Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
File: iDg0C7z4K84GXO6zeMuqR7mjLN0.mft (raw, json)
Hash identifier: vTwaOe6wmaGQe4c9fpgdVcKDCHRQrYmFyav61gr1lzg=
Subject key identifier: 5E:1A:88:05:15:74:BA:01:67:81:89:7F:2C:C4:96:5C:36:53:29:B0
Authority key identifier: 88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
Certificate issuer: /CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Certificate serial: 01A19BB4BC3A2AE8EC6113B3D29B58A8BC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
Manifest number: 0321
Signing time: Mon 02 Nov 2026 10:01:15 +0000
Manifest this update: Mon 02 Nov 2026 10:01:15 +0000
Manifest next update: Tue 03 Nov 2026 10:01:15 +0000
Files and hashes: 1: 82yqy0aGJzKzR4R_K7jhO-MXZ48.asa (hash: QLpjtYyVJWNod7Hjm1qgZ6D0o3OhLnBCKHSjT6fQXEI=)
2: iDg0C7z4K84GXO6zeMuqR7mjLN0.crl (hash: Tu4Mh8WK4ZsHUJaueAttBKeNy1aXlp1mzlLIDSUkJx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 10:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:b4:bc:3a:2a:e8:ec:61:13:b3:d2:9b:58:a8:bc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8838340bbcf82bce065ceeb378cbaa47b9a32cdd
Validity
Not Before: Nov 2 10:01:15 2026 GMT
Not After : Nov 3 10:01:15 2026 GMT
Subject: CN=5e1a88051574ba016781897f2cc4965c365329b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:98:c6:af:3d:c6:28:a6:2f:0e:7a:df:63:
8d:28:60:ed:09:65:e0:a6:6f:49:58:f3:d4:c9:61:
34:f5:a5:29:b3:ba:d0:21:54:2a:4c:70:60:6f:f6:
e2:90:8a:1a:1d:da:91:99:cf:74:ed:38:00:4c:90:
22:45:b6:56:f4:e9:b1:14:25:f9:8d:05:71:e4:f5:
b2:17:1d:1f:02:7e:3b:28:ce:ba:68:59:01:b3:a4:
31:88:99:0b:23:4a:10:ea:85:42:17:20:de:3e:a9:
15:66:fd:ac:70:76:37:cf:a9:a1:1b:96:9a:c1:73:
b5:14:a2:2e:c2:2c:1d:f5:b5:32:48:b0:51:67:71:
a6:50:db:71:d9:ac:33:e3:05:30:db:bf:51:8e:3a:
09:90:6e:fb:d6:ca:65:38:c4:eb:8d:d5:c1:3e:68:
f6:e9:33:b6:e7:e8:de:01:05:f9:d3:31:e5:7d:ad:
04:19:5f:3d:35:dc:20:3e:c6:8b:c2:38:d5:5f:66:
b6:8e:d0:91:84:0a:a7:a6:50:0f:f7:eb:70:7b:78:
53:a6:2c:dc:b1:30:5e:6e:66:d5:0a:ec:02:67:84:
ac:12:51:72:0a:df:7e:9e:29:5e:03:c2:1a:a5:a1:
30:8b:5a:e0:2d:3d:d9:21:79:d1:e8:18:2f:20:02:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1A:88:05:15:74:BA:01:67:81:89:7F:2C:C4:96:5C:36:53:29:B0
X509v3 Authority Key Identifier:
keyid:88:38:34:0B:BC:F8:2B:CE:06:5C:EE:B3:78:CB:AA:47:B9:A3:2C:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDg0C7z4K84GXO6zeMuqR7mjLN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/54af6c-dc5a-4316-9056-35e39964dfdc/1/iDg0C7z4K84GXO6zeMuqR7mjLN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1b:b4:fb:a5:87:12:71:1d:a1:6b:c2:95:6d:ad:56:bd:c0:
76:e9:8c:f1:48:0d:15:d6:71:da:82:b9:2c:2c:35:67:fe:73:
af:32:53:d6:a6:0f:42:69:13:e7:10:63:a3:2c:cc:cf:e4:fb:
9c:f6:2a:ab:b0:43:6e:b3:cc:d0:31:be:24:86:4a:24:ba:74:
78:cc:f8:72:d2:00:be:c1:c4:97:2c:41:39:35:1d:b8:3c:d8:
34:ba:e8:fd:72:89:85:55:14:36:4e:cf:f5:c2:b2:6d:0e:ff:
1c:75:cf:40:d1:5f:2f:7f:7d:2d:00:07:48:a2:71:52:57:08:
75:c2:9a:65:89:46:2d:4f:56:cd:79:9a:53:c6:41:f4:e5:3e:
7a:88:a0:12:67:6d:67:3f:de:8b:91:26:84:02:73:ea:21:9e:
c7:e8:9c:f3:f7:cb:04:84:ed:f2:b0:af:34:be:74:da:68:88:
9f:2e:95:6d:ce:a7:23:d6:23:ea:fa:0a:89:6a:87:a0:96:66:
d4:1d:ce:c5:a1:f6:8f:d5:7f:77:68:80:a3:82:66:5f:ba:fb:
c6:80:b1:b6:96:29:1e:de:ba:4c:c8:07:90:64:22:e7:ee:d4:
5e:a1:f5:97:9f:d0:1a:6a:33:4d:af:04:9e:67:40:a3:1e:7d:
c7:2e:ef:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGbtLw6KujsYROz0ptYqLwmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzgzNDBiYmNmODJiY2UwNjVjZWViMzc4Y2JhYTQ3Yjlh
MzJjZGQwHhcNMjYxMTAyMTAwMTE1WhcNMjYxMTAzMTAwMTE1WjAzMTEwLwYDVQQD
Eyg1ZTFhODgwNTE1NzRiYTAxNjc4MTg5N2YyY2M0OTY1YzM2NTMyOWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixCYxq89xiimLw5632ONKGDtCWXg
pm9JWPPUyWE09aUps7rQIVQqTHBgb/bikIoaHdqRmc907TgATJAiRbZW9OmxFCX5
jQVx5PWyFx0fAn47KM66aFkBs6QxiJkLI0oQ6oVCFyDePqkVZv2scHY3z6mhG5aa
wXO1FKIuwiwd9bUySLBRZ3GmUNtx2awz4wUw279RjjoJkG771splOMTrjdXBPmj2
6TO25+jeAQX50zHlfa0EGV89NdwgPsaLwjjVX2a2jtCRhAqnplAP9+twe3hTpizc
sTBebmbVCuwCZ4SsElFyCt9+nileA8IapaEwi1rgLT3ZIXnR6BgvIAIgdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4aiAUVdLoBZ4GJfyzEllw2UymwMB8GA1UdIwQY
MBaAFIg4NAu8+CvOBlzus3jLqke5oyzdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYt
MzVlMzk5NjRkZmRjLzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS81NGFmNmMtZGM1YS00MzE2LTkwNTYtMzVlMzk5NjRkZmRj
LzEvaURnMEM3ejRLODRHWE82emVNdXFSN21qTE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhu0+6WH
EnEdoWvClW2tVr3AdumM8UgNFdZx2oK5LCw1Z/5zrzJT1qYPQmkT5xBjoyzMz+T7
nPYqq7BDbrPM0DG+JIZKJLp0eMz4ctIAvsHElyxBOTUduDzYNLro/XKJhVUUNk7P
9cKybQ7/HHXPQNFfL399LQAHSKJxUlcIdcKaZYlGLU9WzXmaU8ZB9OU+eoigEmdt
Zz/ei5EmhAJz6iGex+ic8/fLBITt8rCvNL502miIny6Vbc6nI9Yj6voKiWqHoJZm
1B3OxaH2j9V/d2iAo4JmX7r7xoCxtpYpHt66TMgHkGQi5+7UXqH1l5/QGmozTa8E
nmdAox59xy7vAg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:57:39 2026 by rpki-client