc5yQtWunkXSfWM3K1wApPrKJGS6rkDT0rQ/H10vSre7fVsg6IyK5aCt
IGTI9/9EAYJ/4g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:33 2026 by rpki-client