Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
File: ca0Clb70axWYk68wgc7WgZG3bJI.mft (raw, json)
Hash identifier: 3t3yXAM/8IhEqCmLqE13a8fA63JNOxmGp4Od9/zXfU8=
Subject key identifier: 7A:82:20:88:6B:B6:06:F4:8B:CC:22:C7:31:4E:1E:4F:F9:AC:3A:55
Authority key identifier: 71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
Certificate issuer: /CN=71ad0295bef46b159893af3081ced68191b76c92
Certificate serial: 01A1913170D751C3AE04C7B9D3FC0E47FD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
Manifest number: 0149
Signing time: Sat 31 Oct 2026 09:01:38 +0000
Manifest this update: Sat 31 Oct 2026 09:01:38 +0000
Manifest next update: Sun 01 Nov 2026 09:01:38 +0000
Files and hashes: 1: 9vxud7StOxsVGpJ4u8HWgLt1evM.roa (hash: geRuwSQcxs/ntg9jtSwo/JgbYczfuqf3BwONRGwXIlo=)
2: ca0Clb70axWYk68wgc7WgZG3bJI.crl (hash: ikgalxWEN3nzFBoV4nQcS6OwvJqp+3m6zdTxl/TrI8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:91:31:70:d7:51:c3:ae:04:c7:b9:d3:fc:0e:47:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ad0295bef46b159893af3081ced68191b76c92
Validity
Not Before: Oct 31 09:01:38 2026 GMT
Not After : Nov 1 09:01:38 2026 GMT
Subject: CN=7a8220886bb606f48bcc22c7314e1e4ff9ac3a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:24:57:9d:c4:c2:15:1b:93:8a:24:86:ec:d7:
0b:a7:cf:c0:1c:d7:b3:3f:54:49:b5:6a:36:4e:c0:
9e:f3:23:47:b5:bd:c6:e7:64:a8:a0:5b:45:62:ec:
9e:c1:dd:cc:70:f7:16:46:96:61:40:e3:2a:1b:0f:
db:87:91:d1:e1:70:f3:84:b2:06:22:52:3b:76:91:
6a:8e:b9:80:00:b6:5b:34:42:99:c2:de:14:97:94:
2c:78:65:f2:2f:3c:ec:b1:81:91:97:63:af:4c:1f:
b6:a3:bd:27:2d:9d:90:81:54:95:17:1a:7d:65:52:
a8:a2:6d:ca:d0:7e:fb:2a:1c:92:52:76:e7:41:cc:
47:52:94:cc:d0:0b:a8:cf:d1:b3:94:ea:13:3b:84:
d6:c8:2c:fc:8d:72:a3:f3:51:e6:5f:51:93:d9:50:
4e:87:57:f1:66:f4:35:87:21:03:c6:36:b8:ec:ee:
65:a3:ab:98:05:5c:3e:64:f7:9d:04:d3:27:18:fd:
a0:27:6a:50:e3:63:8d:85:20:1c:ec:86:6b:a7:df:
b3:86:4f:aa:2e:ef:a0:c1:fe:7b:29:d9:a1:62:9e:
56:3e:08:87:e5:6a:fd:42:e7:d4:2a:d1:e2:e9:fb:
25:c1:64:d6:37:87:28:f0:4b:76:73:9b:76:76:05:
42:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:20:88:6B:B6:06:F4:8B:CC:22:C7:31:4E:1E:4F:F9:AC:3A:55
X509v3 Authority Key Identifier:
keyid:71:AD:02:95:BE:F4:6B:15:98:93:AF:30:81:CE:D6:81:91:B7:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca0Clb70axWYk68wgc7WgZG3bJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f7ecb7-ff6d-45e0-98d6-c77bae3d3ed1/1/ca0Clb70axWYk68wgc7WgZG3bJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c7:78:ec:48:c1:b9:a1:71:9e:e0:e5:d5:80:68:4f:dc:01:
