Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
File: IONyheqmIxC8nncrST2dYrqKeTg.mft (raw, json)
Hash identifier: xOJ6NiUcajvN2srG9HLrTUgySfgcdkf8t+i9Y9Y2z0M=
Subject key identifier: BF:EA:72:68:7B:CA:A2:65:30:A4:17:C1:19:49:EF:4B:80:B3:70:4D
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 01A183750C503EDF5EE6E6D01732E1782737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
Manifest number: 0B05
Signing time: Wed 28 Oct 2026 17:00:48 +0000
Manifest this update: Wed 28 Oct 2026 17:00:48 +0000
Manifest next update: Thu 29 Oct 2026 17:00:48 +0000
Files and hashes: 1: IONyheqmIxC8nncrST2dYrqKeTg.crl (hash: h4R0KJ2XBhZgSBh2yOlc8NMfEZDNQP4S/Ue/uh7+e/g=)
2: dshUZvB4McXbpCwuJto_ABAOvNQ.roa (hash: V5ln1lpZELvPyBOpg3oQ56WAm93C6lBYruWQT9Rpyxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:75:0c:50:3e:df:5e:e6:e6:d0:17:32:e1:78:27:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Oct 28 17:00:48 2026 GMT
Not After : Oct 29 17:00:48 2026 GMT
Subject: CN=bfea72687bcaa26530a417c11949ef4b80b3704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dc:44:b9:b8:82:b0:73:f7:e9:d0:34:61:eb:
f2:cf:50:5a:cb:d5:77:9d:ff:1c:e8:5c:31:c8:20:
db:c8:f4:5a:c8:94:8e:33:9a:64:1a:56:6e:0d:9c:
92:34:5a:93:d4:37:d8:ca:de:c6:82:bd:3f:42:95:
f9:cf:52:34:7c:1c:f9:bd:c7:40:16:9f:0a:c0:d2:
5c:cc:f7:82:6b:94:b8:d5:c1:5e:70:61:d0:02:cf:
ce:f1:14:1f:fb:d2:d5:0f:a9:03:50:ce:f9:e3:c3:
4d:aa:82:86:05:ac:16:11:30:62:9a:fb:a4:0f:50:
4b:b3:00:8a:0c:03:d9:b8:47:d2:e8:29:69:82:39:
c0:41:16:d3:08:00:51:cb:99:01:6d:27:da:e4:8f:
2a:88:4e:f1:27:b4:6e:15:d7:07:11:3f:5c:f2:9d:
83:32:31:be:34:f0:65:39:2a:c4:0d:dc:9c:eb:da:
5f:45:94:5e:4c:58:8a:83:26:e5:15:ad:16:77:52:
ae:4a:bb:e2:cb:b4:ac:c1:0d:c9:ca:88:7c:87:63:
23:29:b9:72:7d:f7:32:10:fe:04:78:cf:99:34:71:
b0:e7:f4:e0:e0:bb:b8:1d:fb:ed:fc:ac:49:61:27:
19:c4:f5:67:50:cb:fa:d9:de:4f:f0:0e:4b:56:d8:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EA:72:68:7B:CA:A2:65:30:A4:17:C1:19:49:EF:4B:80:B3:70:4D
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bc:8d:87:f6:1f:0e:42:e8:31:08:a9:52:6f:ce:03:1c:57:
b0:33:62:d2:f4:b8:6a:8a:bf:2f:df:2f:cc:90:89:54:ea:c8:
15:e4:75:f0:df:d9:4f:6b:31:b0:9a:c8:70:94:ec:c6:fa:f0:
7e:14:06:b7:9e:74:0e:10:d9:cb:66:c6:cc:05:65:1b:ed:4b:
