Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
File: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft (raw, json)
Hash identifier: nQPgJCwnm01mC10Gwy3KEeJY4WSJwqA3DYMzZ8VAMmo=
Subject key identifier: 98:2D:04:6E:EE:DD:D5:43:44:27:71:AD:61:3D:F4:82:DA:65:48:A8
Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491
Certificate serial: 01A181BD7B4B6D8AE0545D616823B01DA2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
Manifest number: 06CA
Signing time: Wed 28 Oct 2026 09:00:41 +0000
Manifest this update: Wed 28 Oct 2026 09:00:41 +0000
Manifest next update: Thu 29 Oct 2026 09:00:41 +0000
Files and hashes: 1: 1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl (hash: XnMw/6Q/CIeE+mlw2vrMPkwm6/NtmJglyc9P4cMqz2w=)
2: Kcqh7YgMjXr3Su1lIN7jhAfcEIc.roa (hash: VypdL+t+Km3avCeeLRSu2LBHbDwKwpUGNeK6Kc08dJE=)
3: hI3e7uK5dcpU9lEziXhTJOX8ujo.roa (hash: jWqaOCgUgQhWBYlF8RKOY20G2OtGLon5g45aLhAiSTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:7b:4b:6d:8a:e0:54:5d:61:68:23:b0:1d:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491
Validity
Not Before: Oct 28 09:00:41 2026 GMT
Not After : Oct 29 09:00:41 2026 GMT
Subject: CN=982d046eeeddd543442771ad613df482da6548a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:6a:e6:5d:21:a0:13:5c:69:8b:da:df:2d:
8d:f2:e8:16:08:fc:e7:bc:cf:d9:98:ab:c4:52:ac:
2c:67:62:ab:43:b7:f5:2d:97:3f:65:31:93:3b:23:
d7:64:c2:8d:d2:95:ab:ce:54:ff:5e:d1:19:75:ee:
57:a2:5a:79:ba:01:af:55:51:31:2b:1c:0c:e3:5a:
a8:21:3f:9c:50:dc:f6:f6:07:9f:38:3a:be:09:de:
51:64:8d:4c:89:1b:33:d0:9e:c7:13:0f:2f:57:1d:
20:0e:b6:11:dd:a7:08:f9:c4:e4:25:12:06:80:2c:
10:6a:b0:f6:52:28:d4:56:5e:e0:1d:c5:7c:ed:7e:
05:c9:11:03:bd:bc:5b:61:f3:f2:ec:30:a1:93:9d:
04:3f:7e:da:4e:52:89:96:e3:2b:7c:39:02:9d:5c:
52:73:5a:dd:b6:f5:0b:a1:5d:8c:a0:e5:0f:17:ae:
3a:9f:d8:c4:74:bc:9f:cc:25:3a:ca:43:fd:59:71:
80:f9:96:76:ea:a0:0c:3a:8f:86:20:27:45:f0:64:
d6:db:22:17:0e:b9:0a:79:a8:f7:93:c5:83:33:38:
92:5c:28:4a:3b:ae:9a:9d:cf:12:2f:4a:d1:81:1d:
d4:71:16:75:40:b7:3d:ba:a2:b0:ce:04:4c:2f:da:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2D:04:6E:EE:DD:D5:43:44:27:71:AD:61:3D:F4:82:DA:65:48:A8
X509v3 Authority Key Identifier:
keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5c:f2:96:55:81:c1:13:9d:fe:e7:c6:0a:da:5b:6d:06:17:
3b:de:32:91:9c:0b:a5:5f:c9:79:e9:c9:b3:44:25:4c:f4:e4:
d2:7a:6e:a0:5e:24:53:d9:db:1d:c0:ab:fc:6a:f4:cd:16:18:
c3:fa:d7:ec:72:9b:cd:cf:f2:6e:91:db:18:5e:f5:5b:c6:60:
bd:5e:8d:fd:70:9a:e1:e4:43:84:e3:31:b9:26:91:51:f3:de:
71:82:c4:f3:91:c9:f3:7c:4d:30:cb:0a:e0:b1:76:f4:73:ac:
d1:12:1b:7b:33:30:1c:ae:3f:57:4e:28:1d:92:07:02:ba:5a:
94:2e:a8:08:54:d8:63:af:4e:f7:62:3a:80:05:ea:cd:ff:b0:
63:1f:d0:9e:80:bf:f2:6d:59:43:d8:ac:41:87:4c:25:4c:8c:
7a:f3:da:d0:f4:05:dc:cd:fa:a7:da:79:32:15:3c:9a:8d:95:
d3:a2:1b:19:04:ab:ca:0d:a7:4a:26:c1:63:b9:27:69:c2:55:
15:33:48:af:a9:79:6c:80:5f:61:3e:58:63:0a:b5:bb:8c:5f:
a1:d1:54:41:e1:d0:27:6b:94:1c:ec:21:77:8b:a8:76:54:bf:
96:73:ee:59:8c:47:4d:96:91:3d:53:1a:a5:77:c2:8b:f0:7d:
87:b0:2f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGBvXtLbYrgVF1haCOwHaLmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5
M2M0OTEwHhcNMjYxMDI4MDkwMDQxWhcNMjYxMDI5MDkwMDQxWjAzMTEwLwYDVQQD
Eyg5ODJkMDQ2ZWVlZGRkNTQzNDQyNzcxYWQ2MTNkZjQ4MmRhNjU0OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdpq5l0hoBNcaYva3y2N8ugWCPzn
vM/ZmKvEUqwsZ2KrQ7f1LZc/ZTGTOyPXZMKN0pWrzlT/XtEZde5Xolp5ugGvVVEx
KxwM41qoIT+cUNz29gefODq+Cd5RZI1MiRsz0J7HEw8vVx0gDrYR3acI+cTkJRIG
gCwQarD2UijUVl7gHcV87X4FyREDvbxbYfPy7DChk50EP37aTlKJluMrfDkCnVxS
c1rdtvULoV2MoOUPF646n9jEdLyfzCU6ykP9WXGA+ZZ26qAMOo+GICdF8GTW2yIX
DrkKeaj3k8WDMziSXChKO66anc8SL0rRgR3UcRZ1QLc9uqKwzgRML9rdiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgtBG7u3dVDRCdxrWE99ILaZUioMB8GA1UdIwQY
MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt
ZDc5Y2UyZGVlYTcwLzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw
LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFzyllWB
wROd/ufGCtpbbQYXO94ykZwLpV/JeenJs0QlTPTk0npuoF4kU9nbHcCr/Gr0zRYY
w/rX7HKbzc/ybpHbGF71W8ZgvV6N/XCa4eRDhOMxuSaRUfPecYLE85HJ83xNMMsK
4LF29HOs0RIbezMwHK4/V04oHZIHArpalC6oCFTYY69O92I6gAXqzf+wYx/QnoC/
8m1ZQ9isQYdMJUyMevPa0PQF3M36p9p5MhU8mo2V06IbGQSryg2nSibBY7knacJV
FTNIr6l5bIBfYT5YYwq1u4xfodFUQeHQJ2uUHOwhd4uodlS/lnPuWYxHTZaRPVMa
pXfCi/B9h7AvOQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:08:33 2026 by rpki-client