Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
File: CnN3j7G-woyZgmUq7ehqAEwmgvE.mft (raw, json)
Hash identifier: RPh/5S3x+tsXEDqRSr2YTb5HLq9gsx5vkqq3X7xu92k=
Subject key identifier: 9E:80:27:06:47:FB:9B:1F:89:B0:17:50:31:5A:E8:F5:28:A8:D6:BB
Authority key identifier: 0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
Certificate issuer: /CN=0a73778fb1bec28c9982652aede86a004c2682f1
Certificate serial: 01A13D80EBF925C05F9DBC02C8F4B0F79B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
Manifest number: 13B9
Signing time: Thu 15 Oct 2026 03:00:21 +0000
Manifest this update: Thu 15 Oct 2026 03:00:21 +0000
Manifest next update: Fri 16 Oct 2026 03:00:21 +0000
Files and hashes: 1: 2-wV63-kJnEb6lIWdAkjLbifdYs.roa (hash: VLWBTHr0EzH/3xH/vK+1IGsHE6wqxsKYJ6Bzof/M4JU=)
2: CnN3j7G-woyZgmUq7ehqAEwmgvE.crl (hash: skqROmMraZhxz3oy04VFYvKzxF1ZqoF8phfzjjWq8Mg=)
3: ZU9seCnxefzljVm0zuNsOk7GIDQ.roa (hash: /DOENfB26ckd4WqAOCfSHmslCQF/eXd4V7OPNLLt9Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:eb:f9:25:c0:5f:9d:bc:02:c8:f4:b0:f7:9b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a73778fb1bec28c9982652aede86a004c2682f1
Validity
Not Before: Oct 15 03:00:21 2026 GMT
Not After : Oct 16 03:00:21 2026 GMT
Subject: CN=9e80270647fb9b1f89b01750315ae8f528a8d6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3b:68:5c:51:64:22:18:e0:46:63:c1:9b:dd:
b5:45:4c:17:1b:6d:0b:9c:55:7a:c6:2b:49:a4:21:
dc:3a:c4:7e:85:d0:b5:e1:73:6a:15:10:75:f5:98:
8c:44:73:0c:c3:ff:32:a3:46:34:c3:aa:38:cb:71:
e8:c6:f0:a1:98:fa:82:23:4c:a4:18:1f:83:b7:f0:
87:9e:2b:e4:2d:2e:93:7d:16:70:79:6b:66:41:63:
0c:f6:f8:4c:8b:0e:d1:e4:ce:46:86:d4:f7:71:23:
d8:e2:aa:a7:2b:f7:2e:e3:65:6f:71:31:12:d7:48:
ce:69:93:cc:6a:01:be:e9:fb:4c:70:07:6f:0e:4f:
0d:53:3b:e1:34:30:4b:70:bf:71:0f:e5:be:20:69:
0c:46:7e:ea:04:c0:09:df:8a:1d:f3:7b:e3:c9:b9:
1a:5d:40:5a:0d:7a:c1:71:f2:52:42:6a:2c:b6:7a:
b1:ef:d1:7a:6c:64:16:5a:a4:07:cf:de:65:0d:0b:
18:c0:1e:80:da:03:1b:f5:8c:90:09:b7:1b:d1:1c:
fe:29:c4:5e:58:25:94:38:c2:62:77:cf:37:10:d7:
01:ae:48:69:7e:f8:41:a6:42:6d:26:ab:48:b9:a4:
c3:79:22:61:88:4d:b2:b3:09:0f:bc:eb:b9:1b:f9:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:80:27:06:47:FB:9B:1F:89:B0:17:50:31:5A:E8:F5:28:A8:D6:BB
X509v3 Authority Key Identifier:
