Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: rFrgyFhV/2H+SbCHzlA3yVgOLYBrXlDxViyKkQvlkKw=
Subject key identifier: 8F:9B:CE:2E:75:9A:82:D3:24:D2:51:4C:22:99:F4:E7:15:34:CE:83
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 01A1829A27898C94958AB1BA165A509AC1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 0D8F
Signing time: Wed 28 Oct 2026 13:01:43 +0000
Manifest this update: Wed 28 Oct 2026 13:01:43 +0000
Manifest next update: Thu 29 Oct 2026 13:01:43 +0000
Files and hashes: 1: Vi-50rUJqypgGVlY1PnfgRKVJPc.roa (hash: JefSHWYR7YbXg1+D5PyzTIFvu4XKwcfsRRc2C4+Vfyg=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: LouXzClW0PFdEziJjxLXTwDl+s/ZHnksyZ4IrBihmOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:27:89:8c:94:95:8a:b1:ba:16:5a:50:9a:c1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Oct 28 13:01:43 2026 GMT
Not After : Oct 29 13:01:43 2026 GMT
Subject: CN=8f9bce2e759a82d324d2514c2299f4e71534ce83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a4:ae:2c:3e:d4:04:c4:af:e9:3c:1d:f4:cd:
d7:7f:33:d3:50:ac:7d:f7:f0:ed:6a:b3:33:43:85:
bc:31:d0:78:38:da:6c:66:00:73:46:6e:b5:65:38:
7a:c3:f9:68:5b:15:3f:a8:61:4c:f4:3e:9d:7d:34:
9e:6e:9d:04:2a:b0:a1:d5:1d:96:0c:99:26:e1:ef:
51:3e:99:65:79:a9:0e:1a:b1:73:a9:63:2f:50:da:
9b:f6:3d:3e:6d:d4:db:df:9d:65:25:8b:46:26:f9:
6b:7b:fe:f7:ea:19:e5:a2:45:ef:52:20:aa:ff:a9:
8a:20:9e:eb:10:24:22:81:6a:13:64:37:44:a6:e2:
99:06:d5:33:10:5a:40:82:c5:b1:fd:ef:a6:cf:02:
50:8d:cd:c3:07:17:01:fa:b3:f9:5a:94:93:e0:6b:
90:74:6c:25:5e:d9:42:4e:40:19:fe:4c:65:fd:68:
d4:44:54:8c:ec:53:88:dc:74:67:89:79:8e:4e:ba:
eb:c1:59:47:5a:ac:2e:ad:44:8f:ff:1f:a0:12:20:
0c:ff:06:6a:5f:f4:79:5e:7c:32:e4:01:d2:70:1f:
3f:3b:e1:94:3a:5a:ea:67:68:5b:79:24:f3:a7:df:
9f:43:fa:b7:88:c0:84:e4:25:2c:32:01:28:55:b0:
2b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9B:CE:2E:75:9A:82:D3:24:D2:51:4C:22:99:F4:E7:15:34:CE:83
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:1a:7d:37:db:10:6d:a0:86:41:b7:32:2d:64:fd:e2:9c:
55:b9:c0:e2:94:09:7a:7f:49:cd:49:68:32:35:f7:7d:ba:2a:
3a:5f:a5:15:35:fa:d2:84:5b:17:d6:b3:f7:06:4d:85:99:5f:
01:bf:32:d3:e6:c2:ca:9e:9b:6c:ae:bf:1c:c0:9d:cb:04:88:
72:cd:a1:2e:07:d4:d4:52:2f:cf:26:62:d0:64:27:14:00:50:
93:ab:4e:13:63:46:1d:09:84:bc:e1:7f:5c:20:db:38:31:c3:
86:a0:93:c8:4a:dc:57:88:9a:5e:a6:ca:84:74:4e:df:95:fd:
53:57:0e:d4:f4:db:87:db:49:34:6c:20:50:a1:e1:91:1e:ce:
da:b0:bb:fc:c3:99:24:4b:0e:db:9d:ff:a9:38:db:4a:9a:63:
62:06:6d:c6:24:41:9a:fd:c5:2e:cd:99:ba:ae:ed:56:18:0e:
ed:67:f8:3a:22:2b:a4:7d:f9:fa:b4:04:da:50:b3:2f:5c:ba:
a4:20:38:47:a5:ae:b5:ae:f4:5c:fc:9d:7f:80:af:4b:22:14:
10:b6:a1:e7:bf:0b:f6:dc:e0:9a:81:50:2c:6c:cf:3e:b1:60:
23:ee:1b:ea:0e:ed:69:b8:4d:5c:c1:e7:a6:b1:ce:06:7e:67:
16:22:ee:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCmieJjJSVirG6FlpQmsHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjE5OWU1NWMzNTNlZjdmM2QyYmY0YTRmZTM4ZGQxYTBh
ZDg1NjUwHhcNMjYxMDI4MTMwMTQzWhcNMjYxMDI5MTMwMTQzWjAzMTEwLwYDVQQD
Eyg4ZjliY2UyZTc1OWE4MmQzMjRkMjUxNGMyMjk5ZjRlNzE1MzRjZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKSuLD7UBMSv6Twd9M3XfzPTUKx9
9/DtarMzQ4W8MdB4ONpsZgBzRm61ZTh6w/loWxU/qGFM9D6dfTSebp0EKrCh1R2W
DJkm4e9RPplleakOGrFzqWMvUNqb9j0+bdTb351lJYtGJvlre/736hnlokXvUiCq
/6mKIJ7rECQigWoTZDdEpuKZBtUzEFpAgsWx/e+mzwJQjc3DBxcB+rP5WpST4GuQ
dGwlXtlCTkAZ/kxl/WjURFSM7FOI3HRniXmOTrrrwVlHWqwurUSP/x+gEiAM/wZq
X/R5Xnwy5AHScB8/O+GUOlrqZ2hbeSTzp9+fQ/q3iMCE5CUsMgEoVbArywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+bzi51moLTJNJRTCKZ9OcVNM6DMB8GA1UdIwQY
MBaAFGthmeVcNT7389K/Sk/jjdGgrYVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEt
M2RlNGVjZTNhYjJhLzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEtM2RlNGVjZTNhYjJh
LzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXAafTfb
EG2ghkG3Mi1k/eKcVbnA4pQJen9JzUloMjX3fboqOl+lFTX60oRbF9az9wZNhZlf
Ab8y0+bCyp6bbK6/HMCdywSIcs2hLgfU1FIvzyZi0GQnFABQk6tOE2NGHQmEvOF/
XCDbODHDhqCTyErcV4iaXqbKhHRO35X9U1cO1PTbh9tJNGwgUKHhkR7O2rC7/MOZ
JEsO253/qTjbSppjYgZtxiRBmv3FLs2Zuq7tVhgO7Wf4OiIrpH35+rQE2lCzL1y6
pCA4R6Wuta70XPydf4CvSyIUELah578L9tzgmoFQLGzPPrFgI+4b6g7tabhNXMHn
prHOBn5nFiLutg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:56:47 2026 by rpki-client