Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
File: _iT7KBKuLz1Nm7RYndcx5UaXkQk.mft (raw, json)
Hash identifier: G6cP4g0bjYuP6RrgRZlvcgHaC09enLfRoUXxMDAydhI=
Subject key identifier: BA:4B:C3:BB:53:C4:9B:AB:07:41:51:23:60:5F:7A:D3:F8:02:33:33
Authority key identifier: FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
Certificate issuer: /CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Certificate serial: 01A19243B8157FDB943F22BCA14B87C46382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
Manifest number: 16AE
Signing time: Sat 31 Oct 2026 14:01:13 +0000
Manifest this update: Sat 31 Oct 2026 14:01:13 +0000
Manifest next update: Sun 01 Nov 2026 14:01:13 +0000
Files and hashes: 1: HXm9TuEN-hZFRnz7zB9tqLYv1uY.roa (hash: GWW+sIHLIiiJupwbdRvejiFrWNMJqUsJJSuoaM3Fa6s=)
2: _iT7KBKuLz1Nm7RYndcx5UaXkQk.crl (hash: 1e4GMlnR68tXHp7IuKxviTZadeU3swzXLDCqGiCDL+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:43:b8:15:7f:db:94:3f:22:bc:a1:4b:87:c4:63:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe24fb2812ae2f3d4d9bb4589dd731e546979109
Validity
Not Before: Oct 31 14:01:13 2026 GMT
Not After : Nov 1 14:01:13 2026 GMT
Subject: CN=ba4bc3bb53c49bab07415123605f7ad3f8023333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:38:b2:f9:dc:e6:d4:71:99:39:54:5a:f4:
f9:6a:bb:45:49:9c:b6:1e:58:63:b3:cc:12:97:84:
83:e2:78:39:7e:36:0c:7d:4e:e3:b2:a1:38:69:7f:
88:c6:f1:e2:51:d7:74:41:87:1b:84:21:94:97:5d:
6b:bd:4b:50:2c:06:b9:f9:33:91:9c:89:b1:62:40:
a3:0a:da:d4:bb:68:af:8c:4f:a5:64:1d:55:1d:84:
3f:b6:86:68:27:2b:c1:98:ff:ab:8b:b3:5e:24:15:
26:f7:fd:84:59:85:a5:15:04:8b:10:d8:5b:a8:63:
a1:14:2b:92:4a:f1:3c:98:1d:bf:de:86:9f:09:7a:
d9:e0:5f:da:a8:81:73:31:00:21:a8:a3:e1:fd:1c:
80:1c:cd:18:d5:fe:a8:24:67:3c:63:d0:91:7d:ab:
5d:c3:b7:6c:08:1c:8e:71:45:d4:0f:1a:b2:ac:ee:
4e:ff:5a:e2:6f:39:b6:fd:4b:e2:73:05:59:d3:45:
52:98:ad:5d:1e:e2:56:c1:45:f8:15:96:00:70:44:
d4:2f:fa:78:6c:50:6d:84:05:02:95:e7:43:f0:b5:
62:d3:0f:1c:71:df:45:fb:d2:c1:af:bb:e4:26:62:
01:f0:a0:86:19:f6:18:16:44:95:65:95:f0:22:b7:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4B:C3:BB:53:C4:9B:AB:07:41:51:23:60:5F:7A:D3:F8:02:33:33
X509v3 Authority Key Identifier:
keyid:FE:24:FB:28:12:AE:2F:3D:4D:9B:B4:58:9D:D7:31:E5:46:97:91:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iT7KBKuLz1Nm7RYndcx5UaXkQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c66ff9-10ea-4b44-9169-c5f670239718/1/_iT7KBKuLz1Nm7RYndcx5UaXkQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:26:0c:16:af:84:9b:ef:f1:fa:e7:5a:fe:d1:bf:ba:59:
