Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: JUQ2Pgv/Jsw2dCDnjdnB48tnB6rtTSnWaMVSY1goyEg=
Subject key identifier: 05:D4:4C:D3:EE:C1:64:67:BC:C2:EC:C5:4E:3F:A2:C2:67:9D:81:C0
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 01A15288DE5E9C66B5321F2933AF1336A5D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 1AAF
Signing time: Mon 19 Oct 2026 05:01:03 +0000
Manifest this update: Mon 19 Oct 2026 05:01:03 +0000
Manifest next update: Tue 20 Oct 2026 05:01:03 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: N9Q2xtD6P/mBlAHIB0B0Y7vpWMz/8NN5fO3sUCREvKw=)
2: KKHPIMDT8NiUrfJyp3qumk7jzz0.roa (hash: F9DAPFB3HYHVOGcoMRsEePDFxOqD9/ROl95gQQnRzvU=)
3: OZy02Cq16jIMB_FoJZn64VS22JA.roa (hash: nKj4XdLVyOxWe/dNxJ4EoTYTSII+Va1gBKibKO7YLnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:88:de:5e:9c:66:b5:32:1f:29:33:af:13:36:a5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Oct 19 05:01:03 2026 GMT
Not After : Oct 20 05:01:03 2026 GMT
Subject: CN=05d44cd3eec16467bcc2ecc54e3fa2c2679d81c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:f0:2f:8a:83:4e:57:a9:fc:6e:1b:08:05:
3d:a2:fa:b0:cf:13:10:79:b9:6b:88:1d:b0:51:30:
f2:40:fa:42:a2:96:8b:b6:60:6e:24:22:12:60:cf:
e6:ad:4e:3f:c1:40:68:10:ee:8b:74:0d:fd:11:ea:
21:ff:f5:2e:57:45:8c:87:d9:c2:41:97:29:1e:3c:
91:21:f3:43:bf:22:bb:a0:31:6d:0f:ba:81:9c:fe:
29:a5:af:d4:ff:bc:3c:65:0d:d2:f9:30:07:50:56:
a4:04:6a:2b:e7:a8:74:dc:65:24:19:aa:05:55:24:
8c:a6:2a:23:c0:14:91:e9:88:95:9c:a4:99:5b:33:
a6:e5:8e:0c:cc:0a:49:c3:c9:ef:a0:60:d5:c3:01:
4e:18:15:f8:f5:04:9f:f3:8d:c4:90:19:82:eb:d4:
fd:e5:b8:52:5d:25:42:44:88:56:6b:01:06:c4:d7:
3e:1f:c6:94:61:6f:80:4f:a5:0c:65:38:95:28:03:
54:ba:6d:70:4e:9a:88:11:e1:fa:68:c1:e4:99:4c:
ac:c9:bd:52:d8:11:e4:49:e1:fd:ae:40:1d:66:6a:
c9:4f:ce:d4:c1:65:de:0e:99:00:e0:e3:83:6c:be:
5a:16:45:e9:46:9c:6a:16:ab:3b:39:b7:6f:f0:6a:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:4C:D3:EE:C1:64:67:BC:C2:EC:C5:4E:3F:A2:C2:67:9D:81:C0
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:fc:d9:dc:9e:f4:eb:57:e2:d2:2c:cf:49:3c:c4:c5:12:5f:
56:fc:6d:5f:32:63:66:1d:80:27:6d:85:c4:ce:e6:85:1d:fa:
59:67:0c:a7:c1:28:47:d5:ea:14:0e:07:d8:88:24:da:1a:fd:
66:31:2a:89:6b:1a:de:b3:b1:64:86:51:15:3a:3b:65:34:55:
5c:68:aa:38:77:f1:61:f3:f3:f6:db:43:91:ec:c5:06:5c:78:
8b:dc:f7:bc:a9:bc:fd:5e:39:da:72:18:3c:b1:c2:87:95:54:
8b:14:d0:79:3a:03:99:6a:44:28:45:7d:d0:71:62:4d:26:c3:
00:aa:20:07:f6:e0:b1:88:01:40:98:e1:5b:a2:5d:96:67:54:
8d:91:a5:b6:ed:f9:04:62:fe:a3:a9:02:d6:3d:b0:af:5a:fd:
c7:e5:05:be:71:f7:60:93:bc:65:f9:09:fb:23:8b:d0:33:4e:
c5:a7:b8:63:d0:5d:bb:06:38:75:86:3e:ec:f4:95:98:bc:f6:
30:cb:6e:e3:d5:bd:bd:a8:81:e5:c6:31:30:57:e4:44:2d:39:
81:5e:0b:ac:84:ea:c3:38:3d:70:e6:94:21:be:81:35:84:ec:
7f:82:61:ba:da:77:6a:c7:fa:d6:41:02:28:c9:9e:7a:25:d7:
38:c3:97:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSiN5enGa1Mh8pM68TNqXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTA4MmQzN2ZiYzgxOTk4YmZjZjk0OGE1YmJkZGE2M2Vk
ZmRlZTAwHhcNMjYxMDE5MDUwMTAzWhcNMjYxMDIwMDUwMTAzWjAzMTEwLwYDVQQD
EygwNWQ0NGNkM2VlYzE2NDY3YmNjMmVjYzU0ZTNmYTJjMjY3OWQ4MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOnwL4qDTlep/G4bCAU9ovqwzxMQ
eblriB2wUTDyQPpCopaLtmBuJCISYM/mrU4/wUBoEO6LdA39Eeoh//UuV0WMh9nC
QZcpHjyRIfNDvyK7oDFtD7qBnP4ppa/U/7w8ZQ3S+TAHUFakBGor56h03GUkGaoF
VSSMpiojwBSR6YiVnKSZWzOm5Y4MzApJw8nvoGDVwwFOGBX49QSf843EkBmC69T9
5bhSXSVCRIhWawEGxNc+H8aUYW+AT6UMZTiVKANUum1wTpqIEeH6aMHkmUysyb1S
2BHkSeH9rkAdZmrJT87UwWXeDpkA4OODbL5aFkXpRpxqFqs7Obdv8GrhbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAXUTNPuwWRnvMLsxU4/osJnnYHAMB8GA1UdIwQY
MBaAFO9QgtN/vIGZi/z5SKW73aY+397gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFDQzAzLThnWm1MX1BsSXBidmRwajdmM3VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wYzNjNGQtMDFkMi00NDBhLWE1MWYt
OTE5NWQwMmRlZDU1LzEvNzFDQzAzLThnWm1MX1BsSXBidmRwajdmM3VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wYzNjNGQtMDFkMi00NDBhLWE1MWYtOTE5NWQwMmRlZDU1
LzEvNzFDQzAzLThnWm1MX1BsSXBidmRwajdmM3VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvzZ3J70
61fi0izPSTzExRJfVvxtXzJjZh2AJ22FxM7mhR36WWcMp8EoR9XqFA4H2Igk2hr9
ZjEqiWsa3rOxZIZRFTo7ZTRVXGiqOHfxYfPz9ttDkezFBlx4i9z3vKm8/V452nIY
PLHCh5VUixTQeToDmWpEKEV90HFiTSbDAKogB/bgsYgBQJjhW6JdlmdUjZGltu35
BGL+o6kC1j2wr1r9x+UFvnH3YJO8ZfkJ+yOL0DNOxae4Y9BduwY4dYY+7PSVmLz2
MMtu49W9vaiB5cYxMFfkRC05gV4LrITqwzg9cOaUIb6BNYTsf4Jhutp3asf61kEC
KMmeeiXXOMOXjw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:56:46 2026 by rpki-client