Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
File: rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft (raw, json)
Hash identifier: KufVu1kfO1SLZUp3SVATvh7PS36YOn3vQ3QcnxD0gLM=
Subject key identifier: 5C:1E:AA:A3:79:84:1B:FB:DB:25:F6:24:30:18:FF:BA:EA:D1:94:8E
Authority key identifier: AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8
Certificate issuer: /CN=ac14d9c6dbe4bb33dd4c419e636c0ecf50043ed8
Certificate serial: 01A1593075FF28382E597763F84716A2CD88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:50 +0000
Manifest this update: Tue 20 Oct 2026 12:01:50 +0000
Manifest next update: Wed 21 Oct 2026 12:01:50 +0000
Files and hashes: 1: DgHq7702gPO0TTgEmkiefmf4EOU.roa (hash: V6OTSskB0p/4S0bZ6/704K0TtNz5fFItHvyb52CR0ks=)
2: rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl (hash: 5mcEryU4XQtKufs6yZIwUp3mjOGHEsXDFM6mlYBpTF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:75:ff:28:38:2e:59:77:63:f8:47:16:a2:cd:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac14d9c6dbe4bb33dd4c419e636c0ecf50043ed8
Validity
Not Before: Oct 20 12:01:50 2026 GMT
Not After : Oct 21 12:01:50 2026 GMT
Subject: CN=5c1eaaa379841bfbdb25f6243018ffbaead1948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:44:96:93:89:65:78:c2:53:04:6e:b6:a5:
b5:6f:31:ce:8b:98:13:9a:b5:6b:4b:e4:20:b4:ba:
a8:35:3b:2a:05:94:8d:be:21:ef:ac:33:2e:af:a0:
d8:9c:d9:88:bf:1e:ed:13:bb:19:49:17:3c:8b:3f:
97:3b:e8:5d:b7:36:87:2b:c2:d5:33:2c:58:c7:52:
7f:16:67:6d:51:bd:77:37:12:90:bb:18:c1:a2:f3:
31:0c:bd:1e:a5:9b:af:8b:5e:b8:01:8f:df:c0:da:
99:cd:68:c4:98:f9:7c:69:37:a7:53:31:1a:0f:b0:
fe:f3:6d:13:22:35:c6:09:7c:4b:be:a1:70:28:21:
f7:2b:c1:80:07:42:83:68:59:fb:e6:7d:36:0c:74:
c8:c4:fe:4e:1a:a3:40:9e:cd:65:aa:46:dd:28:8a:
d1:b0:f4:43:03:41:71:f0:a0:5a:d2:73:7c:bf:f4:
2e:c3:f4:b7:71:9d:42:0b:19:e4:19:8f:43:58:02:
0f:9a:0a:65:11:52:ed:fc:1a:87:7e:2e:92:57:f2:
65:f3:ab:9f:a6:d9:16:37:94:d0:f3:67:47:1f:b9:
6c:14:19:a4:13:0d:3e:5a:03:fa:f9:dc:e7:ae:3f:
f1:39:4c:97:94:be:3b:bc:e7:b2:1b:65:17:69:18:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1E:AA:A3:79:84:1B:FB:DB:25:F6:24:30:18:FF:BA:EA:D1:94:8E
X509v3 Authority Key Identifier:
keyid:AC:14:D9:C6:DB:E4:BB:33:DD:4C:41:9E:63:6C:0E:CF:50:04:3E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBTZxtvkuzPdTEGeY2wOz1AEPtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/rBTZxtvkuzPdTEGeY2wOz1AEPtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:bc:86:a0:41:dc:b8:53:d2:6c:59:0a:81:8a:20:12:e0:0c:
