Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
File: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft (raw, json)
Hash identifier: QXikisZYtWj5UbtzGg2QGDSRCYVeIIvCaDcGX+Uvja0=
Subject key identifier: 7C:00:87:E0:55:B2:93:D6:89:7A:6F:9E:EB:0C:A4:7C:08:74:F2:93
Authority key identifier: D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
Certificate issuer: /CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Certificate serial: 01A13CDC1CDB7DFF63A0F2B715DC9229D302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
Manifest number: 0A65
Signing time: Thu 15 Oct 2026 00:00:20 +0000
Manifest this update: Thu 15 Oct 2026 00:00:20 +0000
Manifest next update: Fri 16 Oct 2026 00:00:20 +0000
Files and hashes: 1: 1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl (hash: C2SntThv+lqrv04Y1h2Ee1mQIYMWYyK9iyovc8Pm7vQ=)
2: KY98OK9jKpqbO2GmZe7Es_X3AuY.roa (hash: cBxNonBZQsdFtI0G+UJX4+MOa5fw7YrWs9H/ZAWUf1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:1c:db:7d:ff:63:a0:f2:b7:15:dc:92:29:d3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6b2bcb42a6d7fd63d4f0ac593e9f807362f321b
Validity
Not Before: Oct 15 00:00:20 2026 GMT
Not After : Oct 16 00:00:20 2026 GMT
Subject: CN=7c0087e055b293d6897a6f9eeb0ca47c0874f293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:95:49:7e:8e:b4:61:ba:ff:4b:bf:06:1d:
29:84:2b:56:04:1e:be:f6:1f:84:4b:9e:0a:6c:2c:
81:71:6b:28:00:dc:9d:8d:1a:cc:49:46:2f:dd:8c:
c7:f3:30:18:ee:5c:61:6d:a1:2d:55:b2:6f:46:04:
46:aa:bb:8e:27:45:fb:92:e4:d5:1b:ba:ae:02:5c:
48:32:91:f9:fb:cf:b2:18:25:f6:cf:11:ad:7b:d4:
b3:8e:1c:32:c1:f1:b0:40:e8:0e:4d:f9:da:a2:c1:
c8:ee:65:a9:c0:1a:d2:bc:e9:d6:56:16:15:9a:e8:
49:f3:67:1d:85:c1:7e:4a:4f:65:82:f5:92:99:64:
a9:d6:e4:79:25:7c:72:c6:63:31:bf:d7:4e:b5:da:
e2:7d:fc:a1:d5:8c:73:58:a7:4f:49:e3:f1:cf:01:
83:5c:04:69:e0:8b:7c:60:06:71:ba:4a:1b:c1:fa:
7c:84:36:59:ff:b5:db:49:a0:6a:d5:85:4f:78:b8:
76:2e:14:cd:90:ab:40:02:20:d3:ce:e5:d1:c6:95:
18:52:90:82:d6:fa:2e:57:cf:75:6b:9f:ff:72:5d:
2d:e0:30:7c:ab:0f:a0:8c:6e:4d:ee:a4:4a:bc:5d:
3b:60:5e:06:6f:b8:bf:83:c2:8c:bc:13:e2:c5:c1:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:00:87:E0:55:B2:93:D6:89:7A:6F:9E:EB:0C:A4:7C:08:74:F2:93
X509v3 Authority Key Identifier:
keyid:D6:B2:BC:B4:2A:6D:7F:D6:3D:4F:0A:C5:93:E9:F8:07:36:2F:32:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1rK8tCptf9Y9TwrFk-n4BzYvMhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3e8d75-80ec-44b8-b2a4-efd2892b6ebf/1/1rK8tCptf9Y9TwrFk-n4BzYvMhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e4:b5:e0:43:47:72:e1:18:66:1c:2c:de:68:46:0f:0f:5b:
63:d6:27:b4:a2:2b:38:bf:e9:49:83:a6:5a:3f:4c:6a:f4:a9:
5c:79:80:cb:e4:f6:41:c8:91:1d:cc:a5:a9:78:a1:3c:e7:e7:
6e:40:04:b1:81:11:dc:21:da:7a:af:15:81:e7:08:4a:53:00:
24:5c:ee:06:30:be:73:74:3d:48:16:5b:17:d3:65:9b:4b:4b:
c6:ab:85:75:79:88:81:38:66:c8:d4:b5:7a:59:3d:85:56:12:
a2:35:99:7f:bb:1d:b9:c3:a0:38:2c:90:25:67:44:7c:12:31:
aa:0c:d1:c0:99:2e:72:9f:e2:a0:20:52:8a:00:15:b0:f8:9b:
d9:44:b3:eb:cb:68:35:b1:7c:64:b6:72:40:1d:dd:d5:24:f5:
b3:59:59:28:86:40:1b:a3:ab:29:69:ff:79:c2:30:17:2b:e3:
96:98:88:1d:2a:83:e6:25:75:1f:49:32:00:55:b6:b6:49:6f:
72:31:65:2b:d0:1e:3a:34:2e:66:66:dd:f4:46:b4:e6:ff:b8:
d3:23:9b:e1:00:fd:3a:bf:5b:31:8b:c5:a2:01:d4:be:37:a3:
87:9b:15:86:6e:59:ad:dc:77:30:58:58:b4:f5:ef:4e:57:89:
a7:5a:16:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83Bzbff9joPK3FdySKdMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YjJiY2I0MmE2ZDdmZDYzZDRmMGFjNTkzZTlmODA3MzYy
ZjMyMWIwHhcNMjYxMDE1MDAwMDIwWhcNMjYxMDE2MDAwMDIwWjAzMTEwLwYDVQQD
Eyg3YzAwODdlMDU1YjI5M2Q2ODk3YTZmOWVlYjBjYTQ3YzA4NzRmMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGyVSX6OtGG6/0u/Bh0phCtWBB6+
9h+ES54KbCyBcWsoANydjRrMSUYv3YzH8zAY7lxhbaEtVbJvRgRGqruOJ0X7kuTV
G7quAlxIMpH5+8+yGCX2zxGte9SzjhwywfGwQOgOTfnaosHI7mWpwBrSvOnWVhYV
muhJ82cdhcF+Sk9lgvWSmWSp1uR5JXxyxmMxv9dOtdriffyh1YxzWKdPSePxzwGD
XARp4It8YAZxukobwfp8hDZZ/7XbSaBq1YVPeLh2LhTNkKtAAiDTzuXRxpUYUpCC
1vouV891a5//cl0t4DB8qw+gjG5N7qRKvF07YF4Gb7i/g8KMvBPixcE1twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwAh+BVspPWiXpvnusMpHwIdPKTMB8GA1UdIwQY
MBaAFNayvLQqbX/WPU8KxZPp+Ac2LzIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQt
ZWZkMjg5MmI2ZWJmLzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zZThkNzUtODBlYy00NGI4LWIyYTQtZWZkMjg5MmI2ZWJm
LzEvMXJLOHRDcHRmOVk5VHdyRmstbjRCell2TWhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuS14ENH
cuEYZhws3mhGDw9bY9YntKIrOL/pSYOmWj9MavSpXHmAy+T2QciRHcylqXihPOfn
bkAEsYER3CHaeq8VgecISlMAJFzuBjC+c3Q9SBZbF9Nlm0tLxquFdXmIgThmyNS1
elk9hVYSojWZf7sducOgOCyQJWdEfBIxqgzRwJkucp/ioCBSigAVsPib2USz68to
NbF8ZLZyQB3d1ST1s1lZKIZAG6OrKWn/ecIwFyvjlpiIHSqD5iV1H0kyAFW2tklv
cjFlK9AeOjQuZmbd9Ea05v+40yOb4QD9Or9bMYvFogHUvjejh5sVhm5Zrdx3MFhY
tPXvTleJp1oW6A==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:22 2026 by rpki-client