Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
File: rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft (raw, json)
Hash identifier: w8EiPWHHNgU70/jBJvrxs54Ohz5FnnlinURsZBa2xmo=
Subject key identifier: 66:57:91:08:7A:11:C1:5A:C6:21:42:EE:7E:8D:26:6D:2C:A4:34:D9
Authority key identifier: AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
Certificate issuer: /CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Certificate serial: 01A177A7724917E5B3B3E9BFCD792C324F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
Manifest number: FD
Signing time: Mon 26 Oct 2026 10:00:24 +0000
Manifest this update: Mon 26 Oct 2026 10:00:24 +0000
Manifest next update: Tue 27 Oct 2026 10:00:24 +0000
Files and hashes: 1: QSWjo5_DxLn3VxAudtaPC2FnwM0.roa (hash: 1mFyEckr7ZMS8v3pxO2ED4j5izEiaVLcu9avDOseeO0=)
2: rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl (hash: wH47Xk3axZynSk8IR2NFG5VmNlnzyQI6glJDZL4oxII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:72:49:17:e5:b3:b3:e9:bf:cd:79:2c:32:4f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Validity
Not Before: Oct 26 10:00:24 2026 GMT
Not After : Oct 27 10:00:24 2026 GMT
Subject: CN=665791087a11c15ac62142ee7e8d266d2ca434d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:a1:2c:73:25:fc:46:50:de:b6:72:cc:66:
6f:6f:90:98:c0:be:d0:e8:59:d9:52:70:1a:70:a3:
ef:76:c5:5e:bf:11:6f:5e:1a:48:35:d1:9d:a8:70:
75:e3:0a:ad:a9:5d:92:c2:58:5a:6c:5a:8a:02:87:
c1:ab:80:76:a4:dd:72:df:25:57:8f:6c:ce:29:e5:
64:3a:8a:89:6f:1f:b0:eb:24:20:ed:36:06:31:a6:
36:08:9a:90:7e:c6:95:4a:21:33:04:25:fb:db:6c:
79:97:9c:a2:69:b0:01:6a:65:2c:43:8c:76:9d:a1:
32:90:fe:76:bf:2f:d0:ce:40:13:59:b5:a0:2c:a3:
c9:a6:23:15:74:8d:29:23:3d:c1:48:4e:87:b4:78:
33:9f:68:08:aa:a2:88:0f:ee:25:d0:ee:67:cf:c4:
97:b0:75:52:8f:a8:24:d0:ca:11:4b:40:4a:b7:11:
a7:f3:86:c0:dd:87:d4:a9:2e:65:9a:ef:c4:e0:94:
b2:7a:32:35:55:a6:56:d4:30:09:5e:82:73:cd:d5:
08:1a:c5:fc:fb:b9:82:f0:f6:88:98:23:2a:8f:7a:
77:20:4d:52:74:bc:ef:c3:5c:e2:ec:9b:06:92:ce:
59:0e:73:f5:2c:a8:6c:71:3b:5b:08:c3:1b:9d:9c:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:91:08:7A:11:C1:5A:C6:21:42:EE:7E:8D:26:6D:2C:A4:34:D9
X509v3 Authority Key Identifier:
keyid:AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:e0:d4:10:86:e3:b5:76:cf:41:c6:0f:a0:ee:3b:64:5b:cf:
09:5d:05:60:b6:da:85:c7:83:06:c7:ea:9c:62:1a:f3:e5:dd:
01:f1:86:b1:f1:e6:df:dc:ef:8f:95:77:a5:20:7a:9f:1f:73:
9c:1a:a9:0c:71:a3:b1:0b:bf:33:1f:4e:ea:2d:41:6f:8d:ff:
e1:30:a6:82:a2:e5:3d:bc:e4:7f:f1:a4:98:37:ba:f2:50:c5:
ba:44:99:d4:73:5b:a0:80:9e:b5:0d:38:12:c6:f6:c8:89:50:
e7:8a:1e:53:5e:34:da:e7:1f:a7:cb:e3:e5:1d:c2:63:fb:60:
c7:c9:e2:b3:fe:c7:05:9b:44:06:c8:b3:1a:2e:36:7b:1b:d3:
a9:c4:d6:0c:47:b4:08:9f:7d:49:b4:91:c6:28:69:d2:ab:b0:
d9:fa:91:db:06:48:2f:28:6c:1d:ed:f3:ad:31:fb:b7:f9:0c:
ee:cd:4f:07:a4:07:73:6c:7e:52:ac:77:c1:18:a7:ca:72:16:
90:10:ea:75:99:63:ca:b3:5d:52:90:cb:b1:01:87:1a:b4:ed:
fe:fd:0b:a1:a6:dc:ef:89:6f:17:bb:11:6c:a5:d3:bb:eb:39:
8e:8b:82:c6:d2:9d:f8:88:86:03:34:06:96:8e:5d:41:09:57:
a6:bd:d8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3p3JJF+Wzs+m/zXksMk9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzZlNmRmODdkOTk5NmM1YTIzNTc0MGVjNWU0M2FmZDJk
ZWQ4ZjQwHhcNMjYxMDI2MTAwMDI0WhcNMjYxMDI3MTAwMDI0WjAzMTEwLwYDVQQD
Eyg2NjU3OTEwODdhMTFjMTVhYzYyMTQyZWU3ZThkMjY2ZDJjYTQzNGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRahLHMl/EZQ3rZyzGZvb5CYwL7Q
6FnZUnAacKPvdsVevxFvXhpINdGdqHB14wqtqV2SwlhabFqKAofBq4B2pN1y3yVX
j2zOKeVkOoqJbx+w6yQg7TYGMaY2CJqQfsaVSiEzBCX722x5l5yiabABamUsQ4x2
naEykP52vy/QzkATWbWgLKPJpiMVdI0pIz3BSE6HtHgzn2gIqqKID+4l0O5nz8SX
sHVSj6gk0MoRS0BKtxGn84bA3YfUqS5lmu/E4JSyejI1VaZW1DAJXoJzzdUIGsX8
+7mC8PaImCMqj3p3IE1SdLzvw1zi7JsGks5ZDnP1LKhscTtbCMMbnZwsvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZXkQh6EcFaxiFC7n6NJm0spDTZMB8GA1UdIwQY
MBaAFKzG5t+H2ZlsWiNXQOxeQ6/S3tj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1ibTM0ZlptV3hhSTFkQTdGNURyOUxlMlBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81MDI3OGYtNWE5OC00ODU2LTk5NjUt
NTIwMTIxYzAxNWMwLzEvck1ibTM0ZlptV3hhSTFkQTdGNURyOUxlMlBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi81MDI3OGYtNWE5OC00ODU2LTk5NjUtNTIwMTIxYzAxNWMw
LzEvck1ibTM0ZlptV3hhSTFkQTdGNURyOUxlMlBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeDUEIbj
tXbPQcYPoO47ZFvPCV0FYLbahceDBsfqnGIa8+XdAfGGsfHm39zvj5V3pSB6nx9z
nBqpDHGjsQu/Mx9O6i1Bb43/4TCmgqLlPbzkf/GkmDe68lDFukSZ1HNboICetQ04
Esb2yIlQ54oeU1402ucfp8vj5R3CY/tgx8nis/7HBZtEBsizGi42exvTqcTWDEe0
CJ99SbSRxihp0quw2fqR2wZILyhsHe3zrTH7t/kM7s1PB6QHc2x+Uqx3wRinynIW
kBDqdZljyrNdUpDLsQGHGrTt/v0Loabc74lvF7sRbKXTu+s5jouCxtKd+IiGAzQG
lo5dQQlXpr3YNQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 17:55:58 2026 by rpki-client