b6:7f:eb:d1:f9:de:ce:3b:4a:a9:6b:23:71:be:45:53:c0:d2:
09:79:8a:45:3d:e4:83:ce:66:e0:a9:ea:11:51:0f:2e:a8:fc:
7d:aa:f4:f2:17:88:e0:47:e0:c1:90:51:97:7e:ec:46:10:fa:
fe:6c:00:7b:30:40:c3:ac:c3:f0:d4:1a:38:f1:dc:bd:1b:f1:
a0:47:7e:04:b4:e4:6d:d1:51:07:96:dd:54:d5:83:5f:7e:43:
18:ef:b2:3b:a7:a0:5f:38:b5:7b:22:84:91:5e:98:d2:2a:87:
a6:6b:5c:61:83:14:ec:38:4c:66:a4:65:90:50:33:a1:15:13:
bf:1c:bc:9a:24:eb:b6:7a:1e:7d:68:ee:0f:a8:0e:56:82:66:
82:ba:9d:1e:19:17:08:df:a7:a0:27:69:b7:72:e6:7a:48:25:
07:29:33:6b:67:01:49:ce:64:b1:00:91:03:c8:ae:ba:70:48:
08:27:f7:dc:08:38:9f:75:b6:bc:82:a3:a5:c9:60:cf:fe:15:
7e:8c:2b:e5:b7:59:a8:31:29:48:54:a7:a4:1a:96:c5:3d:2d:
5c:f5:55:9a:3c:88:54:da:63:06:77:7f:af:14:ea:91:ba:32:
cc:b2:5a:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFZMHX/KDguWXdj+EcWos2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMTRkOWM2ZGJlNGJiMzNkZDRjNDE5ZTYzNmMwZWNmNTAw
NDNlZDgwHhcNMjYxMDIwMTIwMTUwWhcNMjYxMDIxMTIwMTUwWjAzMTEwLwYDVQQD
Eyg1YzFlYWFhMzc5ODQxYmZiZGIyNWY2MjQzMDE4ZmZiYWVhZDE5NDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotxElpOJZXjCUwRutqW1bzHOi5gT
mrVrS+QgtLqoNTsqBZSNviHvrDMur6DYnNmIvx7tE7sZSRc8iz+XO+hdtzaHK8LV
MyxYx1J/FmdtUb13NxKQuxjBovMxDL0epZuvi164AY/fwNqZzWjEmPl8aTenUzEa
D7D+820TIjXGCXxLvqFwKCH3K8GAB0KDaFn75n02DHTIxP5OGqNAns1lqkbdKIrR
sPRDA0Fx8KBa0nN8v/Quw/S3cZ1CCxnkGY9DWAIPmgplEVLt/BqHfi6SV/Jl86uf
ptkWN5TQ82dHH7lsFBmkEw0+WgP6+dznrj/xOUyXlL47vOeyG2UXaRi5LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFweqqN5hBv72yX2JDAY/7rq0ZSOMB8GA1UdIwQY
MBaAFKwU2cbb5Lsz3UxBnmNsDs9QBD7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckJUWnh0dmt1elBkVEVHZVkyd096MUFFUHRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUt
NGY1MjEyMjkwNzY5LzEvckJUWnh0dmt1elBkVEVHZVkyd096MUFFUHRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUtNGY1MjEyMjkwNzY5
LzEvckJUWnh0dmt1elBkVEVHZVkyd096MUFFUHRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7yGoEHc
uFPSbFkKgYogEuAMtn/r0fnezjtKqWsjcb5FU8DSCXmKRT3kg85m4KnqEVEPLqj8
far08heI4EfgwZBRl37sRhD6/mwAezBAw6zD8NQaOPHcvRvxoEd+BLTkbdFRB5bd
VNWDX35DGO+yO6egXzi1eyKEkV6Y0iqHpmtcYYMU7DhMZqRlkFAzoRUTvxy8miTr
tnoefWjuD6gOVoJmgrqdHhkXCN+noCdpt3LmekglBykza2cBSc5ksQCRA8iuunBI
CCf33Ag4n3W2vIKjpclgz/4Vfowr5bdZqDEpSFSnpBqWxT0tXPVVmjyIVNpjBnd/
rxTqkboyzLJa2Q==
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:42:46 2026 by rpki-client