Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: 5yJiggzf3Kia0NH7jEK3+hbnQ6PdjIEz0LCt3gRICUA=
Subject key identifier: 23:B6:2E:04:F0:1B:F7:AA:58:0E:AE:39:93:2A:08:3C:61:4F:80:BB
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 01A17D3CBB35F8316A86D8CAF0277C531E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 17A7
Signing time: Tue 27 Oct 2026 12:01:34 +0000
Manifest this update: Tue 27 Oct 2026 12:01:34 +0000
Manifest next update: Wed 28 Oct 2026 12:01:34 +0000
Files and hashes: 1: dQ2JSeRkXtpAwYOMmqrJulKnPek.roa (hash: gnIi6rzRodMaHa0HwkkgHYuXAe1/OxH3oVCHWvHcN8Q=)
2: f6m0hqb0BBxiTxktGTcPrNXvB2g.roa (hash: wEO7iV67QNAygsspSwBpIYn+S9XY1EpUPceKq+Gbr8U=)
3: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: 3Q+SVxSuAeQpA10zGmcIDVvIQDOFGbn0UuqxSmtgFHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:bb:35:f8:31:6a:86:d8:ca:f0:27:7c:53:1e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Oct 27 12:01:34 2026 GMT
Not After : Oct 28 12:01:34 2026 GMT
Subject: CN=23b62e04f01bf7aa580eae39932a083c614f80bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:41:e6:88:b4:23:33:4a:89:c3:a6:a8:53:
28:e9:7d:8b:ea:62:0c:b1:44:68:1a:86:36:21:3c:
5c:45:a3:61:e9:26:bb:49:7e:01:c1:aa:84:41:85:
c3:90:74:0f:2c:33:c2:1d:74:96:a2:5d:96:37:bb:
07:81:a4:18:46:14:ca:94:4f:17:bc:68:c9:df:7d:
b8:d7:ff:3d:56:33:ff:e4:c2:bd:5e:47:47:ef:6d:
af:43:b0:c2:3f:48:34:6a:f7:12:45:ec:10:02:2b:
1b:04:db:a6:24:d0:82:23:2b:76:f5:22:11:ba:76:
84:02:f7:b3:93:fd:9f:9b:d0:d9:64:f0:e9:fc:ab:
de:83:74:83:e0:db:8b:4c:5e:b6:77:d9:df:37:9f:
a4:25:54:b4:4c:63:d4:cb:4e:bc:ea:8c:3b:52:fd:
c2:49:0d:63:e5:fc:32:29:c3:19:04:6e:2a:0e:db:
42:75:56:52:bd:44:ef:d8:54:3d:2b:03:b9:7b:df:
ef:81:27:16:fa:dc:57:28:99:5e:8f:af:d0:93:13:
2a:da:fb:0e:4c:ba:18:17:d5:37:6e:b9:c6:d3:4f:
91:3a:13:6e:bd:3b:3c:cb:84:88:16:9f:5a:01:dc:
8a:6f:e3:57:f6:bb:3d:58:64:cb:8f:e0:c7:18:c2:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:2E:04:F0:1B:F7:AA:58:0E:AE:39:93:2A:08:3C:61:4F:80:BB
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:36:20:f1:1a:17:48:19:89:04:83:a2:59:c5:bd:56:c5:d4:
83:67:2b:03:c2:6c:e3:53:7d:de:2a:1e:a2:ea:22:e9:59:83:
fb:9d:c6:0c:b5:df:6d:57:d4:47:bd:df:8c:67:a8:2b:03:e3:
25:e1:06:29:60:bf:16:aa:91:b0:d3:0e:6b:b7:84:b9:8e:00:
db:d9:62:e6:a4:b4:2f:eb:0f:b6:24:1e:f0:21:48:f5:1c:3f:
95:47:05:90:43:8f:4d:7c:0e:fc:c6:7b:44:6d:6c:55:4a:d7:
db:98:01:35:e3:23:fe:82:83:0f:15:5d:f6:5d:68:00:13:76:
e5:a2:6e:48:ee:4f:0e:7b:ae:eb:5c:65:d8:b5:0a:71:c6:16:
93:c2:a2:12:78:37:12:8c:6c:12:c3:0e:df:65:48:67:37:ee:
81:e5:70:98:f3:f3:d8:4d:65:76:c1:7a:50:97:7c:2c:97:d5:
67:c5:c3:35:e1:55:ca:cf:94:2d:f1:fa:9f:5c:14:5e:19:26:
a1:01:d4:f2:93:c1:0c:fc:2e:12:4a:e8:52:e1:1f:a1:a3:a9:
05:d9:99:25:19:1c:71:10:42:5d:6d:23:dc:c3:d4:54:89:f1:
2b:13:c4:e6:39:29:84:e3:9a:a4:8c:31:4e:95:6c:1e:bd:49:
89:87:23:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PLs1+DFqhtjK8Cd8Ux5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NzhhNDYxYTg1OWRkYzk4NmMwOGE4OGU5NTEyZDVjM2Qy
MjEwZTYwHhcNMjYxMDI3MTIwMTM0WhcNMjYxMDI4MTIwMTM0WjAzMTEwLwYDVQQD
EygyM2I2MmUwNGYwMWJmN2FhNTgwZWFlMzk5MzJhMDgzYzYxNGY4MGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKxB5oi0IzNKicOmqFMo6X2L6mIM
sURoGoY2ITxcRaNh6Sa7SX4BwaqEQYXDkHQPLDPCHXSWol2WN7sHgaQYRhTKlE8X
vGjJ33241/89VjP/5MK9XkdH722vQ7DCP0g0avcSRewQAisbBNumJNCCIyt29SIR
unaEAvezk/2fm9DZZPDp/Kveg3SD4NuLTF62d9nfN5+kJVS0TGPUy0686ow7Uv3C
SQ1j5fwyKcMZBG4qDttCdVZSvUTv2FQ9KwO5e9/vgScW+txXKJlej6/QkxMq2vsO
TLoYF9U3brnG00+ROhNuvTs8y4SIFp9aAdyKb+NX9rs9WGTLj+DHGMIJVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO2LgTwG/eqWA6uOZMqCDxhT4C7MB8GA1UdIwQY
MBaAFLV4pGGoWd3JhsCKiOlRLVw9IhDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYt
ZmMxYzBjY2JjMGI3LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8wY2VlMzQtNWFjYy00MmQ1LWE1YmYtZmMxYzBjY2JjMGI3
LzEvdFhpa1lhaFozY21Hd0lxSTZWRXRYRDBpRU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjYg8RoX
SBmJBIOiWcW9VsXUg2crA8Js41N93ioeouoi6VmD+53GDLXfbVfUR73fjGeoKwPj
JeEGKWC/FqqRsNMOa7eEuY4A29li5qS0L+sPtiQe8CFI9Rw/lUcFkEOPTXwO/MZ7
RG1sVUrX25gBNeMj/oKDDxVd9l1oABN25aJuSO5PDnuu61xl2LUKccYWk8KiEng3
EoxsEsMO32VIZzfugeVwmPPz2E1ldsF6UJd8LJfVZ8XDNeFVys+ULfH6n1wUXhkm
oQHU8pPBDPwuEkroUuEfoaOpBdmZJRkccRBCXW0j3MPUVInxKxPE5jkphOOapIwx
TpVsHr1JiYcjJw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:42:51 2026 by rpki-client