Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
File: IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft (raw, json)
Hash identifier: PXPjiraZpPFuv2eqF8A2ryHJ6G9JFT8QCqOVoW2ddAY=
Subject key identifier: 8D:C7:D6:B8:F3:16:AF:86:9E:C7:0B:5F:C6:80:C3:04:B1:5A:C3:57
Authority key identifier: 20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
Certificate issuer: /CN=200585361d51a72e7ba6308c0ceb160244831178
Certificate serial: 01A17FD04B8A0ADB7C0F4F286A5E51E458B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
Manifest number: 0BFA
Signing time: Wed 28 Oct 2026 00:01:59 +0000
Manifest this update: Wed 28 Oct 2026 00:01:59 +0000
Manifest next update: Thu 29 Oct 2026 00:01:59 +0000
Files and hashes: 1: 4kSC89D1AOgPjo_VC2p_1wAdyJ4.roa (hash: 49whWUdE9kNFPfnAL8tYbd6+c7MEWg0vvwt7AatABa0=)
2: IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl (hash: TvDaiBJ7AD4vGfH4B5oGx0m34yXSzoIGCb2/QsnypUQ=)
3: d32KHDz4hQyuCuhNOb9K5kOq2qY.roa (hash: Sa1ntueDsGqjR2cwqIdDg9aoAqEdJGNyLoTHBEU6HPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:4b:8a:0a:db:7c:0f:4f:28:6a:5e:51:e4:58:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200585361d51a72e7ba6308c0ceb160244831178
Validity
Not Before: Oct 28 00:01:59 2026 GMT
Not After : Oct 29 00:01:59 2026 GMT
Subject: CN=8dc7d6b8f316af869ec70b5fc680c304b15ac357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:bd:45:4a:79:47:66:69:c4:dd:35:73:a2:
95:e1:f6:a8:68:db:ab:b5:10:43:4e:ab:25:b7:ba:
8a:03:c2:5d:ff:1b:a4:33:75:ac:61:23:6b:16:d5:
79:65:2f:17:20:72:ec:b0:6c:3b:a3:ee:f8:b2:14:
db:d1:1d:c9:93:b0:e2:41:01:7e:74:44:36:7d:81:
d2:4f:f9:51:aa:ec:e5:41:88:09:4c:2e:6f:af:20:
de:23:f6:c0:31:bc:38:cd:37:3c:10:11:0d:5d:f5:
0e:54:92:ae:0f:42:b0:4e:8f:79:b0:21:58:60:78:
fa:02:9c:1c:79:0c:39:ab:6b:d0:44:79:81:d5:8d:
1c:9f:55:0b:7e:72:a4:bc:df:ff:53:d4:50:d6:d7:
90:d7:8f:35:5f:00:f8:b9:52:67:9a:34:6c:61:a0:
a6:d0:ce:37:3f:a4:aa:6d:7e:6d:87:79:4a:4c:2a:
94:e5:56:1b:19:50:62:6d:8b:a3:55:32:76:67:2d:
b4:f6:93:1a:4c:ad:86:cf:11:b9:12:29:23:57:0a:
e6:83:c1:a9:e9:42:5b:45:0a:15:5d:5f:38:33:46:
7c:24:d5:fd:0c:bd:ff:8e:b5:21:ff:b1:20:e9:38:
05:be:70:88:1e:af:9b:33:bc:5e:50:be:72:14:f8:
f1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:D6:B8:F3:16:AF:86:9E:C7:0B:5F:C6:80:C3:04:B1:5A:C3:57
X509v3 Authority Key Identifier:
keyid:20:05:85:36:1D:51:A7:2E:7B:A6:30:8C:0C:EB:16:02:44:83:11:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IAWFNh1Rpy57pjCMDOsWAkSDEXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d87f8e-6723-4b16-9e71-31779875b4fa/1/IAWFNh1Rpy57pjCMDOsWAkSDEXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:36:0f:c2:1b:03:06:2b:51:21:d7:ca:52:dd:93:78:91:0b:
3a:17:c2:96:db:84:d7:40:60:bd:71:8b:c9:70:03:d8:03:35:
59:4a:10:ef:4d:af:b7:3f:4b:9e:47:25:c9:7d:79:21:67:df:
a2:e5:84:a5:37:a5:e7:2b:8f:d0:ad:42:6c:d2:3c:fc:e7:24:
18:07:d9:0e:bd:52:ec:15:51:c6:e3:16:b1:2a:43:3d:8c:f5:
23:1d:a7:d4:3a:88:ca:56:a0:f3:7c:da:b2:df:70:84:a9:3e:
19:b5:04:75:8a:90:d0:39:68:8a:58:ae:40:a6:b7:e3:b0:24:
63:12:d1:8c:8a:cf:bb:1f:e2:ec:6b:28:a1:2d:83:49:80:f6:
e9:a7:e0:35:c8:d8:dd:20:0d:3e:a8:54:b5:8c:40:4f:f4:10:
6e:6e:d2:3e:82:b8:1e:f0:f9:a8:79:04:d0:d6:66:74:ef:0d:
fa:a3:8e:1c:53:1c:89:80:31:bf:1b:94:cf:03:b6:c1:a6:d6:
26:8d:a4:69:a9:ec:71:e8:07:dc:e6:48:75:52:fb:56:2b:f8:
97:85:48:49:37:5b:29:47:1a:c9:49:8b:14:34:9b:33:0c:6f:
f8:ac:ee:08:2b:4d:49:af:65:08:05:35:1b:78:7a:cc:77:30:
53:72:71:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/0EuKCtt8D08oal5R5FizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMDU4NTM2MWQ1MWE3MmU3YmE2MzA4YzBjZWIxNjAyNDQ4
MzExNzgwHhcNMjYxMDI4MDAwMTU5WhcNMjYxMDI5MDAwMTU5WjAzMTEwLwYDVQQD
Eyg4ZGM3ZDZiOGYzMTZhZjg2OWVjNzBiNWZjNjgwYzMwNGIxNWFjMzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+m9RUp5R2ZpxN01c6KV4faoaNur
tRBDTqslt7qKA8Jd/xukM3WsYSNrFtV5ZS8XIHLssGw7o+74shTb0R3Jk7DiQQF+
dEQ2fYHST/lRquzlQYgJTC5vryDeI/bAMbw4zTc8EBENXfUOVJKuD0KwTo95sCFY
YHj6ApwceQw5q2vQRHmB1Y0cn1ULfnKkvN//U9RQ1teQ1481XwD4uVJnmjRsYaCm
0M43P6SqbX5th3lKTCqU5VYbGVBibYujVTJ2Zy209pMaTK2GzxG5EikjVwrmg8Gp
6UJbRQoVXV84M0Z8JNX9DL3/jrUh/7Eg6TgFvnCIHq+bM7xeUL5yFPjxZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3H1rjzFq+GnscLX8aAwwSxWsNXMB8GA1UdIwQY
MBaAFCAFhTYdUacue6YwjAzrFgJEgxF4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEt
MzE3Nzk4NzViNGZhLzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kODdmOGUtNjcyMy00YjE2LTllNzEtMzE3Nzk4NzViNGZh
LzEvSUFXRk5oMVJweTU3cGpDTURPc1dBa1NERVhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzYPwhsD
BitRIdfKUt2TeJELOhfCltuE10BgvXGLyXAD2AM1WUoQ702vtz9LnkclyX15IWff
ouWEpTel5yuP0K1CbNI8/OckGAfZDr1S7BVRxuMWsSpDPYz1Ix2n1DqIylag83za
st9whKk+GbUEdYqQ0DloiliuQKa347AkYxLRjIrPux/i7GsooS2DSYD26afgNcjY
3SANPqhUtYxAT/QQbm7SPoK4HvD5qHkE0NZmdO8N+qOOHFMciYAxvxuUzwO2wabW
Jo2kaanscegH3OZIdVL7Viv4l4VISTdbKUcayUmLFDSbMwxv+KzuCCtNSa9lCAU1
G3h6zHcwU3Jxqg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:39:25 2026 by rpki-client