Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: qg+vS7iOCbrRUrdB4FRa8siaPiPSaXWhSl8To+Tf7xw=
Subject key identifier: 86:83:0A:53:D3:5E:A4:EA:70:24:46:EB:20:DA:FF:00:C7:05:FA:5C
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 01A193C39A823F5703E8FBCE1680B2C4FD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 1AD8
Signing time: Sat 31 Oct 2026 21:00:32 +0000
Manifest this update: Sat 31 Oct 2026 21:00:32 +0000
Manifest next update: Sun 01 Nov 2026 21:00:32 +0000
Files and hashes: 1: 35RBbJH7O74ElGBsXDtzWelJCE8.asa (hash: VGTXJkpFVsNFQM4P5dimy32ItUqxw4xThmopk2UmxJs=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: oxbn/R9OoIJYMExVjTIiIVUan7hdDrHBlemUK2SgGXw=)
3: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:c3:9a:82:3f:57:03:e8:fb:ce:16:80:b2:c4:fd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Oct 31 21:00:32 2026 GMT
Not After : Nov 1 21:00:32 2026 GMT
Subject: CN=86830a53d35ea4ea702446eb20daff00c705fa5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:b9:c0:e9:49:ce:76:85:ef:be:ab:6f:e6:
b8:ce:06:5d:f1:c7:58:91:75:a4:34:59:b8:c8:ab:
19:1a:d9:8f:86:5a:d4:2e:2a:26:9f:5c:4a:a6:39:
fc:a7:4b:71:b3:59:ff:6c:0c:5e:b7:84:a0:3f:4b:
72:b1:25:05:c1:a2:60:3d:b5:3a:18:4a:5c:6e:1f:
ae:50:ed:a6:fa:5a:c8:f8:c6:b6:36:1d:5e:2f:78:
2f:f9:8f:e3:6b:0e:a8:11:25:7c:50:ae:77:37:8f:
5b:0e:1e:83:8d:d1:a9:17:3c:66:8b:45:c9:a4:50:
e0:93:1f:c4:bf:b9:b8:bd:cc:ae:b6:98:44:26:0f:
30:16:d4:0f:29:4e:96:df:bf:e8:a7:20:61:fc:bb:
6b:a8:e7:74:12:9c:f7:ed:0e:34:4a:1e:05:0c:ed:
17:7b:72:2b:8a:8c:30:3d:12:f9:54:6f:e1:d5:ab:
31:7c:f5:98:9a:91:4b:be:5c:4c:fb:f4:7b:3d:23:
86:27:42:b0:29:ac:09:54:06:8b:9b:b4:a5:e7:ce:
b5:9d:4d:87:ea:81:2c:7f:06:b9:7e:cb:ad:5e:d6:
3d:2e:cc:7c:ab:42:51:a4:db:35:21:56:d5:fc:96:
fc:0f:a9:df:d9:b8:87:7c:ad:36:4a:77:27:74:d1:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:83:0A:53:D3:5E:A4:EA:70:24:46:EB:20:DA:FF:00:C7:05:FA:5C
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5d:4d:61:8a:14:3e:71:47:eb:f5:31:8f:0c:ad:c3:ff:48:
c4:cc:56:8a:4a:46:83:40:3d:d2:d8:b1:0e:ed:bc:d1:aa:74:
44:f9:17:dc:38:df:05:3c:4c:29:be:f6:c1:67:37:7d:32:db:
ae:1b:e0:19:bb:c9:92:3b:c3:27:3f:be:5f:ef:7a:3b:bf:2b:
2f:e1:66:79:25:fa:34:72:d6:51:02:f9:fc:7e:70:14:9f:f7:
00:88:42:a6:65:c2:a8:7f:94:12:a1:5b:3c:52:c6:89:e2:4f:
07:b3:96:3a:0f:85:99:c5:ee:0c:76:06:b3:26:43:3f:be:81:
47:bf:a5:8b:2d:83:d0:9c:35:c1:f2:b0:b9:af:db:e8:bf:b2:
8f:04:94:b4:ec:15:21:8c:ac:d4:a0:5c:01:be:23:8c:50:06:
e7:4d:21:73:d3:98:7f:f1:fa:af:6f:2a:7d:38:81:b3:22:1c:
e6:da:dd:cb:0e:52:ac:1c:0d:1d:e8:37:c7:f2:d3:f1:92:ef:
ec:a5:a0:ca:b4:8b:5a:db:49:62:5f:1e:fc:b0:00:2a:fc:d5:
07:30:2d:59:24:00:56:a3:e2:ad:f9:96:0f:a0:13:a2:b9:41:
4b:ad:04:0e:e1:65:92:a3:9e:05:30:43:47:b9:15:8b:e3:f9:
d7:a0:f3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGTw5qCP1cD6PvOFoCyxP2OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2
Yjc3NGMwHhcNMjYxMDMxMjEwMDMyWhcNMjYxMTAxMjEwMDMyWjAzMTEwLwYDVQQD
Eyg4NjgzMGE1M2QzNWVhNGVhNzAyNDQ2ZWIyMGRhZmYwMGM3MDVmYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J+5wOlJznaF776rb+a4zgZd8cdY
kXWkNFm4yKsZGtmPhlrULiomn1xKpjn8p0txs1n/bAxet4SgP0tysSUFwaJgPbU6
GEpcbh+uUO2m+lrI+Ma2Nh1eL3gv+Y/jaw6oESV8UK53N49bDh6DjdGpFzxmi0XJ
pFDgkx/Ev7m4vcyutphEJg8wFtQPKU6W37/opyBh/LtrqOd0Epz37Q40Sh4FDO0X
e3IriowwPRL5VG/h1asxfPWYmpFLvlxM+/R7PSOGJ0KwKawJVAaLm7Sl5861nU2H
6oEsfwa5fsutXtY9Lsx8q0JRpNs1IVbV/Jb8D6nf2biHfK02SncndNGN4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIaDClPTXqTqcCRG6yDa/wDHBfpcMB8GA1UdIwQY
MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt
MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5
LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY11NYYoU
PnFH6/Uxjwytw/9IxMxWikpGg0A90tixDu280ap0RPkX3DjfBTxMKb72wWc3fTLb
rhvgGbvJkjvDJz++X+96O78rL+FmeSX6NHLWUQL5/H5wFJ/3AIhCpmXCqH+UEqFb
PFLGieJPB7OWOg+FmcXuDHYGsyZDP76BR7+liy2D0Jw1wfKwua/b6L+yjwSUtOwV
IYys1KBcAb4jjFAG500hc9OYf/H6r28qfTiBsyIc5trdyw5SrBwNHeg3x/LT8ZLv
7KWgyrSLWttJYl8e/LAAKvzVBzAtWSQAVqPirfmWD6ATorlBS60EDuFlkqOeBTBD
R7kVi+P516DzGA==
-----END CERTIFICATE-----
Generated at Sun Nov 1 01:53:26 2026 by rpki-client