Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
File: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft (raw, json)
Hash identifier: gIJuX8akBM1YJEIplHY6R7T7a6n3rCjYg0quXzLP32M=
Subject key identifier: 90:48:29:8C:D0:4E:87:DD:AE:45:73:FA:83:16:76:5D:16:2A:D3:60
Authority key identifier: 08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
Certificate issuer: /CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Certificate serial: 01A179283BC8B4BAABD282A1E8F4F2678A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
Manifest number: 160D
Signing time: Mon 26 Oct 2026 17:00:42 +0000
Manifest this update: Mon 26 Oct 2026 17:00:42 +0000
Manifest next update: Tue 27 Oct 2026 17:00:42 +0000
Files and hashes: 1: CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl (hash: 15S2Vfm/hviSGopUt4hQryrkeYLWezcMHIw8D2/xGk0=)
2: UUqgGSLj84boI_NxgkGB4TKwVIU.roa (hash: el0OUsfFn2pwq6lrAb2NBOC3HWUwPQO50Ng8SKy5hMc=)
3: YmIRs6_4Cx0UeKMkGUDdp5mRk_0.roa (hash: bFavmNyn/CPcWGJeZG409Nafloy5IsBvUxX5L0UODxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:28:3b:c8:b4:ba:ab:d2:82:a1:e8:f4:f2:67:8a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d493078812d09e1a1e0eb2a380fc6574983f5c
Validity
Not Before: Oct 26 17:00:42 2026 GMT
Not After : Oct 27 17:00:42 2026 GMT
Subject: CN=9048298cd04e87ddae4573fa8316765d162ad360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2d:4c:8d:00:2d:b6:cf:92:80:cb:4e:88:cc:
be:b2:50:60:94:a0:14:5d:ad:7c:8d:21:f2:9b:af:
83:2f:8f:b4:dd:63:36:03:2a:8a:3a:5d:63:4e:98:
ff:30:75:01:75:6c:52:45:99:2f:51:27:de:2b:0f:
5c:dc:09:51:6b:66:c8:cb:ef:57:98:cc:15:1b:ff:
49:ae:fd:5a:3a:c7:6d:6f:a4:2c:60:8e:0a:48:cf:
97:6e:71:93:69:82:ba:e9:c4:9f:49:5b:5f:66:9c:
2f:b5:66:f4:d7:9e:00:11:4c:4a:e9:ef:4d:9f:c8:
e0:df:54:b9:f3:9f:2b:45:c3:2f:48:0a:d0:7f:d3:
a5:f3:e7:54:c5:d0:99:4f:4f:9a:71:a2:26:a6:4f:
e7:8e:dc:e4:8b:aa:09:5c:88:dd:3c:f4:a3:c9:e9:
71:1c:31:49:af:b2:82:27:9f:e8:be:9e:00:fc:fd:
f7:55:a1:70:81:97:48:d6:16:59:b6:f4:8f:8e:04:
f0:5f:12:2c:0a:bd:ed:7a:c7:bc:e8:1a:8d:77:a4:
ef:e6:02:9d:bf:ce:a9:73:24:97:a0:2b:fe:6f:54:
85:53:2f:a0:00:33:47:f8:8f:86:bc:d8:6d:8c:48:
36:79:27:d0:d6:45:54:de:03:fe:d3:e1:6c:4e:b5:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:48:29:8C:D0:4E:87:DD:AE:45:73:FA:83:16:76:5D:16:2A:D3:60
X509v3 Authority Key Identifier:
keyid:08:D4:93:07:88:12:D0:9E:1A:1E:0E:B2:A3:80:FC:65:74:98:3F:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e9a31f-1537-40c1-b62d-31adf6439643/1/CNSTB4gS0J4aHg6yo4D8ZXSYP1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4f:1a:bb:bd:65:7a:82:a5:df:03:78:c5:89:86:06:53:f4:
4f:d7:17:17:4a:f5:f1:d3:a6:5b:af:66:f7:41:c8:83:c6:f0:
d5:ed:71:ef:27:22:c8:9c:39:8e:fd:45:98:dc:db:18:65:2b:
e6:a9:0f:a5:17:68:ec:e1:58:d1:06:2f:4c:c4:2f:3f:65:5f:
b8:78:a9:74:f5:ec:37:99:8d:4d:b6:e8:0f:42:da:69:7d:71:
77:b9:41:8e:c7:b5:03:df:21:93:21:29:0b:60:ab:bb:5b:58:
31:9d:b2:34:e9:b5:14:64:28:12:eb:7e:2f:e1:08:a5:34:5e:
8a:a7:cc:d6:5e:f1:12:67:91:0e:d4:7d:22:02:1f:ce:a9:d0:
fb:c7:55:ce:b3:5d:84:48:4a:df:9d:44:c5:d7:d9:7b:52:a7:
d4:db:54:05:d4:a8:05:d8:b6:a6:ae:78:b8:6b:37:44:b6:5e:
4d:2a:00:4b:30:e3:9e:23:29:45:f9:8e:d5:90:8f:76:e8:b6:
27:8c:e0:f0:dd:44:4b:11:9c:42:ae:6c:9a:9f:30:c7:f9:c9:
21:86:c2:dd:f3:5c:8e:c8:98:eb:56:bd:13:14:87:3c:59:21:
09:e8:f8:ae:cd:30:db:cb:b7:c3:3d:85:6a:2e:f0:dc:d6:70:
7b:03:fc:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5KDvItLqr0oKh6PTyZ4pjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDQ5MzA3ODgxMmQwOWUxYTFlMGViMmEzODBmYzY1NzQ5
ODNmNWMwHhcNMjYxMDI2MTcwMDQyWhcNMjYxMDI3MTcwMDQyWjAzMTEwLwYDVQQD
Eyg5MDQ4Mjk4Y2QwNGU4N2RkYWU0NTczZmE4MzE2NzY1ZDE2MmFkMzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi1MjQAtts+SgMtOiMy+slBglKAU
Xa18jSHym6+DL4+03WM2AyqKOl1jTpj/MHUBdWxSRZkvUSfeKw9c3AlRa2bIy+9X
mMwVG/9Jrv1aOsdtb6QsYI4KSM+XbnGTaYK66cSfSVtfZpwvtWb0154AEUxK6e9N
n8jg31S5858rRcMvSArQf9Ol8+dUxdCZT0+acaImpk/njtzki6oJXIjdPPSjyelx
HDFJr7KCJ5/ovp4A/P33VaFwgZdI1hZZtvSPjgTwXxIsCr3tese86BqNd6Tv5gKd
v86pcySXoCv+b1SFUy+gADNH+I+GvNhtjEg2eSfQ1kVU3gP+0+FsTrVVZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBIKYzQTofdrkVz+oMWdl0WKtNgMB8GA1UdIwQY
MBaAFAjUkweIEtCeGh4OsqOA/GV0mD9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQt
MzFhZGY2NDM5NjQzLzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9lOWEzMWYtMTUzNy00MGMxLWI2MmQtMzFhZGY2NDM5NjQz
LzEvQ05TVEI0Z1MwSjRhSGc2eW80RDhaWFNZUDF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArE8au71l
eoKl3wN4xYmGBlP0T9cXF0r18dOmW69m90HIg8bw1e1x7yciyJw5jv1FmNzbGGUr
5qkPpRdo7OFY0QYvTMQvP2VfuHipdPXsN5mNTbboD0LaaX1xd7lBjse1A98hkyEp
C2Cru1tYMZ2yNOm1FGQoEut+L+EIpTReiqfM1l7xEmeRDtR9IgIfzqnQ+8dVzrNd
hEhK351ExdfZe1Kn1NtUBdSoBdi2pq54uGs3RLZeTSoASzDjniMpRfmO1ZCPdui2
J4zg8N1ESxGcQq5smp8wx/nJIYbC3fNcjsiY61a9ExSHPFkhCej4rs0w28u3wz2F
ai7w3NZwewP8zg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:08:59 2026 by rpki-client