93:da:a8:c6:10:59:67:e1:5b:9a:52:03:b3:23:e6:dd:27:89:
c1:7b:c5:9b:50:44:e9:3f:69:9a:34:ce:f6:8d:39:8b:22:69:
bb:80:a6:e5:1d:e9:49:b0:f2:08:c4:c8:07:da:b4:89:eb:10:
58:95:da:6a:96:df:b2:4e:84:f4:57:f7:04:91:c6:6f:66:94:
01:fc:08:3f:36:6f:70:8e:65:eb:61:85:83:15:0d:b3:15:04:
1f:71:0a:ef:3c:7c:6b:78:b2:de:25:90:71:0e:be:f2:da:85:
9c:e2:92:16:f6:2a:ee:d4:a5:dc:49:a7:b5:5d:8e:4c:d4:df:
11:05:57:13:af:71:2a:67:3a:00:9b:95:72:16:76:0d:87:b1:
71:42:32:bd:f8:a1:41:95:1e:aa:6b:79:04:91:f6:fd:f2:83:
7a:b4:40:6a:7a:74:d4:35:c1:93:9a:b0:b8:64:0b:76:30:6f:
29:df:53:9d:c9:ab:72:21:c5:f4:fd:dc:05:34:6f:b3:5e:69:
83:64:26:be:c3:06:b2:95:d7:3f:c0:a4:2f:3f:c4:5b:91:63:
4f:b1:5a:50:fa:b6:01:41:aa:14:4c:d5:95:31:3b:eb:b4:05:
6a:a3:f9:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGRMXDXUcOuBMe50/wOR/11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYWQwMjk1YmVmNDZiMTU5ODkzYWYzMDgxY2VkNjgxOTFi
NzZjOTIwHhcNMjYxMDMxMDkwMTM4WhcNMjYxMTAxMDkwMTM4WjAzMTEwLwYDVQQD
Eyg3YTgyMjA4ODZiYjYwNmY0OGJjYzIyYzczMTRlMWU0ZmY5YWMzYTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCRXncTCFRuTiiSG7NcLp8/AHNez
P1RJtWo2TsCe8yNHtb3G52SooFtFYuyewd3McPcWRpZhQOMqGw/bh5HR4XDzhLIG
IlI7dpFqjrmAALZbNEKZwt4Ul5QseGXyLzzssYGRl2OvTB+2o70nLZ2QgVSVFxp9
ZVKoom3K0H77KhySUnbnQcxHUpTM0Auoz9GzlOoTO4TWyCz8jXKj81HmX1GT2VBO
h1fxZvQ1hyEDxja47O5lo6uYBVw+ZPedBNMnGP2gJ2pQ42ONhSAc7IZrp9+zhk+q
Lu+gwf57KdmhYp5WPgiH5Wr9QufUKtHi6fslwWTWN4co8Et2c5t2dgVCmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqCIIhrtgb0i8wixzFOHk/5rDpVMB8GA1UdIwQY
MBaAFHGtApW+9GsVmJOvMIHO1oGRt2ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2EwQ2xiNzBheFdZazY4d2djN1dnWkczYkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mN2VjYjctZmY2ZC00NWUwLTk4ZDYt
Yzc3YmFlM2QzZWQxLzEvY2EwQ2xiNzBheFdZazY4d2djN1dnWkczYkpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9mN2VjYjctZmY2ZC00NWUwLTk4ZDYtYzc3YmFlM2QzZWQx
LzEvY2EwQ2xiNzBheFdZazY4d2djN1dnWkczYkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMd47EjB
uaFxnuDl1YBoT9wBk9qoxhBZZ+FbmlIDsyPm3SeJwXvFm1BE6T9pmjTO9o05iyJp
u4Cm5R3pSbDyCMTIB9q0iesQWJXaapbfsk6E9Ff3BJHGb2aUAfwIPzZvcI5l62GF
gxUNsxUEH3EK7zx8a3iy3iWQcQ6+8tqFnOKSFvYq7tSl3EmntV2OTNTfEQVXE69x
Kmc6AJuVchZ2DYexcUIyvfihQZUeqmt5BJH2/fKDerRAanp01DXBk5qwuGQLdjBv
Kd9TncmrciHF9P3cBTRvs15pg2QmvsMGspXXP8CkLz/EW5FjT7FaUPq2AUGqFEzV
lTE767QFaqP5jA==
-----END CERTIFICATE-----
Generated at Sat Oct 31 11:14:53 2026 by rpki-client