Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
File: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft (raw, json)
Hash identifier: rTIIn53Zu+8tRTblzaZjpYxDP81ye9W8nBJlL4oYp38=
Subject key identifier: 35:21:7A:51:7E:B4:44:6B:11:6A:28:7A:1E:19:32:07:C6:74:19:04
Authority key identifier: AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
Certificate issuer: /CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Certificate serial: 01A03DF1B77E3075E8D8EE5D2A5128FBAD08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
Manifest number: 1A27
Signing time: Wed 26 Aug 2026 12:00:46 +0000
Manifest this update: Wed 26 Aug 2026 12:00:46 +0000
Manifest next update: Thu 27 Aug 2026 12:00:46 +0000
Files and hashes: 1: 35RBbJH7O74ElGBsXDtzWelJCE8.asa (hash: VGTXJkpFVsNFQM4P5dimy32ItUqxw4xThmopk2UmxJs=)
2: rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl (hash: MnKgw3huInQ8bzedKBsLy5LPmyNPiDTaCUSqsoZfU/w=)
3: weWWuV6jfsu20O1Kp8PZ_7w5-6I.roa (hash: hxVuyj93Sh3p92R2/8BnJWSOvPERrOV88q73B7vWqrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:f1:b7:7e:30:75:e8:d8:ee:5d:2a:51:28:fb:ad:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8f5438073a621aea772f5cb7a4efd58c6b774c
Validity
Not Before: Aug 26 12:00:46 2026 GMT
Not After : Aug 27 12:00:46 2026 GMT
Subject: CN=35217a517eb4446b116a287a1e193207c6741904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:68:15:61:ed:4a:fd:68:3b:1f:2d:ec:d9:5e:
1b:d9:c3:88:18:6a:c5:6f:2b:72:ee:c7:fe:5d:7e:
cb:5f:9d:44:87:66:02:eb:ef:dc:80:ad:3a:57:75:
f6:d4:8d:20:da:2c:bd:8a:28:13:c5:ad:d4:dd:f2:
ab:c8:50:d7:9a:13:7e:da:ca:da:b2:c9:2a:28:26:
87:5c:cc:11:69:2f:33:8c:db:b3:50:17:8f:44:ca:
69:7c:31:97:c8:b0:54:36:37:99:c0:25:4e:b3:0c:
8c:3f:29:13:19:45:10:7d:3f:5a:e1:29:30:9e:26:
c3:c2:5b:92:18:a6:40:93:10:98:42:83:01:44:ba:
7e:e5:09:ca:56:c2:97:dd:c6:d8:fc:ac:1d:73:68:
3d:cb:cf:08:ee:cb:ce:86:d6:d7:35:28:21:64:a7:
e6:8c:be:82:29:9e:e6:dd:a7:cc:de:d8:9d:9a:dc:
1b:19:ca:5f:1d:ad:31:7a:87:9e:b2:20:07:fe:24:
4a:17:36:94:b8:88:64:0f:db:6f:6b:8b:7a:af:f6:
cf:e9:ab:ef:c4:5e:f2:36:20:2f:7b:90:93:e0:87:
86:a0:2d:6f:a4:77:6a:ea:29:8e:be:bb:e2:a5:61:
ef:92:3d:e7:22:38:18:c9:ed:aa:d3:f2:13:23:df:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:7A:51:7E:B4:44:6B:11:6A:28:7A:1E:19:32:07:C6:74:19:04
X509v3 Authority Key Identifier:
