Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
File: anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft (raw, json)
Hash identifier: VK6osIg9K2WrmhSgEkprmoJIjM+xz850abxIwS89qWA=
Subject key identifier: E9:AF:9E:7C:D4:05:00:47:B3:7F:D7:E7:48:55:F5:CD:9C:96:E7:58
Authority key identifier: 6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
Certificate issuer: /CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Certificate serial: 01A18F426B1A5734F614BA2B4686308C62EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
Manifest number: 0148
Signing time: Sat 31 Oct 2026 00:00:56 +0000
Manifest this update: Sat 31 Oct 2026 00:00:56 +0000
Manifest next update: Sun 01 Nov 2026 00:00:56 +0000
Files and hashes: 1: anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl (hash: 3dGSFtg0AORvuLYTDE/bUQGjpd8g6hImk09Is1Tl7TE=)
2: sTJv0BczOqKeqlhWC3yVmXfKqAQ.roa (hash: szTWeTLVa/lbCgRM+88z6fU1aZrlAcINrboqeCQYoqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:42:6b:1a:57:34:f6:14:ba:2b:46:86:30:8c:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a7480b3846f735c98cf9b00e980462a18b06cf6
Validity
Not Before: Oct 31 00:00:56 2026 GMT
Not After : Nov 1 00:00:56 2026 GMT
Subject: CN=e9af9e7cd4050047b37fd7e74855f5cd9c96e758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:a9:c6:da:99:23:2b:9f:ed:2c:a6:b3:d2:
73:7d:20:69:ca:9d:a1:3f:19:6d:c2:be:48:5b:0d:
96:24:b7:2a:4f:47:82:71:8d:10:8f:a4:1f:09:38:
be:fe:b4:10:f1:5b:c3:f8:87:42:5b:36:a9:af:7f:
2b:52:6e:de:66:72:10:82:89:5e:67:6d:16:1b:ff:
3f:9f:ce:e7:0f:9b:ff:92:05:c9:8b:a5:83:1c:ad:
5d:1e:40:8b:15:e4:99:7c:f2:17:2b:42:05:2f:1a:
6a:92:c0:a3:a4:33:aa:ce:e9:0e:5e:52:3a:10:d1:
be:7d:43:eb:74:9c:c0:5f:57:aa:10:ab:f9:4e:ea:
55:ce:45:4d:c6:e5:f0:00:ec:b7:08:bf:39:dc:85:
26:12:d2:75:4c:10:09:62:13:34:ad:05:9d:34:bc:
8a:a8:ff:6e:d1:b3:14:22:79:58:8f:2e:3b:bd:1c:
ad:03:74:5b:28:21:3a:20:c0:73:9b:65:4a:3a:67:
8c:9e:bf:e9:bf:dc:2b:73:d5:fe:5e:11:3a:04:93:
15:d1:25:af:b7:d4:7f:c3:56:82:a0:7e:29:d7:a1:
fe:6a:c6:a8:f3:b4:c5:f6:dc:f3:57:f4:4f:64:03:
67:4a:c5:36:eb:a6:57:c5:e9:c1:bd:bd:30:80:eb:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:9E:7C:D4:05:00:47:B3:7F:D7:E7:48:55:F5:CD:9C:96:E7:58
X509v3 Authority Key Identifier:
keyid:6A:74:80:B3:84:6F:73:5C:98:CF:9B:00:E9:80:46:2A:18:B0:6C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anSAs4Rvc1yYz5sA6YBGKhiwbPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/21b500-34a6-420a-aa44-749905c327b1/1/anSAs4Rvc1yYz5sA6YBGKhiwbPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:6f:13:c3:61:90:a6:e2:3e:60:42:0b:f9:15:14:44:e4:11:
5c:3f:c5:25:0d:a3:f6:c8:83:e5:69:0a:bb:c2:9d:01:6e:b8:
d2:c8:7d:12:f6:08:fd:85:ef:47:50:df:fd:1e:81:7d:22:93:
aa:0f:8f:2d:5d:95:05:1e:90:f6:a5:04:b7:e7:69:b4:0d:8c:
c0:f3:65:33:1f:ed:b9:8a:77:1a:ce:c1:d2:95:66:c1:04:3d:
68:96:32:09:a3:f9:9c:37:65:60:fd:14:d2:8b:6b:ac:4e:45:
40:df:eb:64:a2:9c:dc:95:4f:b5:52:9a:6e:04:26:b6:41:7b:
35:04:ae:7e:b9:51:74:69:fe:b9:4a:1b:4c:1b:72:90:97:cc:
e5:18:6d:84:a2:7e:ec:3f:fc:76:83:af:a5:42:11:e2:3a:61:
b0:15:24:07:8f:b4:a4:77:0f:9b:44:37:c5:69:56:da:fa:2f:
12:c6:41:95:58:34:9f:39:cd:98:38:88:c8:98:6f:ea:66:93:
c3:37:c3:e2:37:42:cd:d0:e5:99:42:53:76:54:d0:63:82:9d:
79:f1:f4:d8:99:2f:75:a1:42:b8:48:01:d3:6d:a0:e1:fe:0b:
87:39:4b:dd:3f:23:0a:d3:51:40:e3:87:09:45:22:4a:98:49:
e4:e0:3b:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGPQmsaVzT2FLorRoYwjGLuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzQ4MGIzODQ2ZjczNWM5OGNmOWIwMGU5ODA0NjJhMThi
MDZjZjYwHhcNMjYxMDMxMDAwMDU2WhcNMjYxMTAxMDAwMDU2WjAzMTEwLwYDVQQD
EyhlOWFmOWU3Y2Q0MDUwMDQ3YjM3ZmQ3ZTc0ODU1ZjVjZDljOTZlNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4CpxtqZIyuf7Syms9JzfSBpyp2h
Pxltwr5IWw2WJLcqT0eCcY0Qj6QfCTi+/rQQ8VvD+IdCWzapr38rUm7eZnIQgole
Z20WG/8/n87nD5v/kgXJi6WDHK1dHkCLFeSZfPIXK0IFLxpqksCjpDOqzukOXlI6
ENG+fUPrdJzAX1eqEKv5TupVzkVNxuXwAOy3CL853IUmEtJ1TBAJYhM0rQWdNLyK
qP9u0bMUInlYjy47vRytA3RbKCE6IMBzm2VKOmeMnr/pv9wrc9X+XhE6BJMV0SWv
t9R/w1aCoH4p16H+asao87TF9tzzV/RPZANnSsU266ZXxenBvb0wgOvQXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmvnnzUBQBHs3/X50hV9c2cludYMB8GA1UdIwQY
MBaAFGp0gLOEb3NcmM+bAOmARioYsGz2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQt
NzQ5OTA1YzMyN2IxLzEvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yMWI1MDAtMzRhNi00MjBhLWFhNDQtNzQ5OTA1YzMyN2Ix
LzEvYW5TQXM0UnZjMXlZejVzQTZZQkdLaGl3YlBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXW8Tw2GQ
puI+YEIL+RUUROQRXD/FJQ2j9siD5WkKu8KdAW640sh9EvYI/YXvR1Df/R6BfSKT
qg+PLV2VBR6Q9qUEt+dptA2MwPNlMx/tuYp3Gs7B0pVmwQQ9aJYyCaP5nDdlYP0U
0otrrE5FQN/rZKKc3JVPtVKabgQmtkF7NQSufrlRdGn+uUobTBtykJfM5RhthKJ+
7D/8doOvpUIR4jphsBUkB4+0pHcPm0Q3xWlW2vovEsZBlVg0nznNmDiIyJhv6maT
wzfD4jdCzdDlmUJTdlTQY4KdefH02JkvdaFCuEgB022g4f4LhzlL3T8jCtNRQOOH
CUUiSphJ5OA70Q==
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:34:37 2026 by rpki-client