Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: TRf9LXb68d/V9zryaQLfQchWMtE9eA3xFFLJn9+KOPs=
Subject key identifier: E6:FE:D1:10:29:E4:EB:2D:A2:A5:01:57:59:9A:28:6E:E7:17:28:F9
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 01A17A71F9E011B54E63E6DD0D9B79B90F52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 09D5
Signing time: Mon 26 Oct 2026 23:00:52 +0000
Manifest this update: Mon 26 Oct 2026 23:00:52 +0000
Manifest next update: Tue 27 Oct 2026 23:00:52 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: oD99ycHO9+S0FZHkR6KneK7Ri4douS5yD0eaLrdVKTY=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:f9:e0:11:b5:4e:63:e6:dd:0d:9b:79:b9:0f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Oct 26 23:00:52 2026 GMT
Not After : Oct 27 23:00:52 2026 GMT
Subject: CN=e6fed11029e4eb2da2a50157599a286ee71728f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:f6:9f:60:1a:d6:23:b3:31:85:90:db:96:
38:f7:f4:78:61:29:d4:b5:b3:77:17:3a:ef:7d:ea:
af:f5:58:6e:85:c2:40:5d:3b:79:8c:c6:8e:41:66:
50:59:b2:99:da:f4:06:a8:fe:cb:85:90:ba:28:fb:
2e:06:3a:f5:4b:7e:e6:75:21:0e:74:11:9f:72:da:
f0:cd:71:72:25:1f:02:5d:fe:1f:d4:6e:e4:95:28:
ea:b0:24:1e:fa:fe:10:08:6d:5f:a8:a2:05:bd:c8:
60:73:de:27:9f:c5:c4:fa:8e:bc:23:7e:23:a1:94:
5e:71:90:d7:2a:e3:16:a5:86:06:de:b8:e0:a6:22:
a4:78:b0:72:76:0a:36:21:f8:7c:fe:3e:ec:09:5f:
3e:78:0d:6f:62:79:c5:08:88:4a:34:e3:40:97:e7:
21:b1:44:d8:38:40:37:d3:46:2c:98:c6:41:88:8f:
6d:59:53:a7:62:85:ac:85:57:02:83:6b:7d:f3:8b:
98:0a:92:19:39:2a:13:28:92:85:d0:f2:67:1f:9a:
b5:ed:c9:6d:1f:b0:bd:f1:c1:da:4c:e1:fd:0f:46:
96:f4:74:8d:cd:f5:8e:a9:df:d8:68:e0:82:22:c3:
7a:f5:cd:87:ab:d5:e2:55:55:dc:0d:c4:70:4e:1c:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:D1:10:29:E4:EB:2D:A2:A5:01:57:59:9A:28:6E:E7:17:28:F9
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:21:d2:ce:34:8b:07:8b:a6:ab:f5:89:a4:4f:07:53:42:
ef:51:02:5e:c3:5f:be:9d:e4:c1:8f:be:fa:c3:61:56:f6:c5:
3b:a6:31:fc:41:14:f6:a8:aa:18:e0:a1:13:df:49:f2:6a:79:
c5:60:6d:da:4b:3b:df:9d:d0:65:6d:13:61:ab:ac:18:cc:44:
67:bd:21:4c:47:ad:97:85:5b:82:34:91:de:50:06:e1:5b:c8:
4e:47:8f:22:d7:11:09:49:39:74:f9:cf:05:72:4d:e9:ce:67:
f5:7a:6e:42:14:4b:c2:e9:a9:99:e5:b2:b5:20:33:39:49:fc:
49:c5:a1:37:94:2e:cb:7f:d0:f4:dd:10:68:9d:05:45:4b:0e:
0f:39:bc:d7:69:89:5a:4c:53:07:76:1f:47:4a:64:49:df:3f:
fc:c5:a4:19:22:fc:17:5a:e3:9e:53:ea:33:d0:cf:5b:b6:87:
6c:2d:c1:7a:c5:82:58:6c:e2:dc:e7:1b:c3:83:96:2c:ae:c6:
d9:b6:1a:36:31:de:55:71:d0:8f:94:af:fc:e6:5f:17:2b:6b:
38:c2:d8:fd:88:57:b2:91:63:41:e4:02:08:8c:6a:a6:6b:a8:
a6:2b:5a:93:5d:c5:93:2a:6b:8e:08:49:4f:aa:a2:46:4a:39:
67:9e:5e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6cfngEbVOY+bdDZt5uQ9SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNTAxMDc3ZGI4MGQ1MmIxNmQ0OWY4NjNhNjFlYTQxYTEy
NGJjNTkwHhcNMjYxMDI2MjMwMDUyWhcNMjYxMDI3MjMwMDUyWjAzMTEwLwYDVQQD
EyhlNmZlZDExMDI5ZTRlYjJkYTJhNTAxNTc1OTlhMjg2ZWU3MTcyOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3n2n2Aa1iOzMYWQ25Y49/R4YSnU
tbN3Fzrvfeqv9VhuhcJAXTt5jMaOQWZQWbKZ2vQGqP7LhZC6KPsuBjr1S37mdSEO
dBGfctrwzXFyJR8CXf4f1G7klSjqsCQe+v4QCG1fqKIFvchgc94nn8XE+o68I34j
oZRecZDXKuMWpYYG3rjgpiKkeLBydgo2Ifh8/j7sCV8+eA1vYnnFCIhKNONAl+ch
sUTYOEA300YsmMZBiI9tWVOnYoWshVcCg2t984uYCpIZOSoTKJKF0PJnH5q17clt
H7C98cHaTOH9D0aW9HSNzfWOqd/YaOCCIsN69c2Hq9XiVVXcDcRwThzvMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOb+0RAp5OstoqUBV1maKG7nFyj5MB8GA1UdIwQY
MBaAFJNQEHfbgNUrFtSfhjph6kGhJLxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUt
NzlkMWEyN2NkOTkzLzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9kMGJjZjMtNGIyMS00MTYxLWI4MmUtNzlkMWEyN2NkOTkz
LzEvazFBUWQ5dUExU3NXMUotR09tSHFRYUVrdkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgUh0s40
iweLpqv1iaRPB1NC71ECXsNfvp3kwY+++sNhVvbFO6Yx/EEU9qiqGOChE99J8mp5
xWBt2ks7353QZW0TYausGMxEZ70hTEetl4VbgjSR3lAG4VvITkePItcRCUk5dPnP
BXJN6c5n9XpuQhRLwumpmeWytSAzOUn8ScWhN5Quy3/Q9N0QaJ0FRUsODzm812mJ
WkxTB3YfR0pkSd8//MWkGSL8F1rjnlPqM9DPW7aHbC3BesWCWGzi3Ocbw4OWLK7G
2bYaNjHeVXHQj5Sv/OZfFytrOMLY/YhXspFjQeQCCIxqpmuopitak13FkyprjghJ
T6qiRko5Z55eQQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:50:53 2026 by rpki-client