keyid:0A:73:77:8F:B1:BE:C2:8C:99:82:65:2A:ED:E8:6A:00:4C:26:82:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnN3j7G-woyZgmUq7ehqAEwmgvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e6e15c-12b0-40be-8bc1-5708f580e36a/1/CnN3j7G-woyZgmUq7ehqAEwmgvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:45:d7:c7:85:69:40:29:6d:1b:c1:35:85:38:c7:f6:29:0a:
42:fc:bd:d5:8c:06:04:85:26:3e:18:8b:96:e9:7f:0f:dd:02:
59:ff:0b:44:39:2e:9f:0a:29:9a:03:5b:9c:d4:d3:8c:2a:57:
59:da:83:a7:bb:a8:d4:b1:94:74:9b:96:d5:aa:00:1f:39:b1:
1d:3e:02:96:e5:8b:77:6d:3e:e3:b8:32:a2:2f:05:88:b4:2c:
2f:6a:e1:da:3e:be:58:0d:29:7f:c2:ce:e2:c0:ca:9f:23:1d:
93:b6:79:b0:52:de:8e:08:05:6c:76:e6:e1:b2:80:20:25:7c:
46:84:11:d5:95:3a:f6:0b:67:09:87:88:c1:dd:9f:e1:87:92:
73:ee:9b:68:db:26:36:5c:44:62:ce:3a:3f:11:f3:d9:fe:c2:
30:ff:5f:e9:85:6e:24:c6:5d:87:c5:e6:cf:29:94:70:f8:ad:
6c:2d:2b:93:d4:1a:9b:c1:c1:98:25:19:39:13:21:2b:2c:3d:
d6:db:d7:58:7d:4d:61:fd:9a:25:ca:9d:81:35:c2:42:33:82:
f7:fc:f7:a6:20:57:4e:ab:71:06:1c:b2:88:74:31:66:cc:44:
36:d7:44:01:f6:be:bc:89:69:22:31:81:1f:67:0a:d9:d4:1d:
18:33:c4:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9gOv5JcBfnbwCyPSw95uPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNzM3NzhmYjFiZWMyOGM5OTgyNjUyYWVkZTg2YTAwNGMy
NjgyZjEwHhcNMjYxMDE1MDMwMDIxWhcNMjYxMDE2MDMwMDIxWjAzMTEwLwYDVQQD
Eyg5ZTgwMjcwNjQ3ZmI5YjFmODliMDE3NTAzMTVhZThmNTI4YThkNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujtoXFFkIhjgRmPBm921RUwXG20L
nFV6xitJpCHcOsR+hdC14XNqFRB19ZiMRHMMw/8yo0Y0w6o4y3HoxvChmPqCI0yk
GB+Dt/CHnivkLS6TfRZweWtmQWMM9vhMiw7R5M5GhtT3cSPY4qqnK/cu42VvcTES
10jOaZPMagG+6ftMcAdvDk8NUzvhNDBLcL9xD+W+IGkMRn7qBMAJ34od83vjybka
XUBaDXrBcfJSQmostnqx79F6bGQWWqQHz95lDQsYwB6A2gMb9YyQCbcb0Rz+KcRe
WCWUOMJid883ENcBrkhpfvhBpkJtJqtIuaTDeSJhiE2yswkPvOu5G/kj9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6AJwZH+5sfibAXUDFa6PUoqNa7MB8GA1UdIwQY
MBaAFApzd4+xvsKMmYJlKu3oagBMJoLxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEt
NTcwOGY1ODBlMzZhLzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9lNmUxNWMtMTJiMC00MGJlLThiYzEtNTcwOGY1ODBlMzZh
LzEvQ25OM2o3Ry13b3laZ21VcTdlaHFBRXdtZ3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAekXXx4Vp
QCltG8E1hTjH9ikKQvy91YwGBIUmPhiLlul/D90CWf8LRDkunwopmgNbnNTTjCpX
WdqDp7uo1LGUdJuW1aoAHzmxHT4CluWLd20+47gyoi8FiLQsL2rh2j6+WA0pf8LO
4sDKnyMdk7Z5sFLejggFbHbm4bKAICV8RoQR1ZU69gtnCYeIwd2f4YeSc+6baNsm
NlxEYs46PxHz2f7CMP9f6YVuJMZdh8XmzymUcPitbC0rk9Qam8HBmCUZORMhKyw9
1tvXWH1NYf2aJcqdgTXCQjOC9/z3piBXTqtxBhyyiHQxZsxENtdEAfa+vIlpIjGB
H2cK2dQdGDPEwQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:26:07 2026 by rpki-client