Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File: R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier: Pdfe/Z5TQOu8/aAwGJO5JT1ur8KJv/FuPNfOgmSQu3g=
Subject key identifier: 89:1A:8E:5D:C8:EE:4B:F7:E3:2D:03:78:D3:11:94:48:84:62:E1:CB
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial: 01A11F4018DBA2476450BDF67A6BA9A0E38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number: 0994
Signing time: Fri 09 Oct 2026 06:00:56 +0000
Manifest this update: Fri 09 Oct 2026 06:00:56 +0000
Manifest next update: Sat 10 Oct 2026 06:00:56 +0000
Files and hashes: 1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: tJk/G6r0EbVMnhKoW1x3U3f8eZkBOIVWro8o4XhUvg8=)
3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:40:18:db:a2:47:64:50:bd:f6:7a:6b:a9:a0:e3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Validity
Not Before: Oct 9 06:00:56 2026 GMT
Not After : Oct 10 06:00:56 2026 GMT
Subject: CN=891a8e5dc8ee4bf7e32d0378d31194488462e1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:fd:f4:d1:fe:8f:41:ed:d3:9d:44:ad:2f:
2f:92:fc:37:ef:85:bb:8e:1b:ee:8c:f1:5f:f4:04:
01:4b:4f:bd:52:10:08:fe:d0:ca:11:e8:05:c1:a7:
bb:fc:82:80:0c:d2:70:83:55:51:84:39:9f:4d:8d:
f5:ab:5b:bc:ab:a4:f7:1d:30:51:66:f7:9c:30:5a:
fd:a7:bf:81:97:8c:f4:f1:93:fc:6f:c0:a1:cf:82:
ba:5b:98:78:97:c7:05:e4:44:d7:3a:c8:e8:21:f5:
fa:1c:4c:8c:6d:5b:6b:ab:85:79:eb:1a:f0:1d:c4:
9e:fc:e1:97:81:f4:76:0c:50:44:73:fd:5d:0f:22:
79:3d:aa:b8:5c:87:59:d9:b7:4d:6a:26:44:d2:aa:
fa:a1:06:2d:8b:b3:02:e3:a4:39:52:01:05:45:61:
6b:32:5f:c1:f4:8a:8e:df:24:9c:5a:87:fa:d2:37:
c2:96:d4:99:d6:d8:16:83:27:f8:f3:53:7f:3a:45:
e9:11:c2:55:b0:4d:7a:23:73:e2:a1:b5:7e:3b:b0:
20:68:ac:75:f3:a6:42:93:7a:6d:d2:a6:eb:2b:52:
3e:37:c9:cb:f8:b6:05:45:62:f6:15:a4:22:db:fe:
bc:bb:a4:73:e1:3c:85:5f:49:cc:9c:eb:db:71:21:
34:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:8E:5D:C8:EE:4B:F7:E3:2D:03:78:D3:11:94:48:84:62:E1:CB
X509v3 Authority Key Identifier:
keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:21:d4:49:0b:f5:f1:bb:67:c5:03:92:2d:73:e9:75:2f:e4:
75:fa:79:de:36:26:50:e7:47:ff:ba:22:dc:b7:a4:35:e0:64:
38:e4:76:0e:97:9b:9a:db:f6:71:76:59:71:4f:4d:e2:4d:b8:
cd:70:17:7a:92:c5:1c:da:86:80:f7:dc:6c:14:4e:f7:45:c2:
99:32:14:a7:28:16:82:2f:d9:bb:76:eb:22:bc:bb:a5:27:d9:
f2:ab:2a:45:60:43:e5:ee:37:22:c4:d1:c6:9f:ec:d2:05:f1:
20:55:5c:02:6a:bb:40:80:2b:ec:91:50:e2:11:4b:d7:d6:a2:
d6:76:76:f6:46:9e:49:e9:84:b9:39:f7:3b:9a:6d:5a:b3:33:
62:13:52:29:25:4c:33:b4:f1:a6:f2:49:d4:d4:f7:ce:06:1a:
12:7a:b3:a7:f7:e4:df:a0:43:e5:83:7c:cc:aa:4c:67:ac:62:
ba:74:19:91:e9:0a:ba:ff:40:5f:d6:eb:46:3f:46:70:41:a4:
6d:88:cd:5d:26:58:32:d6:fd:b5:f3:27:8d:76:2f:cb:d7:4f:
53:20:08:36:2c:da:5c:33:19:7c:bc:4b:06:56:84:f5:97:ce:
33:5d:a4:e1:ba:d3:48:1b:85:e3:9e:97:a6:a7:a3:a8:fe:24:
d0:71:27:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEfQBjbokdkUL32emupoOONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi
ZDNjNmUwHhcNMjYxMDA5MDYwMDU2WhcNMjYxMDEwMDYwMDU2WjAzMTEwLwYDVQQD
Eyg4OTFhOGU1ZGM4ZWU0YmY3ZTMyZDAzNzhkMzExOTQ0ODg0NjJlMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4H99NH+j0Ht051ErS8vkvw374W7
jhvujPFf9AQBS0+9UhAI/tDKEegFwae7/IKADNJwg1VRhDmfTY31q1u8q6T3HTBR
ZvecMFr9p7+Bl4z08ZP8b8Chz4K6W5h4l8cF5ETXOsjoIfX6HEyMbVtrq4V56xrw
HcSe/OGXgfR2DFBEc/1dDyJ5Paq4XIdZ2bdNaiZE0qr6oQYti7MC46Q5UgEFRWFr
Ml/B9IqO3yScWof60jfCltSZ1tgWgyf481N/OkXpEcJVsE16I3PiobV+O7AgaKx1
86ZCk3pt0qbrK1I+N8nL+LYFRWL2FaQi2/68u6Rz4TyFX0nMnOvbcSE0owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkajl3I7kv34y0DeNMRlEiEYuHLMB8GA1UdIwQY
MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt
NTBkNzA5YmZmZWI1LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1
LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoCHUSQv1
8btnxQOSLXPpdS/kdfp53jYmUOdH/7oi3LekNeBkOOR2Dpebmtv2cXZZcU9N4k24
zXAXepLFHNqGgPfcbBRO90XCmTIUpygWgi/Zu3brIry7pSfZ8qsqRWBD5e43IsTR
xp/s0gXxIFVcAmq7QIAr7JFQ4hFL19ai1nZ29kaeSemEuTn3O5ptWrMzYhNSKSVM
M7TxpvJJ1NT3zgYaEnqzp/fk36BD5YN8zKpMZ6xiunQZkekKuv9AX9brRj9GcEGk
bYjNXSZYMtb9tfMnjXYvy9dPUyAINizaXDMZfLxLBlaE9ZfOM12k4brTSBuF456X
pqejqP4k0HEnHQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 12:01:39 2026 by rpki-client