
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
File: _-cGk0VLwzSF3sadIZ0FAmVKwEo.mft (raw, json)
Hash identifier: kDLNMZLzCzeE6p4uZZ2FWrjdNGUW+AL/Ye/cpE90RmA=
Subject key identifier: DD:2E:C4:11:D3:E1:C3:61:F0:3F:A5:1B:55:78:C6:2C:B1:CB:99:95
Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a
Certificate serial: 01A1867602E35944714241D6E25BE33933BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
Manifest number: 155E
Signing time: Thu 29 Oct 2026 07:00:42 +0000
Manifest this update: Thu 29 Oct 2026 07:00:42 +0000
Manifest next update: Fri 30 Oct 2026 07:00:42 +0000
Files and hashes: 1: PgnYPQeoD3htOSSL2DOBZ_zruts.roa (hash: 7Nep1MbHNxc/0r8ke4ZXbOddKK4c8tJ7KyhGttz9bYU=)
2: _-cGk0VLwzSF3sadIZ0FAmVKwEo.crl (hash: GlfV34xFNgdqnRtiwA6Hy2iQ7gdxJt5NQIn2rGLm4+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:02:e3:59:44:71:42:41:d6:e2:5b:e3:39:33:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a
Validity
Not Before: Oct 29 07:00:42 2026 GMT
Not After : Oct 30 07:00:42 2026 GMT
Subject: CN=dd2ec411d3e1c361f03fa51b5578c62cb1cb9995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:88:df:81:13:39:b0:ac:71:e1:f2:ca:22:
20:7e:74:d5:6e:da:2e:2b:d4:39:70:7c:a6:d4:fb:
58:18:25:2d:d1:c4:3b:8d:45:1b:e5:2f:ed:86:f6:
34:e3:3f:6a:3e:2d:61:56:68:f5:e3:40:15:7c:f9:
65:66:e5:6a:fc:42:55:e1:ee:af:0b:54:e1:28:5b:
7c:f9:91:5b:ac:64:35:b7:43:b6:38:52:a9:3b:16:
b7:96:41:28:e0:3d:e7:c4:c0:01:50:e4:cd:92:14:
7b:51:4d:ce:7e:14:3a:63:0a:e6:7f:8a:a5:6f:37:
96:42:4f:14:91:25:98:55:46:16:c1:a4:ce:3a:0c:
f6:7c:25:28:d0:12:f1:e5:ab:bb:52:7a:fe:79:85:
cb:f4:43:33:67:7a:7b:3c:a0:c9:c2:b4:68:9a:4d:
20:c6:a7:fb:03:ca:41:75:b0:b9:ee:10:a8:be:b9:
7d:21:bc:4a:8d:2f:12:21:bb:76:74:21:ab:4f:44:
27:fb:c4:73:89:4a:ac:11:e9:0d:fd:03:ee:7d:e4:
54:26:58:eb:ca:c8:0b:0c:c4:94:53:c8:4a:ce:40:
6a:98:47:34:f7:52:f0:0c:f4:df:f0:64:4a:76:4b:
82:61:b4:f2:7c:ec:d6:77:f3:1c:79:b3:97:c3:b7:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2E:C4:11:D3:E1:C3:61:F0:3F:A5:1B:55:78:C6:2C:B1:CB:99:95
X509v3 Authority Key Identifier:
keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d3:a6:0a:34:fe:ae:0d:4a:62:f9:b8:d0:7d:00:65:31:87:
4c:4e:aa:f8:e9:0e:0e:b7:51:0f:85:41:39:45:74:dc:2b:05:
f3:50:a1:d4:57:8e:a2:51:16:40:17:7f:4d:08:35:75:23:e3:
6a:8e:a8:90:5d:87:5b:0e:b4:c7:c3:52:c3:f3:f0:99:de:86:
c2:a1:70:4e:d1:e5:ae:62:d5:18:fd:68:94:39:de:ec:70:04:
cf:54:4a:80:43:b2:cb:d8:6e:e7:b1:32:87:d5:bf:15:5f:36:
ce:84:e5:fb:da:ac:e7:83:44:fa:45:6b:03:11:7e:01:c2:09:
a9:ec:c2:50:29:a8:a4:fd:7d:55:3c:03:be:30:5f:dc:a0:c6:
a7:77:0d:0e:13:1f:f4:82:9c:d6:0f:f9:a0:5f:f4:45:56:6a:
56:75:fc:a8:c8:c7:63:0d:4d:fd:12:2a:dc:eb:5e:03:b6:78:
ab:18:75:fb:51:ee:3f:a8:47:08:6e:7d:c3:cd:ac:28:64:5a:
c2:02:68:28:b8:66:c4:a0:65:a8:bd:52:e5:af:eb:bc:12:3f:
a0:41:b0:10:0f:13:c5:44:d5:24:d5:2e:1f:68:1e:fb:e7:2d:
34:81:c9:73:18:ec:09:62:b1:07:e1:07:78:46:b0:f8:83:a6:
99:06:41:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGGdgLjWURxQkHW4lvjOTO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZTcwNjkzNDU0YmMzMzQ4NWRlYzY5ZDIxOWQwNTAyNjU0
YWMwNGEwHhcNMjYxMDI5MDcwMDQyWhcNMjYxMDMwMDcwMDQyWjAzMTEwLwYDVQQD
EyhkZDJlYzQxMWQzZTFjMzYxZjAzZmE1MWI1NTc4YzYyY2IxY2I5OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE2I34ETObCsceHyyiIgfnTVbtou
K9Q5cHym1PtYGCUt0cQ7jUUb5S/thvY04z9qPi1hVmj140AVfPllZuVq/EJV4e6v
C1ThKFt8+ZFbrGQ1t0O2OFKpOxa3lkEo4D3nxMABUOTNkhR7UU3OfhQ6Ywrmf4ql
bzeWQk8UkSWYVUYWwaTOOgz2fCUo0BLx5au7Unr+eYXL9EMzZ3p7PKDJwrRomk0g
xqf7A8pBdbC57hCovrl9IbxKjS8SIbt2dCGrT0Qn+8RziUqsEekN/QPufeRUJljr
ysgLDMSUU8hKzkBqmEc091LwDPTf8GRKdkuCYbTyfOzWd/McebOXw7cGZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0uxBHT4cNh8D+lG1V4xiyxy5mVMB8GA1UdIwQY
MBaAFP/nBpNFS8M0hd7GnSGdBQJlSsBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUt
MzUwMjY1OGFlNmY1LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUtMzUwMjY1OGFlNmY1
LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUdOmCjT+
rg1KYvm40H0AZTGHTE6q+OkODrdRD4VBOUV03CsF81Ch1FeOolEWQBd/TQg1dSPj
ao6okF2HWw60x8NSw/Pwmd6GwqFwTtHlrmLVGP1olDne7HAEz1RKgEOyy9hu57Ey
h9W/FV82zoTl+9qs54NE+kVrAxF+AcIJqezCUCmopP19VTwDvjBf3KDGp3cNDhMf
9IKc1g/5oF/0RVZqVnX8qMjHYw1N/RIq3OteA7Z4qxh1+1HuP6hHCG59w82sKGRa
wgJoKLhmxKBlqL1S5a/rvBI/oEGwEA8TxUTVJNUuH2ge++ctNIHJcxjsCWKxB+EH
eEaw+IOmmQZBWg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:51:08 2026 by rpki-client