keyid:AD:8F:54:38:07:3A:62:1A:EA:77:2F:5C:B7:A4:EF:D5:8C:6B:77:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/d14ef5-f4db-43bc-8ccf-1778ba25d8b9/1/rY9UOAc6Yhrqdy9ct6Tv1Yxrd0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:22:d0:da:85:28:e7:09:3d:81:00:40:e4:9e:46:ff:d7:42:
2f:b1:06:5a:83:8b:06:2c:0e:7c:0d:8b:ea:0b:c3:fa:58:1b:
87:a7:c3:4b:c8:58:ca:52:e3:b8:07:0e:95:1a:13:01:82:b6:
dd:a4:12:61:8e:29:f6:88:a7:42:16:43:3e:89:55:c0:23:7e:
93:bf:98:bf:1c:e7:e0:32:80:0f:27:89:a7:fc:27:0c:ea:e3:
53:c9:d1:e0:53:09:af:30:40:af:ed:22:d1:18:71:9a:46:22:
be:e5:64:6b:83:9f:c7:4c:c8:4c:ea:e2:28:cc:6d:6c:d7:aa:
62:6d:a0:64:60:27:e7:9e:07:ba:b4:29:94:73:d5:04:49:7c:
3f:63:d0:f6:a3:85:e1:2d:40:f1:49:9c:74:f6:64:af:d0:f0:
be:c5:a3:73:eb:2f:ef:44:6c:59:f9:bf:25:3d:5a:b1:47:66:
db:4c:dd:91:47:2e:de:c7:2b:7c:9a:1c:45:e6:5f:fd:c6:4e:
33:97:ca:3a:77:b3:8d:f5:d2:a9:81:76:ec:c2:b8:0f:28:7b:
f7:89:10:6e:52:06:0f:4e:78:29:ae:02:d3:20:4c:ee:95:c7:
a1:dd:26:3e:95:86:5e:7f:31:a1:c2:a7:3c:ea:1c:61:b2:7c:
bf:e3:8e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA98bd+MHXo2O5dKlEo+60IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOGY1NDM4MDczYTYyMWFlYTc3MmY1Y2I3YTRlZmQ1OGM2
Yjc3NGMwHhcNMjYwODI2MTIwMDQ2WhcNMjYwODI3MTIwMDQ2WjAzMTEwLwYDVQQD
EygzNTIxN2E1MTdlYjQ0NDZiMTE2YTI4N2ExZTE5MzIwN2M2NzQxOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWgVYe1K/Wg7Hy3s2V4b2cOIGGrF
byty7sf+XX7LX51Eh2YC6+/cgK06V3X21I0g2iy9iigTxa3U3fKryFDXmhN+2sra
sskqKCaHXMwRaS8zjNuzUBePRMppfDGXyLBUNjeZwCVOswyMPykTGUUQfT9a4Skw
nibDwluSGKZAkxCYQoMBRLp+5QnKVsKX3cbY/Kwdc2g9y88I7svOhtbXNSghZKfm
jL6CKZ7m3afM3tidmtwbGcpfHa0xeoeesiAH/iRKFzaUuIhkD9tva4t6r/bP6avv
xF7yNiAve5CT4IeGoC1vpHdq6imOvrvipWHvkj3nIjgYye2q0/ITI98mBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUhelF+tERrEWooeh4ZMgfGdBkEMB8GA1UdIwQY
MBaAFK2PVDgHOmIa6ncvXLek79WMa3dMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2Yt
MTc3OGJhMjVkOGI5LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9kMTRlZjUtZjRkYi00M2JjLThjY2YtMTc3OGJhMjVkOGI5
LzEvclk5VU9BYzZZaHJxZHk5Y3Q2VHYxWXhyZDB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAISLQ2oUo
5wk9gQBA5J5G/9dCL7EGWoOLBiwOfA2L6gvD+lgbh6fDS8hYylLjuAcOlRoTAYK2
3aQSYY4p9oinQhZDPolVwCN+k7+Yvxzn4DKADyeJp/wnDOrjU8nR4FMJrzBAr+0i
0RhxmkYivuVka4Ofx0zITOriKMxtbNeqYm2gZGAn554HurQplHPVBEl8P2PQ9qOF
4S1A8UmcdPZkr9DwvsWjc+sv70RsWfm/JT1asUdm20zdkUcu3scrfJocReZf/cZO
M5fKOnezjfXSqYF27MK4Dyh794kQblIGD054Ka4C0yBM7pXHod0mPpWGXn8xocKn
POocYbJ8v+OOtg==
-----END CERTIFICATE-----
Generated at Wed Aug 26 15:14:57 2026 by rpki-client