Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft
File: ffYkUcKc2enXmd2DCdTqc3HOM7U.mft (raw, json)
Hash identifier: UmmALHbb0P7/imsVNTgLmDEUFzPbnKofZNJ17+mKrb4=
Subject key identifier: 2A:51:13:02:CF:03:E7:D2:B7:21:54:A8:90:48:B5:24:7A:73:19:D4
Authority key identifier: 7D:F6:24:51:C2:9C:D9:E9:D7:99:DD:83:09:D4:EA:73:71:CE:33:B5
Certificate issuer: /CN=7df62451c29cd9e9d799dd8309d4ea7371ce33b5
Certificate serial: 01A163B3CEA0F22F545F78F555102956AD85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffYkUcKc2enXmd2DCdTqc3HOM7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft
Manifest number: 2F
Signing time: Thu 22 Oct 2026 13:01:30 +0000
Manifest this update: Thu 22 Oct 2026 13:01:30 +0000
Manifest next update: Fri 23 Oct 2026 13:01:30 +0000
Files and hashes: 1: NM7IEAzC6HHNuhcHK3LiNCC--Wk.asa (hash: +9n6CBslRbG8gClPBDRzFwtzqWBq0YKVtS1j7+cEie4=)
2: ffYkUcKc2enXmd2DCdTqc3HOM7U.crl (hash: 2rRt9VhcX0Qc5WCEZinCV8UK0BC2NcYet77+tQTt8LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffYkUcKc2enXmd2DCdTqc3HOM7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:b3:ce:a0:f2:2f:54:5f:78:f5:55:10:29:56:ad:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df62451c29cd9e9d799dd8309d4ea7371ce33b5
Validity
Not Before: Oct 22 13:01:30 2026 GMT
Not After : Oct 23 13:01:30 2026 GMT
Subject: CN=2a511302cf03e7d2b72154a89048b5247a7319d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4a:f9:85:ef:67:8b:64:ca:0e:c2:ff:66:37:
86:01:ae:0e:89:71:2a:6c:d1:15:60:d6:ee:50:32:
a8:3d:c3:9e:38:19:3d:46:07:53:37:9f:83:e5:d4:
b1:8a:cd:e6:49:ad:00:69:cd:c3:9d:39:8f:da:76:
1b:71:e9:41:67:10:1f:4a:bf:cd:59:7b:83:45:2c:
32:e3:94:4c:56:6a:19:e9:37:9d:5b:fb:b8:31:ac:
e3:6d:70:0c:6a:84:9a:ae:c9:4a:e6:e0:2a:34:0f:
d9:d4:a9:fe:a7:f4:19:23:4c:1c:c7:8a:12:f6:8c:
85:3d:02:51:57:90:70:9d:63:1e:bd:d3:5a:d6:df:
02:68:4a:64:8d:28:74:65:25:68:0f:4a:38:4e:c6:
f0:52:10:b4:10:74:49:ba:1e:20:14:64:44:f5:f5:
b3:7d:8c:0f:20:d1:f7:ae:04:a9:15:bd:87:6d:3b:
0c:e0:7f:72:cf:ce:7b:b2:5e:6e:42:fe:3f:f5:37:
a5:fc:79:c9:02:5b:27:09:ff:a6:c6:9e:30:28:a8:
05:4a:0d:79:59:d5:5d:9e:57:eb:00:88:eb:1b:e7:
69:4f:04:41:e0:27:10:dc:fa:64:84:57:a6:95:dc:
99:f8:0a:94:c7:fe:33:88:c7:53:91:3e:38:f1:3f:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:51:13:02:CF:03:E7:D2:B7:21:54:A8:90:48:B5:24:7A:73:19:D4
X509v3 Authority Key Identifier:
keyid:7D:F6:24:51:C2:9C:D9:E9:D7:99:DD:83:09:D4:EA:73:71:CE:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffYkUcKc2enXmd2DCdTqc3HOM7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e78f10-6daf-4e6c-a27b-c3e692a314a6/1/ffYkUcKc2enXmd2DCdTqc3HOM7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:e8:55:c6:9d:a8:9a:ea:5f:9b:2e:6a:ba:97:3e:5a:be:8f:
26:3b:83:6c:1e:e2:86:5e:64:b6:46:a6:21:da:5e:d4:1b:8c:
c5:c4:3e:7e:4f:ba:03:69:ee:b3:80:b2:79:f6:83:fc:15:9d:
ff:9a:9e:19:7d:b5:11:67:99:a4:cc:a9:cc:c5:22:ef:0c:5b:
4d:85:b3:7f:fa:fc:72:77:66:10:27:6c:78:8c:4b:f6:e1:4b:
23:49:c9:7b:bd:37:8e:37:39:a9:05:f2:27:56:bd:f7:a6:c2:
9f:0e:48:13:3e:46:4b:6f:48:df:30:d1:d8:d3:26:36:4a:73:
43:9f:89:12:b0:a4:79:df:31:26:94:00:c0:0c:6c:5d:7f:05:
15:fe:0a:1f:e9:8d:58:99:6b:52:a4:0a:d4:93:40:9c:23:c0:
af:4a:82:aa:e1:42:7e:48:9c:ce:6e:45:8a:97:03:a8:0f:3c:
7b:99:e0:e7:20:44:15:68:c5:84:de:92:e7:81:07:11:ca:02:
38:30:69:de:8b:bf:65:22:74:ac:6a:67:80:69:b8:db:96:61:
a8:d4:7f:9d:fd:af:fc:db:83:bc:a3:03:a0:38:24:67:db:ba:
b5:4a:be:d9:65:b7:3d:ed:0d:9a:1d:15:1c:3f:71:f3:cd:5b:
7d:b8:3e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFjs86g8i9UX3j1VRApVq2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjYyNDUxYzI5Y2Q5ZTlkNzk5ZGQ4MzA5ZDRlYTczNzFj
ZTMzYjUwHhcNMjYxMDIyMTMwMTMwWhcNMjYxMDIzMTMwMTMwWjAzMTEwLwYDVQQD
EygyYTUxMTMwMmNmMDNlN2QyYjcyMTU0YTg5MDQ4YjUyNDdhNzMxOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkr5he9ni2TKDsL/ZjeGAa4OiXEq
bNEVYNbuUDKoPcOeOBk9RgdTN5+D5dSxis3mSa0Aac3DnTmP2nYbcelBZxAfSr/N
WXuDRSwy45RMVmoZ6TedW/u4MazjbXAMaoSarslK5uAqNA/Z1Kn+p/QZI0wcx4oS
9oyFPQJRV5BwnWMevdNa1t8CaEpkjSh0ZSVoD0o4TsbwUhC0EHRJuh4gFGRE9fWz
fYwPINH3rgSpFb2HbTsM4H9yz857sl5uQv4/9Tel/HnJAlsnCf+mxp4wKKgFSg15
WdVdnlfrAIjrG+dpTwRB4CcQ3PpkhFemldyZ+AqUx/4ziMdTkT448T9VIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpREwLPA+fStyFUqJBItSR6cxnUMB8GA1UdIwQY
MBaAFH32JFHCnNnp15ndgwnU6nNxzjO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZZa1VjS2MyZW5YbWQyRENkVHFjM0hPTTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lNzhmMTAtNmRhZi00ZTZjLWEyN2It
YzNlNjkyYTMxNGE2LzEvZmZZa1VjS2MyZW5YbWQyRENkVHFjM0hPTTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lNzhmMTAtNmRhZi00ZTZjLWEyN2ItYzNlNjkyYTMxNGE2
LzEvZmZZa1VjS2MyZW5YbWQyRENkVHFjM0hPTTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+hVxp2o
mupfmy5qupc+Wr6PJjuDbB7ihl5ktkamIdpe1BuMxcQ+fk+6A2nus4CyefaD/BWd
/5qeGX21EWeZpMypzMUi7wxbTYWzf/r8cndmECdseIxL9uFLI0nJe703jjc5qQXy
J1a996bCnw5IEz5GS29I3zDR2NMmNkpzQ5+JErCked8xJpQAwAxsXX8FFf4KH+mN
WJlrUqQK1JNAnCPAr0qCquFCfkiczm5FipcDqA88e5ng5yBEFWjFhN6S54EHEcoC
ODBp3ou/ZSJ0rGpngGm425ZhqNR/nf2v/NuDvKMDoDgkZ9u6tUq+2WW3Pe0Nmh0V
HD9x881bfbg+Rw==
-----END CERTIFICATE-----
Generated at Thu Oct 22 21:24:04 2026 by rpki-client