Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File: 13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier: oKYp43coZgvV5/uG9P/Cshf6vNtbWhy73D8+u/xSqIo=
Subject key identifier: D2:2C:C3:B3:AC:67:2B:61:97:7E:B9:AC:03:CF:C4:3E:01:A5:CE:08
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer: /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial: 01A18ED52E063D7E755EB9FCF4E85B38F389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number: 1ACE
Signing time: Fri 30 Oct 2026 22:01:37 +0000
Manifest this update: Fri 30 Oct 2026 22:01:37 +0000
Manifest next update: Sat 31 Oct 2026 22:01:37 +0000
Files and hashes: 1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: tkkkI8iy5cj8LNhaXD6ibPu0LaMvVKtWEixda5ESRds=)
2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d5:2e:06:3d:7e:75:5e:b9:fc:f4:e8:5b:38:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Validity
Not Before: Oct 30 22:01:37 2026 GMT
Not After : Oct 31 22:01:37 2026 GMT
Subject: CN=d22cc3b3ac672b61977eb9ac03cfc43e01a5ce08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:2c:5a:18:f9:d2:7a:06:ff:23:d2:11:e8:
c2:59:70:4c:ef:16:34:17:69:c4:50:c6:2f:84:2b:
96:79:8a:bb:88:de:a3:cc:cd:51:2d:1a:ca:18:d4:
ba:b4:40:4b:22:53:8f:60:2e:50:2f:46:a2:20:9a:
84:2d:b8:57:ce:94:46:01:2a:48:b3:d3:1c:46:f0:
c0:26:f1:30:1d:a0:92:a0:01:7a:99:aa:90:15:48:
4d:ff:27:d0:93:39:c2:f6:b0:eb:ac:5d:bc:2e:1d:
65:4a:5e:9c:cb:ba:26:cd:ce:42:fd:7e:10:d2:05:
17:69:9d:ca:73:9a:aa:bc:d8:57:01:a7:97:7a:22:
31:a4:85:15:1b:7b:6b:aa:56:94:70:3a:84:29:a0:
e8:71:21:75:1c:03:b3:48:8a:b2:34:8e:17:c8:4f:
4b:fc:b4:b8:97:79:3a:99:57:7b:a5:46:ed:04:75:
c7:14:9b:00:2a:68:51:78:2d:b3:c6:03:8f:39:e0:
9f:96:1b:f3:ec:83:88:bd:94:39:76:1d:bc:93:44:
6d:e2:45:c1:e1:80:45:d4:32:4b:79:63:1c:b0:14:
d4:12:c5:d7:af:49:fd:e7:70:d5:13:1b:03:bd:ee:
f7:63:40:d6:4a:4c:32:52:23:59:30:43:41:78:4b:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2C:C3:B3:AC:67:2B:61:97:7E:B9:AC:03:CF:C4:3E:01:A5:CE:08
X509v3 Authority Key Identifier:
keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d5:69:ae:f6:4f:d5:87:73:7b:20:10:a9:03:a1:27:ad:48:
8b:e1:14:6d:7e:eb:87:62:8a:96:48:f7:f6:74:42:ae:9b:5e:
e6:7a:f5:28:14:fc:c4:6c:10:dc:53:d9:5d:32:d0:5f:f5:f4:
94:f3:c2:15:1e:9d:64:90:dc:b2:21:c1:59:20:d2:87:61:a2:
90:84:95:86:b8:17:8c:06:10:d4:ba:f1:f7:43:e9:db:78:a2:
2b:8d:fd:b6:a0:f9:e6:53:66:14:96:e5:e6:d7:f5:05:4d:ee:
6e:aa:d4:be:9d:07:7d:2f:6b:f9:c3:cd:0b:48:44:93:31:f9:
fe:ab:8e:b1:9f:72:72:28:03:38:ea:ec:33:d7:5c:78:3a:32:
ae:60:44:9f:b8:ca:0e:e0:8e:93:61:3a:fe:88:a3:ea:83:70:
33:d7:c5:d1:ec:fe:87:5f:12:85:5d:29:f1:dc:ac:d1:37:29:
81:4b:02:69:c9:ec:93:dd:b0:dc:12:0d:24:43:cc:39:7a:c7:
e3:ad:f1:cd:a9:37:94:d6:8c:17:3b:d0:31:f6:49:f5:bc:d5:
48:3f:76:92:94:0c:a6:67:32:db:45:79:46:d7:79:c2:71:09:
5a:b6:7e:93:38:ef:97:02:04:7d:b7:af:3c:14:97:5f:cf:1e:
b5:b8:db:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGO1S4GPX51Xrn89OhbOPOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzZhZTA5YWIxYmM5NGFjZTgzZmE2ZmQzNmFjNTIyODY3
YjkyZWEwHhcNMjYxMDMwMjIwMTM3WhcNMjYxMDMxMjIwMTM3WjAzMTEwLwYDVQQD
EyhkMjJjYzNiM2FjNjcyYjYxOTc3ZWI5YWMwM2NmYzQzZTAxYTVjZTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB4sWhj50noG/yPSEejCWXBM7xY0
F2nEUMYvhCuWeYq7iN6jzM1RLRrKGNS6tEBLIlOPYC5QL0aiIJqELbhXzpRGASpI
s9McRvDAJvEwHaCSoAF6maqQFUhN/yfQkznC9rDrrF28Lh1lSl6cy7omzc5C/X4Q
0gUXaZ3Kc5qqvNhXAaeXeiIxpIUVG3trqlaUcDqEKaDocSF1HAOzSIqyNI4XyE9L
/LS4l3k6mVd7pUbtBHXHFJsAKmhReC2zxgOPOeCflhvz7IOIvZQ5dh28k0Rt4kXB
4YBF1DJLeWMcsBTUEsXXr0n953DVExsDve73Y0DWSkwyUiNZMENBeEs8XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIsw7OsZythl365rAPPxD4Bpc4IMB8GA1UdIwQY
MBaAFNd2rgmrG8lKzoP6b9NqxSKGe5LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEt
OTA4NjQ4YTIwYmM4LzEvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEtOTA4NjQ4YTIwYmM4
LzEvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNVprvZP
1YdzeyAQqQOhJ61Ii+EUbX7rh2KKlkj39nRCrpte5nr1KBT8xGwQ3FPZXTLQX/X0
lPPCFR6dZJDcsiHBWSDSh2GikISVhrgXjAYQ1Lrx90Pp23iiK439tqD55lNmFJbl
5tf1BU3ubqrUvp0HfS9r+cPNC0hEkzH5/quOsZ9ycigDOOrsM9dceDoyrmBEn7jK
DuCOk2E6/oij6oNwM9fF0ez+h18ShV0p8dys0TcpgUsCacnsk92w3BINJEPMOXrH
463xzak3lNaMFzvQMfZJ9bzVSD92kpQMpmcy20V5Rtd5wnEJWrZ+kzjvlwIEfbev
PBSXX88etbjbYQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:44:27 2026 by rpki-client