Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
File: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft (raw, json)
Hash identifier: BrI1ObpkhuMjsVcsRG6ykoT7do+e54UOAdBZeyxwgJ0=
Subject key identifier: 56:F3:26:D0:88:3C:05:4A:41:FB:CE:A6:58:CB:90:9F:F0:00:0E:2F
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 01A13D1325687C03325D9B66D976DA0EAB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
Manifest number: 1258
Signing time: Thu 15 Oct 2026 01:00:27 +0000
Manifest this update: Thu 15 Oct 2026 01:00:27 +0000
Manifest next update: Fri 16 Oct 2026 01:00:27 +0000
Files and hashes: 1: 0ZZBNy_4ZfeDGv0GZ4Y6WyBitiY.roa (hash: xrSAqsjvVj4VTaGXTAjpYZq+szPFsolHKq89Y8sv2SY=)
2: C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl (hash: aV3BUQiZqI/WH6maCxLRzhg4Dqxj68ApM0J6WFdOFwU=)
3: HlPf6jt7HgmbuEWgecuG4Sgaorc.roa (hash: j8/ocuESU17xtFvRR6K0O2U6/8pNxL5+xXsijYbdSGQ=)
4: JB8yx2b88cSBO2zP8HmMFflCSbQ.roa (hash: ptfoSvZpsHgOB3p1UFy4y5riUES2ZHub67bxSsiN4pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:25:68:7c:03:32:5d:9b:66:d9:76:da:0e:ab:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Oct 15 01:00:27 2026 GMT
Not After : Oct 16 01:00:27 2026 GMT
Subject: CN=56f326d0883c054a41fbcea658cb909ff0000e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:72:27:51:a0:01:22:a0:72:97:ea:e3:2d:f5:
39:78:b3:25:b4:e3:59:50:74:72:38:de:94:a2:64:
35:f9:25:f6:f8:5e:c0:cf:72:10:48:21:14:b9:f8:
6b:a9:f5:4d:c7:6b:b5:0c:42:bf:69:a2:64:84:cb:
86:70:bd:55:9b:48:a3:df:b7:30:e3:e7:29:a0:36:
09:8c:0c:e4:b6:75:d0:39:24:91:c7:a2:c7:0e:de:
14:75:73:6f:f6:d9:cc:36:37:17:36:7b:ba:c5:07:
03:dc:44:ef:ec:e2:85:cb:ea:02:c9:f4:a1:c8:ed:
19:bf:d5:2f:5e:b2:84:df:36:16:3d:0b:21:82:51:
db:31:ec:7a:31:4c:00:1c:e6:ac:7e:a1:70:82:fb:
0e:08:d3:fc:d3:65:e5:95:6b:19:97:ef:e4:8e:d8:
4b:d2:55:75:b1:e4:1e:0e:3f:f7:e2:35:39:9e:35:
56:21:bd:1d:b0:db:e7:76:87:7b:d4:4c:2c:6e:67:
c8:ea:f8:dc:01:0a:d3:c1:4d:53:8a:e8:8f:8e:da:
e3:e0:ab:11:e0:4f:37:ff:26:68:44:3c:e3:32:c6:
30:0a:55:da:61:85:01:e6:68:5d:53:e9:cc:5e:e4:
7d:69:11:3a:f9:7b:13:cc:fb:0c:82:4a:0a:61:b0:
18:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:26:D0:88:3C:05:4A:41:FB:CE:A6:58:CB:90:9F:F0:00:0E:2F
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5b:55:da:59:d7:73:bf:cd:08:d7:01:7e:0a:87:03:53:89:
