Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File: 85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier: 1QC1f3ko6+1XSYUSr541JxBxTD3wqQL1EGOVcyJS5dg=
Subject key identifier: A0:47:B7:3C:65:8E:31:34:D8:3C:22:0E:89:2C:C9:0A:F7:D5:8C:C5
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 01A170CA2DE811F4FD06B8F3FB1CDE6A0823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number: 1ABE
Signing time: Sun 25 Oct 2026 02:01:00 +0000
Manifest this update: Sun 25 Oct 2026 02:01:00 +0000
Manifest next update: Mon 26 Oct 2026 02:01:00 +0000
Files and hashes: 1: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (hash: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ=)
2: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: 9G2Vkpw2R8XtIwXGxJEw/xcqc4KojkYTtBN5ohV9eyM=)
3: tZjW0PJX2KzKZhqd-IvCr2S66XA.roa (hash: 7bMA6kUNG6YTWVlD3a7zH0NzQxfAjb1JxS2t14+Bg1s=)
4: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (hash: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:ca:2d:e8:11:f4:fd:06:b8:f3:fb:1c:de:6a:08:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Oct 25 02:01:00 2026 GMT
Not After : Oct 26 02:01:00 2026 GMT
Subject: CN=a047b73c658e3134d83c220e892cc90af7d58cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:72:56:e7:3e:f6:95:4a:50:27:b1:45:0e:
2a:55:a4:43:a0:5e:30:21:10:64:ac:bf:d2:d9:88:
3e:f7:51:fb:5a:60:e5:fd:e9:98:9d:ea:79:36:9c:
20:8c:f9:ac:97:bd:58:59:34:ce:43:ca:b1:8f:bf:
7f:af:89:fd:2c:0c:f4:05:56:ef:1d:ec:5a:83:28:
f4:ec:6d:e9:91:a0:7c:28:55:ef:2c:3b:a4:da:8f:
00:ca:7a:39:4b:d3:28:db:a5:fe:07:4a:4c:dd:43:
8a:62:90:23:13:32:93:9c:75:09:6a:9d:70:cb:b8:
ca:9f:19:ca:67:f0:3a:77:93:e6:22:ff:50:84:05:
8e:06:49:ca:bf:91:3f:d1:b8:7e:63:8c:04:f9:8b:
ac:c1:7d:31:c0:5e:11:59:dc:72:2d:88:d6:f3:3d:
c0:ca:43:38:e2:51:37:ed:45:27:8f:82:b8:f1:8e:
ae:9d:a5:ba:b4:2c:48:9b:60:5a:fd:87:1a:88:64:
ae:1d:24:4d:e5:25:83:65:35:7f:eb:f0:e9:9f:a4:
2f:f0:e1:32:89:e7:3f:c7:21:54:f9:87:25:bc:a6:
b7:aa:00:09:a2:3f:18:9e:f0:48:cc:64:3d:94:9f:
49:5d:82:b0:e7:63:44:b1:ad:d9:96:43:dd:29:a2:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:47:B7:3C:65:8E:31:34:D8:3C:22:0E:89:2C:C9:0A:F7:D5:8C:C5
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e4:82:e3:d4:2c:7b:0c:f5:09:c2:00:93:ce:e1:bf:b8:8b:
ed:0d:b7:97:b6:e7:03:77:11:23:23:b6:f1:1e:b0:ad:d9:11:
e7:cc:aa:f9:a8:52:2f:36:90:b1:f0:02:3e:d3:49:ef:0c:4e:
6b:49:c0:a7:51:9e:31:50:c6:e7:29:08:fd:b3:95:78:00:d8:
98:e2:c3:8c:d0:d4:8d:de:a8:63:64:c3:6d:14:fb:17:83:77:
be:b9:6b:fd:1e:92:36:c4:35:82:29:1a:68:52:72:1f:52:eb:
e9:13:4b:f4:a4:55:e3:f6:c3:fa:99:2c:94:c6:17:02:43:03:
92:61:92:51:90:88:65:cb:77:aa:2a:fd:be:fa:60:67:a5:ae:
52:8e:80:9d:d3:50:9d:cf:3c:4f:11:d1:94:0a:6f:8d:84:7c:
44:6e:10:93:7a:36:8f:ca:32:45:96:79:9d:84:a0:32:09:c1:
1f:c1:2e:6e:52:1e:91:d5:c0:03:d4:b7:d9:95:ec:a1:7d:40:
37:82:d9:cb:a2:1a:54:cf:be:d8:41:80:a1:0f:6c:6f:6d:87:
dc:34:47:bd:a0:3b:67:62:4c:4a:a4:ac:24:01:de:95:29:05:
db:1d:38:52:41:6a:2c:ac:c0:cb:c7:46:0e:bc:bf:e4:af:c6:
bb:be:fc:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFwyi3oEfT9Brjz+xzeaggjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2
NTM5YzgwHhcNMjYxMDI1MDIwMTAwWhcNMjYxMDI2MDIwMTAwWjAzMTEwLwYDVQQD
EyhhMDQ3YjczYzY1OGUzMTM0ZDgzYzIyMGU4OTJjYzkwYWY3ZDU4Y2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvdyVuc+9pVKUCexRQ4qVaRDoF4w
IRBkrL/S2Yg+91H7WmDl/emYnep5NpwgjPmsl71YWTTOQ8qxj79/r4n9LAz0BVbv
Hexagyj07G3pkaB8KFXvLDuk2o8Ayno5S9Mo26X+B0pM3UOKYpAjEzKTnHUJap1w
y7jKnxnKZ/A6d5PmIv9QhAWOBknKv5E/0bh+Y4wE+YuswX0xwF4RWdxyLYjW8z3A
ykM44lE37UUnj4K48Y6unaW6tCxIm2Ba/YcaiGSuHSRN5SWDZTV/6/Dpn6Qv8OEy
iec/xyFU+YclvKa3qgAJoj8YnvBIzGQ9lJ9JXYKw52NEsa3ZlkPdKaIvjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBHtzxljjE02DwiDoksyQr31YzFMB8GA1UdIwQY
MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt
ZjI2NjRkMTkyMWQzLzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz
LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuSC49Qs
ewz1CcIAk87hv7iL7Q23l7bnA3cRIyO28R6wrdkR58yq+ahSLzaQsfACPtNJ7wxO
a0nAp1GeMVDG5ykI/bOVeADYmOLDjNDUjd6oY2TDbRT7F4N3vrlr/R6SNsQ1gika
aFJyH1Lr6RNL9KRV4/bD+pkslMYXAkMDkmGSUZCIZct3qir9vvpgZ6WuUo6AndNQ
nc88TxHRlApvjYR8RG4Qk3o2j8oyRZZ5nYSgMgnBH8EublIekdXAA9S32ZXsoX1A
N4LZy6IaVM++2EGAoQ9sb22H3DRHvaA7Z2JMSqSsJAHelSkF2x04UkFqLKzAy8dG
Dry/5K/Gu778uQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 09:14:49 2026 by rpki-client