c0:f7:77:45:cb:24:da:a5:9f:1a:1e:f7:5b:63:a4:81:7b:3c:
08:8c:bb:17:cd:95:5e:8c:5a:fc:c8:25:a7:ee:94:1d:12:1d:
4d:67:bf:68:db:ca:18:18:90:6e:0e:f7:ed:2b:62:59:ad:6f:
7e:dc:bf:c5:34:c3:03:31:3f:d5:16:57:01:72:6d:9e:f1:6f:
a0:8b:a1:86:53:62:6d:74:2c:10:f2:89:9a:ec:1f:68:cd:80:
ed:d6:49:e0:60:9e:68:0c:f0:a7:6c:dd:bb:9f:9c:a7:35:d5:
4b:7d:36:9f:70:57:e0:53:8c:e6:4b:2e:db:d7:f3:ec:b1:28:
2c:13:35:bb:47:bb:78:01:93:27:fc:c6:15:d0:cf:90:20:62:
5f:15:31:cc:df:87:1a:20:3f:3f:15:9f:6a:44:b0:cb:76:5c:
f1:29:03:30:6c:d0:20:fc:c3:dd:c7:be:db:30:36:ae:2a:a3:
54:6f:aa:95:a9:34:09:4a:ba:12:5f:ed:9e:d1:fc:47:1b:74:
55:aa:71:cd:0a:ad:f8:b2:29:d9:8a:75:97:58:1f:90:38:19:
38:43:e4:a1:6e:29:2d:b5:cf:47:31:d3:07:58:ea:22:f6:1c:
b1:bf:84:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGSQ7gVf9uUPyK8oUuHxGOCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMjRmYjI4MTJhZTJmM2Q0ZDliYjQ1ODlkZDczMWU1NDY5
NzkxMDkwHhcNMjYxMDMxMTQwMTEzWhcNMjYxMTAxMTQwMTEzWjAzMTEwLwYDVQQD
EyhiYTRiYzNiYjUzYzQ5YmFiMDc0MTUxMjM2MDVmN2FkM2Y4MDIzMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/A4svnc5tRxmTlUWvT5artFSZy2
Hlhjs8wSl4SD4ng5fjYMfU7jsqE4aX+IxvHiUdd0QYcbhCGUl11rvUtQLAa5+TOR
nImxYkCjCtrUu2ivjE+lZB1VHYQ/toZoJyvBmP+ri7NeJBUm9/2EWYWlFQSLENhb
qGOhFCuSSvE8mB2/3oafCXrZ4F/aqIFzMQAhqKPh/RyAHM0Y1f6oJGc8Y9CRfatd
w7dsCByOcUXUDxqyrO5O/1ribzm2/UvicwVZ00VSmK1dHuJWwUX4FZYAcETUL/p4
bFBthAUCledD8LVi0w8ccd9F+9LBr7vkJmIB8KCGGfYYFkSVZZXwIrcy9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpLw7tTxJurB0FRI2BfetP4AjMzMB8GA1UdIwQY
MBaAFP4k+ygSri89TZu0WJ3XMeVGl5EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjkt
YzVmNjcwMjM5NzE4LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9jNjZmZjktMTBlYS00YjQ0LTkxNjktYzVmNjcwMjM5NzE4
LzEvX2lUN0tCS3VMejFObTdSWW5kY3g1VWFYa1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROomDBav
hJvv8frnWv7Rv7pZwPd3Rcsk2qWfGh73W2OkgXs8CIy7F82VXoxa/Mglp+6UHRId
TWe/aNvKGBiQbg737StiWa1vfty/xTTDAzE/1RZXAXJtnvFvoIuhhlNibXQsEPKJ
muwfaM2A7dZJ4GCeaAzwp2zdu5+cpzXVS302n3BX4FOM5ksu29fz7LEoLBM1u0e7
eAGTJ/zGFdDPkCBiXxUxzN+HGiA/PxWfakSwy3Zc8SkDMGzQIPzD3ce+2zA2riqj
VG+qlak0CUq6El/tntH8Rxt0VapxzQqt+LIp2Yp1l1gfkDgZOEPkoW4pLbXPRzHT
B1jqIvYcsb+EOA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 22:49:28 2026 by rpki-client