Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File: lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier: bRlcKyURPbSXcb5lgOm54veF0iKtlFU067ye551cV0k=
Subject key identifier: 67:69:AF:94:9B:E9:B4:23:6F:8D:8D:BC:74:A8:79:9C:64:36:38:45
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer: /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial: 01A16AC7E46C9D0B0A0EB1516E9DFA54D383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number: 0695
Signing time: Fri 23 Oct 2026 22:00:47 +0000
Manifest this update: Fri 23 Oct 2026 22:00:47 +0000
Manifest next update: Sat 24 Oct 2026 22:00:47 +0000
Files and hashes: 1: 9-6uMx_1cLtSZmzwRHltNOvbN1Q.roa (hash: qkVhO869SS+g0a8EpShWW+uFhy2C8iltX3D6CRSmnec=)
2: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: AikqhS4Lo1OVkGpF6+b/SbRwwSFgpNGsYSBgQtJMm1Y=)
3: uFxrwUPGahsgU0NhkE7IqtKwEU4.roa (hash: ARBCNl7Ei4KTeE+J4rvd49qxKn5dAvgnf3fgdzfEo9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:c7:e4:6c:9d:0b:0a:0e:b1:51:6e:9d:fa:54:d3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Validity
Not Before: Oct 23 22:00:47 2026 GMT
Not After : Oct 24 22:00:47 2026 GMT
Subject: CN=6769af949be9b4236f8d8dbc74a8799c64363845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:94:06:a5:7b:e2:7c:d8:58:16:1b:8c:fb:
36:68:25:7c:0e:78:d8:0b:98:1e:8d:ac:16:8a:5f:
d4:57:bd:40:50:95:27:23:e1:be:43:76:ff:3a:b9:
15:84:ee:09:e9:74:2a:08:cc:4f:68:17:6f:71:dd:
75:4e:89:a0:e9:de:9d:00:42:d0:64:81:9e:cc:ad:
d8:7f:a7:58:7d:a5:89:91:31:ec:32:ec:ab:1c:29:
37:f6:00:4c:11:a3:6a:48:87:98:e5:af:74:26:21:
cc:2c:d1:35:b7:79:33:46:07:33:cb:52:8d:b4:4d:
43:78:4c:bf:a7:54:ce:21:48:85:0f:ca:74:7b:a4:
12:22:e9:ca:6c:5e:19:a7:d0:a7:20:45:e3:77:e5:
c8:6b:36:ac:38:a8:5c:1a:e6:1f:d4:c7:29:f7:f3:
de:62:5a:c8:cf:0d:a1:4b:74:cb:a3:fa:2e:d6:76:
e5:cd:08:00:33:6b:ee:66:fd:5f:30:16:eb:ad:02:
42:4c:f9:e8:b5:61:7d:3f:fb:ea:92:34:5d:e4:24:
a6:a3:db:8c:93:a5:29:1b:28:67:cd:fa:bf:43:0a:
71:c4:71:8d:34:72:9d:3f:30:c2:c1:fd:d2:aa:43:
51:32:d2:36:aa:75:39:7c:14:82:ca:26:b2:b6:b6:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:69:AF:94:9B:E9:B4:23:6F:8D:8D:BC:74:A8:79:9C:64:36:38:45
X509v3 Authority Key Identifier:
keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8a:f3:61:50:57:4a:71:bf:35:07:10:ab:c6:1b:9d:b2:7c:
0c:96:83:79:db:7c:3b:33:ce:8f:4a:09:0b:8a:e7:2f:12:f9:
73:f8:4b:06:30:7e:23:38:18:9b:1f:95:6e:55:9a:d9:f0:42:
c3:f7:b0:d9:08:30:3d:33:24:d0:c1:a5:26:69:a5:b0:ab:06:
26:56:c9:10:18:84:fc:82:1e:75:6f:f3:f3:56:89:ea:db:3e:
49:1c:fd:7f:c5:f2:7c:9a:f8:b6:0c:8c:54:2c:ac:0a:1d:15:
8b:de:0f:14:16:53:9e:26:92:28:ff:ef:17:07:3e:ea:85:15:
15:e1:4b:ac:3a:54:98:db:c7:59:21:03:09:aa:b9:60:27:64:
7b:33:d1:95:4e:48:00:4d:04:2e:a1:30:02:4b:c3:b3:f7:dc:
ad:10:ea:c2:67:95:fd:bc:2e:4e:35:c4:9a:1e:5d:61:15:9e:
31:12:cf:4b:71:23:04:86:50:a3:8b:42:c2:99:26:a7:d4:be:
64:f6:1d:7a:9c:76:06:28:72:63:33:71:bd:e8:ba:76:61:9c:
35:8d:f8:da:0e:d4:22:5d:aa:ab:9c:5d:64:b6:86:30:bd:84:
70:74:44:04:5b:6c:33:d1:46:2e:59:0a:28:4c:ac:a5:e5:32:
e5:97:1b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFqx+RsnQsKDrFRbp36VNODMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0NDdhZDg0Yjg0YmFlYzQ3ZDU2MjFlMmY3NTYyM2YzZWFm
MTM5NjAwHhcNMjYxMDIzMjIwMDQ3WhcNMjYxMDI0MjIwMDQ3WjAzMTEwLwYDVQQD
Eyg2NzY5YWY5NDliZTliNDIzNmY4ZDhkYmM3NGE4Nzk5YzY0MzYzODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7muUBqV74nzYWBYbjPs2aCV8DnjY
C5gejawWil/UV71AUJUnI+G+Q3b/OrkVhO4J6XQqCMxPaBdvcd11Tomg6d6dAELQ
ZIGezK3Yf6dYfaWJkTHsMuyrHCk39gBMEaNqSIeY5a90JiHMLNE1t3kzRgczy1KN
tE1DeEy/p1TOIUiFD8p0e6QSIunKbF4Zp9CnIEXjd+XIazasOKhcGuYf1Mcp9/Pe
YlrIzw2hS3TLo/ou1nblzQgAM2vuZv1fMBbrrQJCTPnotWF9P/vqkjRd5CSmo9uM
k6UpGyhnzfq/QwpxxHGNNHKdPzDCwf3SqkNRMtI2qnU5fBSCyiaytrZ1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdpr5Sb6bQjb42NvHSoeZxkNjhFMB8GA1UdIwQY
MBaAFJRHrYS4S67EfVYh4vdWI/Pq8TlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYt
NWIzMThjMzQ5OWZiLzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8yMzhjNTYtYzI1ZS00ZmQ2LWI5MTYtNWIzMThjMzQ5OWZi
LzEvbEVldGhMaExyc1I5VmlIaTkxWWo4LXJ4T1dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4rzYVBX
SnG/NQcQq8YbnbJ8DJaDedt8OzPOj0oJC4rnLxL5c/hLBjB+IzgYmx+VblWa2fBC
w/ew2QgwPTMk0MGlJmmlsKsGJlbJEBiE/IIedW/z81aJ6ts+SRz9f8XyfJr4tgyM
VCysCh0Vi94PFBZTniaSKP/vFwc+6oUVFeFLrDpUmNvHWSEDCaq5YCdkezPRlU5I
AE0ELqEwAkvDs/fcrRDqwmeV/bwuTjXEmh5dYRWeMRLPS3EjBIZQo4tCwpkmp9S+
ZPYdepx2BihyYzNxvei6dmGcNY342g7UIl2qq5xdZLaGML2EcHREBFtsM9FGLlkK
KEyspeUy5ZcbSg==
-----END CERTIFICATE-----
Generated at Sat Oct 24 04:50:17 2026 by rpki-client