Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: LlvCw/lRRCZUpvzPPMgvReqhS/73kgJ8cAQErbCM7Do=
Subject key identifier: C6:C6:8A:B1:79:B7:A5:84:44:36:61:D4:7E:D8:25:40:01:D5:A4:B7
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 01A13CDC4FE8CDE1F201FE82ED685F1667C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 1AB0
Signing time: Thu 15 Oct 2026 00:00:33 +0000
Manifest this update: Thu 15 Oct 2026 00:00:33 +0000
Manifest next update: Fri 16 Oct 2026 00:00:33 +0000
Files and hashes: 1: A9RfQpBK4Lmi6Tmx0CejQJ3i_6g.roa (hash: /ml6WX65AwyNhLXMSn8MV5ORhWu+aykCZ+qTwwwxX9g=)
2: Uxztf7U023GXGEUScmTqEO_gfGo.roa (hash: gGrsr7XyuRi6jd4l0HrWabkhCAVylFI6zYe23gYxDXw=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: gPw9OXxO0IMhZmlIfQIF5/n8956NOP0cOyCTJ/7S9xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:dc:4f:e8:cd:e1:f2:01:fe:82:ed:68:5f:16:67:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Oct 15 00:00:33 2026 GMT
Not After : Oct 16 00:00:33 2026 GMT
Subject: CN=c6c68ab179b7a584443661d47ed8254001d5a4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:3c:74:a0:86:89:35:17:16:44:3b:0a:b7:
0b:01:ef:7b:39:d1:87:67:58:b8:88:2a:dd:04:12:
ad:e8:6f:32:61:79:72:f3:c8:68:bb:77:4a:a3:bb:
c0:65:83:47:10:06:19:a3:94:f4:03:1b:ad:a4:45:
26:40:68:5c:0f:9c:8b:5e:9e:f3:0f:d5:32:39:65:
cd:aa:08:47:5f:05:97:83:95:c1:60:3f:80:5f:2e:
b2:cd:69:ea:f7:40:9f:cd:ef:fc:97:d3:5f:f2:53:
f1:07:98:66:3f:7e:34:a5:23:68:25:44:a6:a6:7c:
98:02:12:9e:f9:fd:e1:29:d8:0f:7b:fa:f7:04:ea:
7c:63:30:c9:2d:af:21:39:ba:5f:74:68:ba:d8:3f:
71:c9:47:fb:d9:2b:fb:10:1b:8a:0f:00:59:f0:32:
56:da:2f:cd:b8:4c:ec:da:d7:4c:17:d9:80:7d:8d:
43:ac:b0:d3:48:ad:27:ef:60:4f:6e:c4:5e:13:00:
38:5b:62:28:50:ff:c7:04:a8:b3:6c:b5:4b:ed:35:
2f:5c:8f:bf:6f:98:f8:d3:bb:c3:43:69:70:0d:fa:
f0:58:47:6d:ef:52:6d:ec:ad:9e:1e:6e:b1:21:f5:
02:07:6a:7a:b0:9c:6d:03:99:a3:8f:54:ed:83:a8:
7f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C6:8A:B1:79:B7:A5:84:44:36:61:D4:7E:D8:25:40:01:D5:A4:B7
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:d7:20:71:cd:c6:bc:9a:b0:2b:2f:13:d4:44:34:2d:92:98:
12:5f:09:45:ca:ba:37:41:12:28:de:87:8e:f5:d4:bf:51:ba:
66:0f:f8:11:31:f0:aa:c1:5e:4b:6a:d4:62:9e:84:48:c5:f7:
84:7c:80:72:8f:e0:92:61:34:0f:87:5e:4b:13:9a:b6:2a:e1:
02:6d:65:2d:1e:f0:c8:e5:0a:23:19:52:99:25:26:c4:9b:ef:
bf:04:27:a0:4d:5c:e6:ed:46:60:32:df:12:62:7a:b4:ca:a3:
55:43:10:86:21:e4:eb:4b:17:da:98:ad:17:d4:fc:d0:d2:29:
be:f5:9d:dc:60:0e:25:fc:79:b7:e2:a9:e1:be:d8:93:65:0a:
44:b6:05:1d:b4:60:3e:0f:6a:d8:fa:94:60:99:ba:b5:9e:e8:
8e:46:38:01:87:63:5a:25:0d:56:44:71:06:51:23:6f:ec:c0:
4b:ab:96:34:70:99:8c:5a:58:ee:f0:62:8f:4f:41:e9:2b:87:
65:58:3e:85:6a:17:bb:ea:3e:ea:38:63:5f:a8:7f:69:21:98:
fb:40:ce:3f:bf:7b:6b:eb:4d:08:94:4e:e2:54:1f:28:aa:ad:
f7:84:9a:5d:27:6c:30:ce:23:bc:e9:3e:fe:39:a6:51:6c:8a:
3f:ae:40:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83E/ozeHyAf6C7WhfFmfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDM2Mzc1ZmIwMzIyNzU2YjU1ZGFmZjY0ZTI2NWVmNzJj
MGRhNTIwHhcNMjYxMDE1MDAwMDMzWhcNMjYxMDE2MDAwMDMzWjAzMTEwLwYDVQQD
EyhjNmM2OGFiMTc5YjdhNTg0NDQzNjYxZDQ3ZWQ4MjU0MDAxZDVhNGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJU8dKCGiTUXFkQ7CrcLAe97OdGH
Z1i4iCrdBBKt6G8yYXly88hou3dKo7vAZYNHEAYZo5T0AxutpEUmQGhcD5yLXp7z
D9UyOWXNqghHXwWXg5XBYD+AXy6yzWnq90Cfze/8l9Nf8lPxB5hmP340pSNoJUSm
pnyYAhKe+f3hKdgPe/r3BOp8YzDJLa8hObpfdGi62D9xyUf72Sv7EBuKDwBZ8DJW
2i/NuEzs2tdMF9mAfY1DrLDTSK0n72BPbsReEwA4W2IoUP/HBKizbLVL7TUvXI+/
b5j407vDQ2lwDfrwWEdt71Jt7K2eHm6xIfUCB2p6sJxtA5mjj1Ttg6h/0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbGirF5t6WERDZh1H7YJUAB1aS3MB8GA1UdIwQY
MBaAFKdDY3X7AyJ1a1Xa/2TiZe9ywNpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEt
MGU2YzFmZTlkMDE1LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lNWUzZmEtOTllZS00NWNmLWJkOWEtMGU2YzFmZTlkMDE1
LzEvcDBOamRmc0RJblZyVmRyX1pPSmw3M0xBMmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdcgcc3G
vJqwKy8T1EQ0LZKYEl8JRcq6N0ESKN6HjvXUv1G6Zg/4ETHwqsFeS2rUYp6ESMX3
hHyAco/gkmE0D4deSxOatirhAm1lLR7wyOUKIxlSmSUmxJvvvwQnoE1c5u1GYDLf
EmJ6tMqjVUMQhiHk60sX2pitF9T80NIpvvWd3GAOJfx5t+Kp4b7Yk2UKRLYFHbRg
Pg9q2PqUYJm6tZ7ojkY4AYdjWiUNVkRxBlEjb+zAS6uWNHCZjFpY7vBij09B6SuH
ZVg+hWoXu+o+6jhjX6h/aSGY+0DOP797a+tNCJRO4lQfKKqt94SaXSdsMM4jvOk+
/jmmUWyKP65ACA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:01 2026 by rpki-client