Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
File: 84t8pB9ACCKQyorv3sS9KX067Aw.mft (raw, json)
Hash identifier: WGzD3m3h+Bs3Rlcct13F6zi53fdGeQTBPuMehvi04BU=
Subject key identifier: D1:A4:01:17:37:E2:78:EE:13:89:4C:0F:93:B8:12:8D:98:E8:F4:82
Authority key identifier: F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
Certificate issuer: /CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Certificate serial: 01A1464DD670D454229F5B3F6900F2469DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
Manifest number: 1AAB
Signing time: Fri 16 Oct 2026 20:01:08 +0000
Manifest this update: Fri 16 Oct 2026 20:01:08 +0000
Manifest next update: Sat 17 Oct 2026 20:01:08 +0000
Files and hashes: 1: 84t8pB9ACCKQyorv3sS9KX067Aw.crl (hash: Hd4tBuPj2m3kAYTS3FwH14352a1GB5A/kZQu1nZElEc=)
2: AA5Dm986HXsxLpWA6tUI50hTcxA.roa (hash: lKI9+obmQT3dCXk4UbWdKMJ99M0/jfT/BuzDVOdP+3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:d6:70:d4:54:22:9f:5b:3f:69:00:f2:46:9d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38b7ca41f40082290ca8aefdec4bd297d3aec0c
Validity
Not Before: Oct 16 20:01:08 2026 GMT
Not After : Oct 17 20:01:08 2026 GMT
Subject: CN=d1a4011737e278ee13894c0f93b8128d98e8f482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d6:15:cf:10:6d:1d:2d:d5:d7:70:7e:53:4d:
c6:1c:4f:ae:40:ee:7a:36:48:1d:74:3f:29:50:86:
e0:ba:69:61:51:7f:50:f8:ae:98:da:dc:52:cc:ce:
d6:35:66:fd:07:be:5b:4b:0b:81:ca:34:fd:67:84:
85:14:a9:e9:76:a9:d3:c5:dc:fa:de:ff:6d:c2:50:
24:2e:6d:5c:c6:73:49:3d:12:59:75:4b:76:11:49:
51:b9:7d:79:d6:79:90:5b:d0:8b:3e:04:20:b3:12:
04:d0:08:74:4d:58:62:90:5b:9d:70:47:5a:2a:7c:
26:c4:e6:e8:5f:93:56:6b:95:22:df:42:ef:ca:3c:
5a:17:f7:28:e0:30:29:08:91:02:ac:0e:f4:69:ec:
71:fc:8d:c8:35:d4:70:11:fe:78:0e:cd:ca:c0:00:
1c:a2:68:29:98:e0:3b:34:b1:ce:a6:ea:6b:04:d0:
a0:cf:c9:f0:45:2d:f5:ba:76:cb:5b:8b:29:75:e2:
40:1f:dd:d7:d5:03:2e:0c:b2:34:6d:7a:ef:13:16:
1b:c9:27:fa:95:3f:09:ef:4a:e4:9e:43:2f:ba:7f:
2b:aa:30:16:5d:e3:01:45:b0:c0:be:ca:84:8f:c4:
bc:d9:d8:2a:bb:ca:13:08:fc:ae:c7:84:20:5f:a5:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A4:01:17:37:E2:78:EE:13:89:4C:0F:93:B8:12:8D:98:E8:F4:82
X509v3 Authority Key Identifier:
keyid:F3:8B:7C:A4:1F:40:08:22:90:CA:8A:EF:DE:C4:BD:29:7D:3A:EC:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84t8pB9ACCKQyorv3sS9KX067Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/630904-5612-49f7-80b3-a3ca2112268b/1/84t8pB9ACCKQyorv3sS9KX067Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:14:f0:a4:a8:fe:cc:1d:c4:e8:47:b7:c0:67:3d:d9:b3:6e:
d5:99:81:9d:a7:23:c1:d7:88:54:a3:e7:70:a9:1d:1c:32:8e:
1b:e5:27:73:34:15:db:11:e4:3f:da:5a:c6:41:63:de:78:10:
ca:d4:43:87:14:22:0d:c4:e3:2c:f1:5e:62:9d:1b:86:b5:e6:
6c:9c:37:f9:45:d5:de:96:54:46:bd:d7:ef:b8:94:7b:67:ef:
6a:f7:96:d7:a6:98:d0:29:f7:d5:7d:79:b7:23:e2:57:af:d5:
b0:92:c7:42:7a:56:f5:fb:0c:94:76:84:37:5b:30:8f:ab:5e:
b2:b6:5c:f3:72:64:38:9a:b6:04:6e:20:1e:ea:ca:b2:dd:14:
d5:f2:11:fd:55:ac:da:4d:9b:d1:47:36:48:33:ad:6d:f4:f4:
c8:56:9b:a1:8a:5d:1f:68:84:f0:63:f8:00:af:d1:f6:fb:58:
83:44:11:e6:79:e7:a7:b7:8d:ef:f7:2b:41:ee:59:ab:ed:f6:
b8:89:0e:05:b5:fa:b2:2d:f7:78:61:95:fa:05:46:80:50:4f:
5e:04:33:6a:c1:97:ca:15:b2:8d:a9:5a:f7:3a:99:4a:1a:7a:
b2:f7:5a:c4:f7:a2:e9:98:a1:f5:59:cc:54:7a:88:da:f6:54:
34:77:02:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGTdZw1FQin1s/aQDyRp3YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOGI3Y2E0MWY0MDA4MjI5MGNhOGFlZmRlYzRiZDI5N2Qz
YWVjMGMwHhcNMjYxMDE2MjAwMTA4WhcNMjYxMDE3MjAwMTA4WjAzMTEwLwYDVQQD
EyhkMWE0MDExNzM3ZTI3OGVlMTM4OTRjMGY5M2I4MTI4ZDk4ZThmNDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9YVzxBtHS3V13B+U03GHE+uQO56
NkgddD8pUIbgumlhUX9Q+K6Y2txSzM7WNWb9B75bSwuByjT9Z4SFFKnpdqnTxdz6
3v9twlAkLm1cxnNJPRJZdUt2EUlRuX151nmQW9CLPgQgsxIE0Ah0TVhikFudcEda
KnwmxOboX5NWa5Ui30LvyjxaF/co4DApCJECrA70aexx/I3INdRwEf54Ds3KwAAc
omgpmOA7NLHOpuprBNCgz8nwRS31unbLW4spdeJAH93X1QMuDLI0bXrvExYbySf6
lT8J70rknkMvun8rqjAWXeMBRbDAvsqEj8S82dgqu8oTCPyux4QgX6XolwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGkARc34njuE4lMD5O4Eo2Y6PSCMB8GA1UdIwQY
MBaAFPOLfKQfQAgikMqK797EvSl9OuwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMt
YTNjYTIxMTIyNjhiLzEvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS82MzA5MDQtNTYxMi00OWY3LTgwYjMtYTNjYTIxMTIyNjhi
LzEvODR0OHBCOUFDQ0tReW9ydjNzUzlLWDA2N0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBTwpKj+
zB3E6Ee3wGc92bNu1ZmBnacjwdeIVKPncKkdHDKOG+UnczQV2xHkP9paxkFj3ngQ
ytRDhxQiDcTjLPFeYp0bhrXmbJw3+UXV3pZURr3X77iUe2fvaveW16aY0Cn31X15
tyPiV6/VsJLHQnpW9fsMlHaEN1swj6tesrZc83JkOJq2BG4gHurKst0U1fIR/VWs
2k2b0Uc2SDOtbfT0yFaboYpdH2iE8GP4AK/R9vtYg0QR5nnnp7eN7/crQe5Zq+32
uIkOBbX6si33eGGV+gVGgFBPXgQzasGXyhWyjala9zqZShp6svdaxPei6Zih9VnM
VHqI2vZUNHcCiw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:53:02 2026 by rpki-client