Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: DRe68LOcjCWtCGTLLhrqNe88mt/cmweaDLyxeYF6EDg=
Subject key identifier: 7B:48:F9:BB:44:09:00:F1:7A:D4:44:14:B7:A6:BE:8C:6C:87:AE:70
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 01A1889B9A41D5C58F2CF36DE538841F71FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 16A9
Signing time: Thu 29 Oct 2026 17:01:01 +0000
Manifest this update: Thu 29 Oct 2026 17:01:01 +0000
Manifest next update: Fri 30 Oct 2026 17:01:01 +0000
Files and hashes: 1: HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa (hash: GWW+sIHLIiiJupwbdRvejiFrWNMJqUsJJSuoaM3Fa6s=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: EBwAOF0l2b4w/TzIjMd2amIzLcpBsbD8Vrwm9kDPTAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:9a:41:d5:c5:8f:2c:f3:6d:e5:38:84:1f:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Oct 29 17:01:01 2026 GMT
Not After : Oct 30 17:01:01 2026 GMT
Subject: CN=7b48f9bb440900f17ad44414b7a6be8c6c87ae70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:b3:f4:4b:8c:2a:22:3d:3e:d7:97:97:1f:
c3:00:f4:17:94:c5:9e:b6:73:e0:92:eb:1a:15:d9:
43:a8:69:63:cb:e7:50:19:7a:7e:d5:58:8e:17:68:
52:8d:b4:b2:47:f9:96:4a:40:35:b7:4c:90:52:d6:
65:6d:e7:be:57:6e:15:bd:ee:65:0f:dd:76:ab:f9:
e4:9c:9a:97:77:da:df:a7:47:94:bf:a9:96:06:7a:
23:84:ba:6b:28:94:cc:14:eb:d6:82:93:9b:83:9b:
1a:7b:d2:5b:e3:e6:25:45:e2:cc:57:c2:57:80:a0:
be:ac:5a:94:e0:3b:3f:cd:56:b6:89:9e:c6:a2:e9:
09:38:29:9d:d5:61:50:8b:fa:12:8b:d9:4d:6d:84:
14:6e:fb:17:76:fb:96:95:a4:1a:b3:86:8c:02:f6:
cf:fa:68:3d:29:34:87:6b:cf:60:cb:ed:68:a1:05:
1e:0a:68:f6:36:d2:43:ec:1a:5d:b1:b5:b3:c0:03:
5c:99:f7:50:01:21:a3:5c:de:d9:54:ad:df:01:41:
e1:f3:2e:a8:1c:dd:f6:43:28:06:d6:6a:35:b0:d0:
1b:ac:7c:d7:07:7d:20:f9:a5:f6:c1:a4:6e:59:f4:
4d:56:07:02:cf:ba:0e:3b:c7:46:db:ab:6e:4a:f4:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:F9:BB:44:09:00:F1:7A:D4:44:14:B7:A6:BE:8C:6C:87:AE:70
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:fc:01:24:a3:65:43:e8:82:6c:11:99:4a:c5:3e:9e:78:38:
e2:8c:93:51:56:6d:ff:6c:fc:26:db:ee:ba:92:66:ea:19:97:
1a:70:68:f4:1a:9a:4a:a6:2f:1e:9c:f4:da:21:2f:d4:27:59:
c3:88:df:c6:54:5b:34:60:a7:66:90:7c:fa:03:d7:a6:0c:8a:
d1:8f:bd:26:86:df:73:78:6d:55:0f:70:e3:86:b0:16:4f:ab:
95:0d:2a:93:ec:bc:61:39:ef:e4:23:e0:c4:d8:8f:c7:a0:66:
e5:a1:b2:fe:29:2d:80:36:79:c3:7b:b4:04:95:c1:56:d2:a6:
c2:49:08:1d:1b:7d:99:3e:b5:4b:bd:9f:37:09:0e:71:20:fe:
f5:68:29:ad:06:c5:91:f2:b0:76:e8:8e:8f:8b:a9:a0:5d:6a:
81:39:d4:c0:02:a1:90:be:3f:84:7c:5e:22:79:b7:47:94:22:
1c:ce:0f:66:07:8b:90:5a:32:ff:c9:ec:0c:29:11:92:6b:7a:
d4:60:e2:0c:26:e9:5a:13:10:f2:5a:37:90:09:18:63:a7:7f:
87:42:0f:00:a4:ce:5b:52:dd:aa:dd:10:13:54:ac:e4:93:2b:
13:f1:4c:6e:c1:60:8f:97:b2:f6:65:e7:b5:3f:88:87:7e:0d:
8f:bf:c0:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGIm5pB1cWPLPNt5TiEH3H8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5
NzkxMDkwHhcNMjYxMDI5MTcwMTAxWhcNMjYxMDMwMTcwMTAxWjAzMTEwLwYDVQQD
Eyg3YjQ4ZjliYjQ0MDkwMGYxN2FkNDQ0MTRiN2E2YmU4YzZjODdhZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw6z9EuMKiI9PteXlx/DAPQXlMWe
tnPgkusaFdlDqGljy+dQGXp+1ViOF2hSjbSyR/mWSkA1t0yQUtZlbee+V24Vve5l
D912q/nknJqXd9rfp0eUv6mWBnojhLprKJTMFOvWgpObg5sae9Jb4+YlReLMV8JX
gKC+rFqU4Ds/zVa2iZ7GoukJOCmd1WFQi/oSi9lNbYQUbvsXdvuWlaQas4aMAvbP
+mg9KTSHa89gy+1ooQUeCmj2NtJD7BpdsbWzwANcmfdQASGjXN7ZVK3fAUHh8y6o
HN32QygG1mo1sNAbrHzXB30g+aX2waRuWfRNVgcCz7oOO8dG26tuSvR4iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtI+btECQDxetREFLemvoxsh65wMB8GA1UdIwQY
MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt
YzVmNjcwMjM5NzE4LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4
LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFPwBJKNl
Q+iCbBGZSsU+nng44oyTUVZt/2z8JtvuupJm6hmXGnBo9BqaSqYvHpz02iEv1CdZ
w4jfxlRbNGCnZpB8+gPXpgyK0Y+9Jobfc3htVQ9w44awFk+rlQ0qk+y8YTnv5CPg
xNiPx6Bm5aGy/iktgDZ5w3u0BJXBVtKmwkkIHRt9mT61S72fNwkOcSD+9WgprQbF
kfKwduiOj4upoF1qgTnUwAKhkL4/hHxeInm3R5QiHM4PZgeLkFoy/8nsDCkRkmt6
1GDiDCbpWhMQ8lo3kAkYY6d/h0IPAKTOW1Ldqt0QE1Ss5JMrE/FMbsFgj5ey9mXn
tT+Ih34Nj7/Agg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:23 2026 by rpki-client