0e:b4:36:67:19:53:2a:51:5f:1d:c1:3f:5f:52:45:a9:85:f2:
f5:e6:1a:d0:6e:8f:35:fa:a3:37:01:ac:93:56:e2:20:1e:f4:
37:c5:94:83:7d:4e:17:b8:fc:34:13:2b:78:cb:bd:b0:f7:b0:
a1:94:4c:75:12:38:c3:4a:d4:30:5c:34:47:bf:f5:ab:15:1c:
69:53:70:1f:03:ae:5d:2b:31:d0:74:35:b0:d5:6e:df:61:12:
ef:39:73:e2:e7:f4:e9:58:19:48:b5:94:a2:43:2a:5c:fd:97:
b5:49:52:cf:3a:ad:a1:88:b5:a9:d4:fe:aa:55:07:5b:53:5c:
4a:c5:e5:44:c9:07:fc:4f:43:e4:21:13:fb:9c:8c:bf:a3:23:
21:1d:d9:aa:1b:23:84:f2:6b:fb:9e:f0:78:22:2c:07:76:dc:
c7:ab:ec:fd:d7:a2:87:f7:f8:76:43:b1:a6:f0:68:88:67:b7:
92:d2:3f:e3:58:52:11:68:28:61:62:5e:5f:37:1d:4b:28:d5:
a3:6b:24:53:c2:db:23:66:97:65:bc:38:b7:44:5d:91:10:50:
fa:e4:e9:d4:dc:df:52:3a:e9:58:af:6e:96:8e:27:7f:65:00:
99:e0:88:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9EyVofAMyXZtm2XbaDqsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNzhiMmQzZjYyNzAwZmU2N2U1OTNiNWEzM2QxY2Y5MTc4
OTI1MmYwHhcNMjYxMDE1MDEwMDI3WhcNMjYxMDE2MDEwMDI3WjAzMTEwLwYDVQQD
Eyg1NmYzMjZkMDg4M2MwNTRhNDFmYmNlYTY1OGNiOTA5ZmYwMDAwZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73InUaABIqByl+rjLfU5eLMltONZ
UHRyON6UomQ1+SX2+F7Az3IQSCEUufhrqfVNx2u1DEK/aaJkhMuGcL1Vm0ij37cw
4+cpoDYJjAzktnXQOSSRx6LHDt4UdXNv9tnMNjcXNnu6xQcD3ETv7OKFy+oCyfSh
yO0Zv9UvXrKE3zYWPQshglHbMex6MUwAHOasfqFwgvsOCNP802XllWsZl+/kjthL
0lV1seQeDj/34jU5njVWIb0dsNvndod71EwsbmfI6vjcAQrTwU1TiuiPjtrj4KsR
4E83/yZoRDzjMsYwClXaYYUB5mhdU+nMXuR9aRE6+XsTzPsMgkoKYbAYAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbzJtCIPAVKQfvOpljLkJ/wAA4vMB8GA1UdIwQY
MBaAFAt4stP2JwD+Z+WTtaM9HPkXiSUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEt
NjA3OGVmZDA3ODVlLzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDcwNDctMDgxNi00ODIxLThkZWEtNjA3OGVmZDA3ODVl
LzEvQzNpeTBfWW5BUDVuNVpPMW96MGMtUmVKSlM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIltV2lnX
c7/NCNcBfgqHA1OJDrQ2ZxlTKlFfHcE/X1JFqYXy9eYa0G6PNfqjNwGsk1biIB70
N8WUg31OF7j8NBMreMu9sPewoZRMdRI4w0rUMFw0R7/1qxUcaVNwHwOuXSsx0HQ1
sNVu32ES7zlz4uf06VgZSLWUokMqXP2XtUlSzzqtoYi1qdT+qlUHW1NcSsXlRMkH
/E9D5CET+5yMv6MjIR3ZqhsjhPJr+57weCIsB3bcx6vs/deih/f4dkOxpvBoiGe3
ktI/41hSEWgoYWJeXzcdSyjVo2skU8LbI2aXZbw4t0RdkRBQ+uTp1NzfUjrpWK9u
lo4nf2UAmeCIHA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:48 2026 by rpki-client