Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
File: cJ626qpJ3WtIPgSxQ05NrHntnTE.mft (raw, json)
Hash identifier: NWU/38h/u6Nr1uOGemX1NB65hDJ2P8yrlzL+eWSIpHA=
Subject key identifier: 0B:6B:61:93:BC:C2:AD:81:FB:F7:4A:65:F1:54:48:D6:BE:13:F4:0A
Authority key identifier: 70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
Certificate issuer: /CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Certificate serial: 01A15AE6D9B7D92F2168EAE13CE82F9B7559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
Manifest number: 163A
Signing time: Tue 20 Oct 2026 20:00:40 +0000
Manifest this update: Tue 20 Oct 2026 20:00:40 +0000
Manifest next update: Wed 21 Oct 2026 20:00:40 +0000
Files and hashes: 1: cJ626qpJ3WtIPgSxQ05NrHntnTE.crl (hash: auAR+I4LVNkPuqZJFOhQ2SyipM95KaBeeNHAKesV7V4=)
2: inTxP1fNTlYLSntsJ5IWnkC3vvw.roa (hash: s1HiLTrRvWZ9MRHjrAc8u/SRsW3eRbZ59sgpFA6oQ5Q=)
3: ul-zUnu2paikTnNwXd2oI1pwrnM.roa (hash: q4CKSlu3nmMvj1Nz7hbm/CkmdA2asS0OfEoxLCdJk/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:e6:d9:b7:d9:2f:21:68:ea:e1:3c:e8:2f:9b:75:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709eb6eaaa49dd6b483e04b1434e4dac79ed9d31
Validity
Not Before: Oct 20 20:00:40 2026 GMT
Not After : Oct 21 20:00:40 2026 GMT
Subject: CN=0b6b6193bcc2ad81fbf74a65f15448d6be13f40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:a4:d0:7b:88:8d:3a:33:84:66:14:a7:e6:
55:21:92:c5:6f:d2:1f:a4:71:a4:ce:2c:e8:a4:92:
7d:e2:18:0f:4c:83:06:1a:c8:3b:05:ad:30:76:45:
3b:26:93:e9:c6:f0:d8:ec:0c:d2:7c:8a:df:76:aa:
e5:b7:12:4e:b4:bc:84:a7:e8:91:7c:c7:58:4d:cd:
5e:94:35:88:17:93:f0:9a:c7:72:d2:4f:59:1d:2a:
13:50:d7:e2:ae:1a:1d:5a:5c:f8:2f:c4:0d:88:e3:
f0:86:0c:89:e4:56:c3:11:88:0d:fe:6f:33:21:1b:
dd:e1:84:d6:f3:cf:46:f1:04:6a:51:5e:e1:27:0a:
95:3d:1e:b9:4f:1f:55:b5:fb:18:cd:97:27:4b:d8:
f5:f3:eb:bf:cc:1d:78:8d:49:92:33:9b:75:a7:86:
c6:97:44:a5:06:a0:8e:11:e1:74:b1:ab:89:95:a6:
6a:23:c9:14:4e:92:9f:7c:a8:bd:ba:de:5b:2d:3b:
62:32:d2:5f:7a:b2:6f:53:00:d8:75:ca:4f:51:c5:
e6:75:b8:f9:c5:6f:51:a3:3f:f2:24:03:bd:81:a0:
16:ed:13:d6:25:1c:94:99:97:c9:1d:0c:6d:8a:79:
08:ee:12:dc:8f:63:f6:a7:fc:ee:f5:83:d9:73:5b:
83:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:61:93:BC:C2:AD:81:FB:F7:4A:65:F1:54:48:D6:BE:13:F4:0A
X509v3 Authority Key Identifier:
keyid:70:9E:B6:EA:AA:49:DD:6B:48:3E:04:B1:43:4E:4D:AC:79:ED:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJ626qpJ3WtIPgSxQ05NrHntnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4bebe7-3f8e-4949-8980-9f6fa0e1a5a5/1/cJ626qpJ3WtIPgSxQ05NrHntnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9a:6f:8b:03:7c:77:a8:68:b7:fb:e9:e1:34:13:21:b1:6d:
bd:f2:fe:03:18:b2:6c:ca:e1:1c:1b:70:6c:11:44:b0:e2:1b:
1d:b8:5e:13:5c:33:e5:0d:c7:24:59:91:3c:2a:ab:14:40:2f:
fc:df:f9:9c:77:6e:bf:db:9d:e3:b7:bc:3b:b2:58:4a:ea:6a:
ab:f7:ae:7e:40:c0:69:6d:e9:a9:53:3e:e7:60:f5:91:32:c2:
3e:d0:12:5e:7b:b4:7a:ab:9f:28:9d:fd:40:23:dc:49:10:f8:
e9:f9:06:d5:1f:a7:1e:5b:a0:35:3e:bd:cc:f9:f0:c0:dc:38:
67:7b:c5:a4:8b:38:45:8f:42:55:71:74:ba:bf:b5:d3:cb:02:
ff:69:5e:dd:ae:b9:2d:c0:e1:1d:ac:4b:20:46:a9:60:91:b6:
91:62:1f:94:63:66:0f:76:ee:80:9b:e5:e9:19:78:f2:93:7c:
6e:51:c5:79:3c:0b:50:af:9b:eb:03:a1:1c:81:fc:96:32:b3:
40:81:6e:21:6d:41:3e:a2:02:77:8e:a2:aa:f0:bc:76:51:b5:
a7:36:a1:94:47:5e:2c:7a:85:07:ee:6d:f6:26:e2:01:68:8c:
fb:a1:70:ff:9e:89:0a:32:c9:d4:cd:8a:6f:11:0d:bf:d3:b8:
68:9c:f4:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFa5tm32S8haOrhPOgvm3VZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOWViNmVhYWE0OWRkNmI0ODNlMDRiMTQzNGU0ZGFjNzll
ZDlkMzEwHhcNMjYxMDIwMjAwMDQwWhcNMjYxMDIxMjAwMDQwWjAzMTEwLwYDVQQD
EygwYjZiNjE5M2JjYzJhZDgxZmJmNzRhNjVmMTU0NDhkNmJlMTNmNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP+k0HuIjTozhGYUp+ZVIZLFb9If
pHGkzizopJJ94hgPTIMGGsg7Ba0wdkU7JpPpxvDY7AzSfIrfdqrltxJOtLyEp+iR
fMdYTc1elDWIF5Pwmsdy0k9ZHSoTUNfirhodWlz4L8QNiOPwhgyJ5FbDEYgN/m8z
IRvd4YTW889G8QRqUV7hJwqVPR65Tx9VtfsYzZcnS9j18+u/zB14jUmSM5t1p4bG
l0SlBqCOEeF0sauJlaZqI8kUTpKffKi9ut5bLTtiMtJferJvUwDYdcpPUcXmdbj5
xW9Roz/yJAO9gaAW7RPWJRyUmZfJHQxtinkI7hLcj2P2p/zu9YPZc1uDEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtrYZO8wq2B+/dKZfFUSNa+E/QKMB8GA1UdIwQY
MBaAFHCetuqqSd1rSD4EsUNOTax57Z0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAt
OWY2ZmEwZTFhNWE1LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80YmViZTctM2Y4ZS00OTQ5LTg5ODAtOWY2ZmEwZTFhNWE1
LzEvY0o2MjZxcEozV3RJUGdTeFEwNU5ySG50blRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJpviwN8
d6hot/vp4TQTIbFtvfL+AxiybMrhHBtwbBFEsOIbHbheE1wz5Q3HJFmRPCqrFEAv
/N/5nHduv9ud47e8O7JYSupqq/eufkDAaW3pqVM+52D1kTLCPtASXnu0equfKJ39
QCPcSRD46fkG1R+nHlugNT69zPnwwNw4Z3vFpIs4RY9CVXF0ur+108sC/2le3a65
LcDhHaxLIEapYJG2kWIflGNmD3bugJvl6Rl48pN8blHFeTwLUK+b6wOhHIH8ljKz
QIFuIW1BPqICd46iqvC8dlG1pzahlEdeLHqFB+5t9ibiAWiM+6Fw/56JCjLJ1M2K
bxENv9O4aJz0ZQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 06:18:59 2026 by rpki-client