Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File: cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier: 0TPjm1le8IV+HT6SU3wWE0bZQhztcWdWXZTnM5cZauc=
Subject key identifier: 99:A4:6B:AC:72:4D:46:7D:8D:84:18:EB:67:A9:DD:6F:0F:AE:6D:CC
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer: /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial: 01A15B54F9158C46E77AB550628B390B968F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number: 1AB4
Signing time: Tue 20 Oct 2026 22:00:57 +0000
Manifest this update: Tue 20 Oct 2026 22:00:57 +0000
Manifest next update: Wed 21 Oct 2026 22:00:57 +0000
Files and hashes: 1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: OY22nKbXOVkUfhhflbaCvuhxG03DX3EPUSbWXdo12Io=)
2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:54:f9:15:8c:46:e7:7a:b5:50:62:8b:39:0b:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
Validity
Not Before: Oct 20 22:00:57 2026 GMT
Not After : Oct 21 22:00:57 2026 GMT
Subject: CN=99a46bac724d467d8d8418eb67a9dd6f0fae6dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:23:8b:87:32:07:21:92:f4:7f:c7:45:ee:
4c:d6:82:8b:f0:dd:52:69:d9:9e:8a:e3:7d:8f:a2:
07:c2:f9:4f:ab:06:c4:3f:55:c6:be:cf:63:bc:25:
5f:8f:9b:11:7c:9b:e6:da:84:c1:a1:87:33:1d:0f:
61:cd:fc:48:94:0f:f7:14:ad:b7:66:e7:ff:d4:90:
cb:1b:70:a0:0b:5f:e9:72:de:da:0c:5d:9a:73:ea:
7e:80:1d:18:98:f4:40:31:73:39:36:35:5d:f3:98:
d2:77:26:d1:8c:f5:40:d1:49:d9:bf:db:a9:f8:bc:
2e:9d:0e:58:a6:0d:f8:4c:cb:e9:6b:d2:f2:a6:d3:
7d:d4:6a:b6:e9:44:44:be:9c:8d:2b:ae:4f:b9:f2:
62:7a:67:e6:b9:d1:0b:00:29:8a:c6:78:14:f3:92:
ca:05:0e:77:e6:c6:cf:e6:ff:ed:41:1c:52:be:7e:
54:08:9e:b8:22:bc:d8:ef:70:8c:86:06:00:92:3b:
a1:f6:e8:ec:cc:aa:64:76:75:35:ef:de:a0:67:69:
4a:bb:df:bb:e6:a4:7f:ad:25:59:6c:6b:98:af:9d:
10:a7:52:37:cf:d5:21:bd:5b:78:0b:5a:f3:d8:f7:
21:35:da:09:3a:21:47:7d:70:de:7f:49:82:27:98:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:6B:AC:72:4D:46:7D:8D:84:18:EB:67:A9:DD:6F:0F:AE:6D:CC
X509v3 Authority Key Identifier:
keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f6:22:3d:46:b8:21:27:bf:47:a4:3a:1b:a0:a3:2b:7d:ae:
f0:a9:e4:b6:bc:28:f3:fb:4f:02:36:c6:c5:36:f3:79:53:41:
c3:92:4f:49:ca:b8:cd:0a:d3:fc:e6:df:76:db:9f:a5:25:11:
b6:ba:82:7d:68:98:17:f4:9f:69:5f:c1:21:b4:7a:12:e3:3f:
6e:c0:cb:54:c9:69:fe:14:3a:8b:9b:f0:a0:4d:6f:b0:1c:db:
ee:2b:1e:79:f9:a4:7e:22:d9:f3:d3:23:5e:69:6d:d6:8d:3f:
02:27:f5:dd:77:ee:37:c3:d7:01:b6:8f:e1:c6:2f:86:d3:8e:
68:3b:5c:09:cb:47:8b:4d:89:6b:1e:f5:97:a4:fe:0a:40:20:
68:fa:31:4a:39:e8:1e:37:36:04:dc:ac:b8:e6:d5:ac:6d:42:
ff:e6:b2:69:90:9c:e6:be:8e:d1:e4:b9:9e:5d:60:c9:9c:17:
e6:ca:9a:b9:79:8a:9a:60:6f:9f:1f:35:cd:ee:df:98:25:c7:
77:13:fb:bc:52:35:1a:cb:3c:73:0d:94:ff:cf:71:04:04:e4:
d4:e0:e3:78:50:88:ee:32:07:b3:5f:07:38:62:32:9f:38:06:
0f:40:a0:30:20:6d:04:e6:12:14:8c:a7:29:ba:0f:ee:87:35:
fe:7c:fd:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFbVPkVjEbnerVQYos5C5aPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTNiMDI5NGQzYzhkYjE1MzA2YWIxMDlkNTA2ZGE3NGFl
NzA5NzkwHhcNMjYxMDIwMjIwMDU3WhcNMjYxMDIxMjIwMDU3WjAzMTEwLwYDVQQD
Eyg5OWE0NmJhYzcyNGQ0NjdkOGQ4NDE4ZWI2N2E5ZGQ2ZjBmYWU2ZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQQji4cyByGS9H/HRe5M1oKL8N1S
admeiuN9j6IHwvlPqwbEP1XGvs9jvCVfj5sRfJvm2oTBoYczHQ9hzfxIlA/3FK23
Zuf/1JDLG3CgC1/pct7aDF2ac+p+gB0YmPRAMXM5NjVd85jSdybRjPVA0UnZv9up
+LwunQ5Ypg34TMvpa9LyptN91Gq26UREvpyNK65PufJiemfmudELACmKxngU85LK
BQ535sbP5v/tQRxSvn5UCJ64IrzY73CMhgYAkjuh9ujszKpkdnU1796gZ2lKu9+7
5qR/rSVZbGuYr50Qp1I3z9UhvVt4C1rz2PchNdoJOiFHfXDef0mCJ5hO1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmka6xyTUZ9jYQY62ep3W8Prm3MMB8GA1UdIwQY
MBaAFHFTsClNPI2xUwarEJ1QbadK5wl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjIt
MjI5NGNkZGE2YTQwLzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83NjZlMTItOWEwOS00NTUzLThmNjItMjI5NGNkZGE2YTQw
LzEvY1ZPd0tVMDhqYkZUQnFzUW5WQnRwMHJuQ1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/YiPUa4
ISe/R6Q6G6CjK32u8Knktrwo8/tPAjbGxTbzeVNBw5JPScq4zQrT/ObfdtufpSUR
trqCfWiYF/SfaV/BIbR6EuM/bsDLVMlp/hQ6i5vwoE1vsBzb7iseefmkfiLZ89Mj
Xmlt1o0/Aif13XfuN8PXAbaP4cYvhtOOaDtcCctHi02Jax71l6T+CkAgaPoxSjno
Hjc2BNysuObVrG1C/+ayaZCc5r6O0eS5nl1gyZwX5sqauXmKmmBvnx81ze7fmCXH
dxP7vFI1Gss8cw2U/89xBATk1ODjeFCI7jIHs18HOGIynzgGD0CgMCBtBOYSFIyn
KboP7oc1/nz9IQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 04:38:55 2026 by rpki-client