Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
File: ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft (raw, json)
Hash identifier: eZdo+Tg0r0JOduvcQ8Dpi5JUC8iNTuKLhFAwtSyDZS0=
Subject key identifier: AD:F4:15:C7:8A:FA:EE:05:BC:0B:30:ED:A8:F8:9E:66:EA:55:D2:D3
Authority key identifier: 92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
Certificate issuer: /CN=922e330b5879590abae81bf40a91a5101bc18fa0
Certificate serial: 01A17A3AAB2EE8D292BB0012387548428762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 22:00:27 +0000
Manifest this update: Mon 26 Oct 2026 22:00:27 +0000
Manifest next update: Tue 27 Oct 2026 22:00:27 +0000
Files and hashes: 1: 3pCr2mnL2pD_uXHjkQUgtPuvFPs.roa (hash: AEuGhXQguRSp/ih8O+939bXs6UO6yS5s6bISurK2/Vs=)
2: 6EZBeGxNf7QRr-7BKxfjk1mIV8I.roa (hash: WC0gwtiT4OCWAekCe2z7fiG7BMx8NcVUB2W69nAJWQM=)
3: ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl (hash: Nqv56aOt7FlU3YymLKrO0/GH5gWC1FG54ejHkD79TE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:ab:2e:e8:d2:92:bb:00:12:38:75:48:42:87:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922e330b5879590abae81bf40a91a5101bc18fa0
Validity
Not Before: Oct 26 22:00:27 2026 GMT
Not After : Oct 27 22:00:27 2026 GMT
Subject: CN=adf415c78afaee05bc0b30eda8f89e66ea55d2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:47:af:10:e7:a6:ff:c8:9d:ed:5f:8c:a9:
d9:5c:94:09:67:54:69:9f:ff:fb:91:af:2f:86:9e:
03:68:aa:e3:96:5d:47:52:fb:da:03:a1:12:f5:d1:
e0:37:8b:a1:94:35:07:93:dc:da:9d:e8:16:43:95:
e6:89:23:23:3a:3f:c0:93:94:35:0b:10:dc:a9:06:
8f:b3:6d:e0:78:9c:90:45:72:db:dc:fd:e7:00:a8:
16:62:80:76:92:45:f0:3b:67:de:d7:62:49:02:ab:
e7:17:74:59:17:06:4d:90:b3:4f:45:d7:c1:f9:db:
fb:b0:63:18:46:f2:82:37:dd:b1:ea:19:d7:4c:6e:
a0:c7:e3:5a:0c:f3:f2:0c:82:21:2d:0c:56:71:cc:
d6:cb:9f:b4:64:c1:2e:7a:2d:d2:7f:6b:b4:b5:d6:
a4:c5:db:b0:35:52:07:28:d2:f1:27:68:39:6e:05:
e4:b7:b3:72:57:14:06:98:e9:34:4a:ef:06:d8:64:
de:a4:e8:96:1c:85:fc:43:ef:a9:4b:ce:9b:9e:a3:
96:63:15:3d:0f:e1:3a:65:6e:95:2b:37:12:8a:2d:
55:40:9b:2f:0e:d7:5e:7d:b2:23:18:99:b6:8a:87:
28:d0:60:0d:8d:51:cf:74:64:32:fc:cf:ad:37:87:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F4:15:C7:8A:FA:EE:05:BC:0B:30:ED:A8:F8:9E:66:EA:55:D2:D3
X509v3 Authority Key Identifier:
keyid:92:2E:33:0B:58:79:59:0A:BA:E8:1B:F4:0A:91:A5:10:1B:C1:8F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ki4zC1h5WQq66Bv0CpGlEBvBj6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f180ff-336c-4b45-9378-568672c25ca8/1/ki4zC1h5WQq66Bv0CpGlEBvBj6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:dc:35:3e:c2:93:8e:31:a4:d3:ae:ed:c4:08:a2:ca:b6:3a:
3a:56:77:af:8e:56:f4:35:4a:8f:0d:84:64:bc:66:51:f5:b2:
5e:11:bc:73:f3:ed:3a:7e:6d:2c:3c:94:0b:33:66:97:8b:72:
5b:7d:7f:e1:44:ab:a4:a1:b9:19:d7:21:3b:c9:67:7f:22:45:
c8:16:a1:32:c3:3d:e7:63:b4:ee:70:1b:b3:72:e4:92:c1:8e:
c8:bf:f4:a1:78:7a:29:38:ae:1b:9c:49:08:f7:18:03:48:f4:
87:2d:d7:67:11:7b:78:d4:48:42:d3:86:bf:98:92:b0:0a:df:
d1:24:58:4f:75:e9:e9:68:08:46:ae:29:cb:7f:4f:58:1f:11:
9e:5c:70:24:7a:3f:f6:28:b1:d3:b6:44:5b:4b:ad:68:3c:98:
e7:fd:43:36:37:27:16:51:4d:b3:75:24:f1:17:07:e0:5e:f4:
6f:1e:47:d0:b1:fc:42:db:f8:32:0d:40:f5:0e:59:62:ac:44:
60:4f:c4:41:61:72:ce:00:b3:74:11:d9:de:66:c5:20:40:2c:
ae:b8:68:97:f7:7d:df:6f:e5:da:68:3a:e5:e9:52:5b:9e:f3:
42:a5:39:e3:c5:40:e5:e4:55:a1:3e:c5:cf:cf:e4:77:fe:cb:
17:8f:85:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6Oqsu6NKSuwASOHVIQodiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMmUzMzBiNTg3OTU5MGFiYWU4MWJmNDBhOTFhNTEwMWJj
MThmYTAwHhcNMjYxMDI2MjIwMDI3WhcNMjYxMDI3MjIwMDI3WjAzMTEwLwYDVQQD
EyhhZGY0MTVjNzhhZmFlZTA1YmMwYjMwZWRhOGY4OWU2NmVhNTVkMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWlHrxDnpv/Ine1fjKnZXJQJZ1Rp
n//7ka8vhp4DaKrjll1HUvvaA6ES9dHgN4uhlDUHk9zanegWQ5XmiSMjOj/Ak5Q1
CxDcqQaPs23geJyQRXLb3P3nAKgWYoB2kkXwO2fe12JJAqvnF3RZFwZNkLNPRdfB
+dv7sGMYRvKCN92x6hnXTG6gx+NaDPPyDIIhLQxWcczWy5+0ZMEuei3Sf2u0tdak
xduwNVIHKNLxJ2g5bgXkt7NyVxQGmOk0Su8G2GTepOiWHIX8Q++pS86bnqOWYxU9
D+E6ZW6VKzcSii1VQJsvDtdefbIjGJm2ioco0GANjVHPdGQy/M+tN4djfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK30FceK+u4FvAsw7aj4nmbqVdLTMB8GA1UdIwQY
MBaAFJIuMwtYeVkKuugb9AqRpRAbwY+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgt
NTY4NjcyYzI1Y2E4LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mMTgwZmYtMzM2Yy00YjQ1LTkzNzgtNTY4NjcyYzI1Y2E4
LzEva2k0ekMxaDVXUXE2NkJ2MENwR2xFQnZCajZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9w1PsKT
jjGk067txAiiyrY6OlZ3r45W9DVKjw2EZLxmUfWyXhG8c/PtOn5tLDyUCzNml4ty
W31/4USrpKG5GdchO8lnfyJFyBahMsM952O07nAbs3LkksGOyL/0oXh6KTiuG5xJ
CPcYA0j0hy3XZxF7eNRIQtOGv5iSsArf0SRYT3Xp6WgIRq4py39PWB8RnlxwJHo/
9iix07ZEW0utaDyY5/1DNjcnFlFNs3Uk8RcH4F70bx5H0LH8Qtv4Mg1A9Q5ZYqxE
YE/EQWFyzgCzdBHZ3mbFIEAsrrhol/d932/l2mg65elSW57zQqU548VA5eRVoT7F
z8/kd/7LF4+FXw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:42:31 2026 by rpki-client