Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: KdL031AAs/y+38d8kXMTf4oyqaU5RjHY0OIsnA6ooNs=
Subject key identifier: F5:5F:24:C1:BC:E3:93:41:7B:02:84:74:B7:6C:0C:BC:C4:57:7C:A4
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 01A12C56B545F31D165E108212DFF01CE4B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 19:00:42 +0000
Manifest this update: Sun 11 Oct 2026 19:00:42 +0000
Manifest next update: Mon 12 Oct 2026 19:00:42 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: noind3plLp7Wa9c1rj4pFkj7isqocNJPWWkc3IWOiJU=)
2: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (hash: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo=)
3: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (hash: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:56:b5:45:f3:1d:16:5e:10:82:12:df:f0:1c:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Oct 11 19:00:42 2026 GMT
Not After : Oct 12 19:00:42 2026 GMT
Subject: CN=f55f24c1bce393417b028474b76c0cbcc4577ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:9d:62:f0:82:9a:7e:3f:84:ac:d7:8e:3d:
1b:16:14:ec:1c:29:08:79:72:a5:60:39:24:73:e4:
ad:f8:62:25:12:4e:77:76:5c:98:c9:82:b7:99:1d:
53:51:9b:87:8f:a9:07:3a:eb:c6:23:0b:2f:2e:65:
bf:dc:d7:41:fd:2f:00:4a:98:04:8a:9e:64:9e:e2:
bc:19:38:75:35:7b:b2:8c:49:6e:49:51:46:5b:2d:
67:db:19:5f:e2:92:19:8a:79:a8:d5:40:25:9d:40:
5d:6a:90:7f:7b:9f:64:f1:c0:bf:05:0c:5c:f2:15:
ed:1b:1a:75:bf:13:1e:b6:9b:6c:85:af:0a:ee:01:
60:36:79:1a:0b:3e:0d:77:fa:d1:95:2e:4f:01:5a:
12:48:75:25:c7:0d:d4:64:e9:78:79:bf:1c:08:24:
c8:49:1b:c3:d4:4d:af:55:d0:5e:52:ee:2e:5a:44:
99:46:6c:f1:72:14:97:57:bd:17:3e:b7:af:c0:9e:
17:3f:66:c6:36:a8:cb:26:91:c8:bf:50:70:99:62:
1d:bf:d6:30:4e:eb:eb:0c:aa:92:9b:2d:6f:49:0c:
a2:cd:e1:9c:20:5e:a9:44:b6:e8:65:2d:e7:aa:e5:
69:6e:df:cb:a5:05:24:6e:82:ae:cf:1e:98:5d:3b:
ca:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5F:24:C1:BC:E3:93:41:7B:02:84:74:B7:6C:0C:BC:C4:57:7C:A4
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ba:04:c7:0f:12:35:06:63:78:41:2c:0d:6e:28:79:f7:3e:
1e:e5:26:c8:92:5b:c9:9f:c3:47:a6:ed:57:9b:bb:fb:cc:77:
68:ee:5e:1a:02:57:1d:f2:25:d6:d1:7e:32:21:09:d9:15:c6:
47:5f:ba:b1:df:26:fb:ad:23:b9:d9:61:ed:cd:8e:86:7c:bc:
7c:ef:ea:55:b4:c1:d4:ef:c7:12:36:20:cf:88:76:6a:6a:a5:
c4:e6:9f:0f:0e:41:ad:0e:0c:e8:53:01:3e:4b:af:b4:d1:81:
ad:6a:fa:30:32:ca:05:53:73:a5:2f:ed:ac:89:3c:40:6e:1a:
aa:e0:64:0a:f6:59:fe:52:42:a0:35:65:0e:08:a1:67:91:4f:
63:34:36:ae:59:9a:e6:e5:04:de:55:c4:5b:83:74:65:23:5d:
74:be:e9:88:9e:44:f9:b1:37:b4:8d:23:6b:87:82:8a:a8:5d:
ef:7a:20:7a:f9:f0:90:08:3e:59:37:62:4e:25:24:66:3d:56:
fb:e0:e0:03:7c:85:f8:f8:26:d7:58:78:c5:ff:e6:8b:1c:62:
eb:52:3b:0d:c4:27:a0:3d:7e:78:7f:e3:a7:48:ed:cb:9f:69:
b1:c5:74:bf:7e:c7:c7:a2:d7:85:ff:0c:49:8f:ec:12:cf:66:
26:8b:1e:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEsVrVF8x0WXhCCEt/wHOSwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OGFjMTc0ZTg1MmI3MWMzMTE2M2VjMWQ4NjQ5ZmZmNmIw
N2JhNzkwHhcNMjYxMDExMTkwMDQyWhcNMjYxMDEyMTkwMDQyWjAzMTEwLwYDVQQD
EyhmNTVmMjRjMWJjZTM5MzQxN2IwMjg0NzRiNzZjMGNiY2M0NTc3Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu06dYvCCmn4/hKzXjj0bFhTsHCkI
eXKlYDkkc+St+GIlEk53dlyYyYK3mR1TUZuHj6kHOuvGIwsvLmW/3NdB/S8ASpgE
ip5knuK8GTh1NXuyjEluSVFGWy1n2xlf4pIZinmo1UAlnUBdapB/e59k8cC/BQxc
8hXtGxp1vxMetptsha8K7gFgNnkaCz4Nd/rRlS5PAVoSSHUlxw3UZOl4eb8cCCTI
SRvD1E2vVdBeUu4uWkSZRmzxchSXV70XPrevwJ4XP2bGNqjLJpHIv1BwmWIdv9Yw
TuvrDKqSmy1vSQyizeGcIF6pRLboZS3nquVpbt/LpQUkboKuzx6YXTvKfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVfJMG845NBewKEdLdsDLzEV3ykMB8GA1UdIwQY
MBaAFNeKwXToUrccMRY+wdhkn/9rB7p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMt
OTQ3ZGUzODY4Y2Q1LzEvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lODAyMzEtNTNiOC00MjI1LTg1MjMtOTQ3ZGUzODY4Y2Q1
LzEvMTRyQmRPaFN0eHd4Rmo3QjJHU2ZfMnNIdW5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLoExw8S
NQZjeEEsDW4oefc+HuUmyJJbyZ/DR6btV5u7+8x3aO5eGgJXHfIl1tF+MiEJ2RXG
R1+6sd8m+60judlh7c2Ohny8fO/qVbTB1O/HEjYgz4h2amqlxOafDw5BrQ4M6FMB
PkuvtNGBrWr6MDLKBVNzpS/trIk8QG4aquBkCvZZ/lJCoDVlDgihZ5FPYzQ2rlma
5uUE3lXEW4N0ZSNddL7piJ5E+bE3tI0ja4eCiqhd73ogevnwkAg+WTdiTiUkZj1W
++DgA3yF+Pgm11h4xf/mixxi61I7DcQnoD1+eH/jp0jty59pscV0v37Hx6LXhf8M
SY/sEs9mJoseWA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:29 2026 by rpki-client