Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
File: R01HT5RpSoEE9eQTqyucCVWbefA.mft (raw, json)
Hash identifier: HjfU2+57RFqeVnb9QY9Pk7WkqyWX69iwO1CXByAa2i0=
Subject key identifier: 74:1C:50:80:CD:E3:33:69:54:B0:9F:9A:AB:B6:DE:C3:BC:9A:44:29
Authority key identifier: 47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
Certificate issuer: /CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Certificate serial: 01A17DE1DC4353C317EEBF7470D43C6BDAD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
Manifest number: 06E8
Signing time: Tue 27 Oct 2026 15:01:56 +0000
Manifest this update: Tue 27 Oct 2026 15:01:56 +0000
Manifest next update: Wed 28 Oct 2026 15:01:56 +0000
Files and hashes: 1: R01HT5RpSoEE9eQTqyucCVWbefA.crl (hash: TPoX1aeu0wJjDhpCbyRJiEFseBRlANzmxz26maRoPPg=)
2: SBUsospASb3EsMhP62NmTHT6SVw.roa (hash: 0+KXBZnA9I41d7SaRHS/S7In8wI7A6juxPzuhg0b63k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:dc:43:53:c3:17:ee:bf:74:70:d4:3c:6b:da:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474d474f94694a8104f5e413ab2b9c09559b79f0
Validity
Not Before: Oct 27 15:01:56 2026 GMT
Not After : Oct 28 15:01:56 2026 GMT
Subject: CN=741c5080cde3336954b09f9aabb6dec3bc9a4429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:49:16:f0:ca:59:2a:69:f0:38:72:20:ae:
f1:1c:21:6b:50:89:8a:df:15:64:1b:6d:26:31:55:
4b:f1:2a:8a:45:a5:7a:0c:d8:64:31:37:d8:ce:8b:
a2:88:13:2e:ee:a2:38:63:b0:d2:73:31:4c:44:c2:
a2:1b:81:2e:3e:f6:d6:bc:5d:43:b7:1a:b2:2a:71:
24:de:40:c7:6b:31:0b:7d:ae:73:2d:55:df:ee:e0:
5b:ba:35:c1:18:ea:38:08:83:ab:e3:6c:37:e3:a0:
c3:1c:d2:b3:aa:97:fb:cd:59:37:9f:91:5e:22:f1:
1e:9a:42:6b:34:23:bb:aa:d5:b6:91:90:cd:36:2e:
4f:e5:0a:c5:37:90:14:18:36:fe:88:0f:8d:36:85:
d5:9e:d4:5a:3b:9a:fa:a8:e2:ef:c4:18:08:37:dc:
fd:ff:b7:35:e7:ca:08:ef:9e:8f:bc:af:bf:07:9c:
bf:60:c2:2a:9c:17:b0:72:03:44:db:7b:84:a2:ed:
a8:94:bc:56:9e:e9:12:25:ea:48:e5:79:be:fc:9d:
28:20:0b:93:f0:fa:25:e6:e6:ba:70:d6:d3:b3:ff:
67:ac:79:be:84:37:c6:88:33:00:9a:3d:e3:dd:6b:
4a:da:ce:c9:6e:5a:b0:e4:c7:26:43:08:f4:00:8d:
5f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1C:50:80:CD:E3:33:69:54:B0:9F:9A:AB:B6:DE:C3:BC:9A:44:29
X509v3 Authority Key Identifier:
keyid:47:4D:47:4F:94:69:4A:81:04:F5:E4:13:AB:2B:9C:09:55:9B:79:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R01HT5RpSoEE9eQTqyucCVWbefA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/638bc3-e945-400a-af79-0b6f002d1978/1/R01HT5RpSoEE9eQTqyucCVWbefA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d2:ff:3f:50:38:aa:f6:f3:81:ae:b1:93:4e:be:b6:93:d1:
ea:01:05:ef:cc:7c:39:3b:c5:cb:0e:7e:5e:8f:75:a1:16:2b:
12:43:d0:c8:a1:48:16:23:20:b6:f4:d9:f9:38:fb:75:40:c6:
ce:b0:8d:a9:01:b6:df:d2:71:8b:2e:e4:48:8e:be:92:51:c3:
6e:05:0e:f3:14:e1:66:0b:90:a4:e3:92:1e:7d:6e:1a:81:ee:
cd:0b:7f:1e:5f:65:64:7b:7a:ba:fb:e1:2f:53:a3:e3:6c:58:
8c:48:b2:49:60:50:2c:a3:c6:36:fd:5c:7a:81:28:aa:7a:b6:
b8:09:e5:12:15:51:b4:6f:cc:3f:f6:9b:4b:f7:58:8c:4e:1b:
82:80:c2:5f:72:2e:0b:7a:09:94:b6:25:49:72:fd:6b:ff:68:
44:c3:27:68:9e:dc:fe:c7:7b:fb:3e:6e:86:2f:39:51:1c:6b:
be:2d:91:9d:13:5f:80:b8:86:a7:73:51:76:fc:3c:b8:e0:f6:
4e:51:51:8f:c6:3d:59:5b:7b:9c:95:b2:04:1f:de:d9:b2:d2:
81:b8:b5:80:d5:1a:6b:ec:83:0f:ff:d3:1e:d2:a0:03:bf:98:
ca:49:e7:cd:19:5c:6b:1d:a3:b3:2f:4e:02:56:60:d8:9f:89:
bd:12:b7:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94dxDU8MX7r90cNQ8a9rUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGQ0NzRmOTQ2OTRhODEwNGY1ZTQxM2FiMmI5YzA5NTU5
Yjc5ZjAwHhcNMjYxMDI3MTUwMTU2WhcNMjYxMDI4MTUwMTU2WjAzMTEwLwYDVQQD
Eyg3NDFjNTA4MGNkZTMzMzY5NTRiMDlmOWFhYmI2ZGVjM2JjOWE0NDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe5JFvDKWSpp8DhyIK7xHCFrUImK
3xVkG20mMVVL8SqKRaV6DNhkMTfYzouiiBMu7qI4Y7DSczFMRMKiG4EuPvbWvF1D
txqyKnEk3kDHazELfa5zLVXf7uBbujXBGOo4CIOr42w346DDHNKzqpf7zVk3n5Fe
IvEemkJrNCO7qtW2kZDNNi5P5QrFN5AUGDb+iA+NNoXVntRaO5r6qOLvxBgIN9z9
/7c158oI756PvK+/B5y/YMIqnBewcgNE23uEou2olLxWnukSJepI5Xm+/J0oIAuT
8Pol5ua6cNbTs/9nrHm+hDfGiDMAmj3j3WtK2s7Jblqw5McmQwj0AI1ftQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQcUIDN4zNpVLCfmqu23sO8mkQpMB8GA1UdIwQY
MBaAFEdNR0+UaUqBBPXkE6srnAlVm3nwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzkt
MGI2ZjAwMmQxOTc4LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82MzhiYzMtZTk0NS00MDBhLWFmNzktMGI2ZjAwMmQxOTc4
LzEvUjAxSFQ1UnBTb0VFOWVRVHF5dWNDVldiZWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdL/P1A4
qvbzga6xk06+tpPR6gEF78x8OTvFyw5+Xo91oRYrEkPQyKFIFiMgtvTZ+Tj7dUDG
zrCNqQG239Jxiy7kSI6+klHDbgUO8xThZguQpOOSHn1uGoHuzQt/Hl9lZHt6uvvh
L1Oj42xYjEiySWBQLKPGNv1ceoEoqnq2uAnlEhVRtG/MP/abS/dYjE4bgoDCX3Iu
C3oJlLYlSXL9a/9oRMMnaJ7c/sd7+z5uhi85URxrvi2RnRNfgLiGp3NRdvw8uOD2
TlFRj8Y9WVt7nJWyBB/e2bLSgbi1gNUaa+yDD//THtKgA7+YyknnzRlcax2jsy9O
AlZg2J+JvRK3XQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:24:29 2026 by rpki-client