32:56:26:96:71:6a:e6:da:0d:46:c8:47:2f:6c:7c:6c:b4:41:
3f:50:a3:8a:ee:b8:32:c3:94:73:55:63:21:31:c3:0d:99:93:
0f:2c:61:ee:12:cd:d6:47:e4:dd:fc:f4:80:08:d9:47:c0:f1:
00:2b:bc:3f:22:96:76:78:57:e0:12:e9:ea:ac:66:b8:f6:93:
da:e0:fc:85:de:4f:60:d8:11:4e:3a:c2:6d:dd:13:08:67:16:
a7:d5:65:24:09:28:2a:09:d5:71:06:2a:7a:0b:5e:bd:9b:c8:
2f:3a:e8:24:5f:ec:be:69:2d:06:37:aa:de:a1:90:30:35:b1:
41:91:c7:b1:56:98:00:1a:c2:9f:d4:7d:79:81:2a:43:80:dd:
27:7e:42:35:db:d6:b0:0d:2b:d9:1a:c3:31:4c:32:bf:86:bd:
c5:4b:0f:36:70:16:0f:b9:5d:0c:2c:61:66:db:e0:bb:13:c6:
84:04:10:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDdQxQPt9e5ubQFzLheCc3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTM3Mjg1ZWFhNjIzMTBiYzllNzcyYjQ5M2Q5ZDYyYmE4
YTc5MzgwHhcNMjYxMDI4MTcwMDQ4WhcNMjYxMDI5MTcwMDQ4WjAzMTEwLwYDVQQD
EyhiZmVhNzI2ODdiY2FhMjY1MzBhNDE3YzExOTQ5ZWY0YjgwYjM3MDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztxEubiCsHP36dA0Yevyz1Bay9V3
nf8c6FwxyCDbyPRayJSOM5pkGlZuDZySNFqT1DfYyt7Ggr0/QpX5z1I0fBz5vcdA
Fp8KwNJczPeCa5S41cFecGHQAs/O8RQf+9LVD6kDUM7548NNqoKGBawWETBimvuk
D1BLswCKDAPZuEfS6ClpgjnAQRbTCABRy5kBbSfa5I8qiE7xJ7RuFdcHET9c8p2D
MjG+NPBlOSrEDdyc69pfRZReTFiKgyblFa0Wd1KuSrviy7SswQ3Jyoh8h2MjKbly
ffcyEP4EeM+ZNHGw5/Tg4Lu4Hfvt/KxJYScZxPVnUMv62d5P8A5LVtjVYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/qcmh7yqJlMKQXwRlJ70uAs3BNMB8GA1UdIwQY
MBaAFCDjcoXqpiMQvJ53K0k9nWK6ink4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9OeWhlcW1JeEM4bm5jclNUMmRZcnFLZVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xNzdmMWQtYWMzOS00YTlkLTk0MWQt
ZmE4ZDhjYTk0OTViLzEvSU9OeWhlcW1JeEM4bm5jclNUMmRZcnFLZVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xNzdmMWQtYWMzOS00YTlkLTk0MWQtZmE4ZDhjYTk0OTVi
LzEvSU9OeWhlcW1JeEM4bm5jclNUMmRZcnFLZVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF7yNh/Yf
DkLoMQipUm/OAxxXsDNi0vS4aoq/L98vzJCJVOrIFeR18N/ZT2sxsJrIcJTsxvrw
fhQGt550DhDZy2bGzAVlG+1LMlYmlnFq5toNRshHL2x8bLRBP1Cjiu64MsOUc1Vj
ITHDDZmTDyxh7hLN1kfk3fz0gAjZR8DxACu8PyKWdnhX4BLp6qxmuPaT2uD8hd5P
YNgRTjrCbd0TCGcWp9VlJAkoKgnVcQYqegtevZvILzroJF/svmktBjeq3qGQMDWx
QZHHsVaYABrCn9R9eYEqQ4DdJ35CNdvWsA0r2RrDMUwyv4a9xUsPNnAWD7ldDCxh
ZtvguxPGhAQQAw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 22:47:51 2026 by rpki-client