Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
File: rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft (raw, json)
Hash identifier: TankAcsO7d1h1jsF881eC8RbOP/rzWOvNtlrA63oFgw=
Subject key identifier: 3D:DF:85:BF:B7:DB:3D:9E:A3:83:B0:4A:B8:ED:DD:69:C1:8E:5B:A4
Authority key identifier: AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
Certificate issuer: /CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Certificate serial: 01A165D90DA3DFBECBAB8673D5A2A7878A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
Manifest number: 1ABB
Signing time: Thu 22 Oct 2026 23:01:25 +0000
Manifest this update: Thu 22 Oct 2026 23:01:25 +0000
Manifest next update: Fri 23 Oct 2026 23:01:25 +0000
Files and hashes: 1: 1-5zn0bSlddLMmUlOq_ZglROu18k.asa (hash: Yy6jCWoReDrwxlHPUoAZSBEIXQW1OUdFReXCBYRR6d0=)
2: 2dRtK5SgykkBJukn17Yq5DPzVc0.roa (hash: wUS6ehBTRJETqX2oU/1L/6oJii+BNdsZeKhz7Ba1e6w=)
3: rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl (hash: T2+aCaB8K3DYre0vgnqiKtGg56UBC3GEMcpMY6+C6TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:d9:0d:a3:df:be:cb:ab:86:73:d5:a2:a7:87:8a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acb00ed62beef3070a136dd9845fd26e21fd261a
Validity
Not Before: Oct 22 23:01:25 2026 GMT
Not After : Oct 23 23:01:25 2026 GMT
Subject: CN=3ddf85bfb7db3d9ea383b04ab8eddd69c18e5ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:50:c7:ba:d8:68:58:cc:af:d8:67:be:96:51:
57:d4:28:1e:9d:79:99:bb:af:aa:04:8e:18:7d:a8:
1d:02:63:85:b2:6e:e9:76:14:65:ad:0d:11:c5:7d:
a7:fe:d9:94:1b:51:a0:70:eb:91:a8:99:80:b4:cb:
ef:b0:eb:c6:68:fe:6d:a7:cb:a9:4f:e5:ed:a1:db:
1c:94:ae:b2:19:7b:16:3e:d3:2e:ce:44:2d:ea:a7:
65:06:be:9d:0a:bd:82:d6:3f:69:f1:e5:8c:d2:3a:
e6:de:8a:13:9c:00:16:52:9f:fd:9e:1d:da:cd:c0:
16:7c:ab:39:19:2c:47:f4:70:c1:f9:ce:54:c3:19:
1a:17:84:db:8c:3c:35:81:3a:52:ea:c7:75:c4:05:
67:70:64:15:85:4d:4d:75:6f:ab:a0:56:59:e5:a6:
d5:7f:eb:8d:09:30:1b:b9:a5:a8:b6:d9:09:39:be:
78:78:ab:a5:df:be:0e:3c:1e:63:90:40:c9:76:bd:
e7:e3:c1:fc:5d:27:35:3c:68:a7:c1:d4:9b:21:8c:
e7:dd:48:fb:99:49:3d:a0:0f:ef:a1:9e:b8:41:ba:
3b:24:fe:ec:66:b8:e3:f8:cc:27:03:03:f5:d0:ff:
90:9e:cb:a5:e7:bb:bf:fa:b2:87:15:0b:8d:13:21:
97:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DF:85:BF:B7:DB:3D:9E:A3:83:B0:4A:B8:ED:DD:69:C1:8E:5B:A4
X509v3 Authority Key Identifier:
keyid:AC:B0:0E:D6:2B:EE:F3:07:0A:13:6D:D9:84:5F:D2:6E:21:FD:26:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rLAO1ivu8wcKE23ZhF_SbiH9Jho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/3a7ecc-4591-4adc-9880-aac89f2f17cd/1/rLAO1ivu8wcKE23ZhF_SbiH9Jho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8c:b0:34:3c:1f:72:a7:48:d9:8e:c8:05:a3:a4:8b:b3:96:
e1:36:57:71:f4:5c:1b:3c:1d:4e:85:ea:0e:ae:61:4d:3a:25:
ed:b7:2d:34:da:d0:21:9e:41:57:06:0c:72:73:8d:ca:5a:f8:
f0:84:4d:5d:81:b6:7b:d2:8d:08:85:07:ae:44:2e:f4:75:0c:
39:19:43:38:b2:d2:d8:1c:54:b7:f0:f6:15:98:e6:42:8b:bc:
a5:ba:6c:e9:ff:9b:0f:44:e1:42:21:1c:78:47:cd:61:38:eb:
90:13:a3:d7:55:ff:d4:cb:05:84:50:e7:5c:fb:6b:0f:01:76:
f5:3a:a7:32:3a:f3:cd:82:c8:12:85:9e:81:b8:80:f5:3d:1a:
45:d3:b2:25:f3:85:e6:6e:0f:50:c0:c5:a9:6f:1b:69:e1:c1:
c8:30:18:ba:33:2b:c8:08:d4:73:56:35:ff:b5:09:10:34:c4:
a8:ee:bf:c2:09:cd:3c:e8:95:b8:e3:1b:ea:0c:f6:20:5e:81:
74:75:5b:ff:59:6c:41:ba:eb:3a:33:b9:fa:59:3d:9c:9d:d3:
8f:18:9e:27:40:a9:5a:20:7c:31:b2:a4:02:f2:b7:ee:9d:3f:
60:84:ee:3e:d5:0c:e9:7f:4d:a6:5f:c4:3f:ed:a6:35:b0:13:
27:6a:aa:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFl2Q2j377Lq4Zz1aKnh4peMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYjAwZWQ2MmJlZWYzMDcwYTEzNmRkOTg0NWZkMjZlMjFm
ZDI2MWEwHhcNMjYxMDIyMjMwMTI1WhcNMjYxMDIzMjMwMTI1WjAzMTEwLwYDVQQD
EygzZGRmODViZmI3ZGIzZDllYTM4M2IwNGFiOGVkZGQ2OWMxOGU1YmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlDHuthoWMyv2Ge+llFX1CgenXmZ
u6+qBI4YfagdAmOFsm7pdhRlrQ0RxX2n/tmUG1GgcOuRqJmAtMvvsOvGaP5tp8up
T+XtodsclK6yGXsWPtMuzkQt6qdlBr6dCr2C1j9p8eWM0jrm3ooTnAAWUp/9nh3a
zcAWfKs5GSxH9HDB+c5UwxkaF4TbjDw1gTpS6sd1xAVncGQVhU1NdW+roFZZ5abV
f+uNCTAbuaWottkJOb54eKul374OPB5jkEDJdr3n48H8XSc1PGinwdSbIYzn3Uj7
mUk9oA/voZ64Qbo7JP7sZrjj+MwnAwP10P+Qnsul57u/+rKHFQuNEyGXcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3fhb+32z2eo4OwSrjt3WnBjlukMB8GA1UdIwQY
MBaAFKywDtYr7vMHChNt2YRf0m4h/SYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAt
YWFjODlmMmYxN2NkLzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8zYTdlY2MtNDU5MS00YWRjLTk4ODAtYWFjODlmMmYxN2Nk
LzEvckxBTzFpdnU4d2NLRTIzWmhGX1NiaUg5SmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4ywNDwf
cqdI2Y7IBaOki7OW4TZXcfRcGzwdToXqDq5hTTol7bctNNrQIZ5BVwYMcnONylr4
8IRNXYG2e9KNCIUHrkQu9HUMORlDOLLS2BxUt/D2FZjmQou8pbps6f+bD0ThQiEc
eEfNYTjrkBOj11X/1MsFhFDnXPtrDwF29TqnMjrzzYLIEoWegbiA9T0aRdOyJfOF
5m4PUMDFqW8baeHByDAYujMryAjUc1Y1/7UJEDTEqO6/wgnNPOiVuOMb6gz2IF6B
dHVb/1lsQbrrOjO5+lk9nJ3TjxieJ0CpWiB8MbKkAvK37p0/YITuPtUM6X9Npl/E
P+2mNbATJ2qqJw==
-----END CERTIFICATE-----
Generated at Fri Oct 23 10:02:48 2026 by rpki-client