Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: VzkVNVDeiHhLXQlXufgeR1zWLQ6NN4Dy28n7TVDtiMw=
Subject key identifier: F9:A9:2A:D4:DD:12:A4:50:76:9F:28:04:B6:23:60:F2:8E:5F:61:70
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 01A17D3C67B80BF254898310F00A7F2BDA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 12:01:13 +0000
Manifest this update: Tue 27 Oct 2026 12:01:13 +0000
Manifest next update: Wed 28 Oct 2026 12:01:13 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: 9JnmNBHowa2XATHVtUNNYI3VfFNLmOsV348YkhrDRT0=)
2: m-OH61lf9VVgWjii0PINezzjttE.roa (hash: 2GsJyhthbzFVpryryMCfZ+0hcAAlxYfWmqigOWWbj9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:67:b8:0b:f2:54:89:83:10:f0:0a:7f:2b:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Oct 27 12:01:13 2026 GMT
Not After : Oct 28 12:01:13 2026 GMT
Subject: CN=f9a92ad4dd12a450769f2804b62360f28e5f6170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:76:98:c0:c3:73:04:4c:97:b3:d3:11:cb:a9:
2b:c4:aa:3e:37:02:71:fc:6a:b2:f9:d4:34:ba:52:
6f:18:c1:d2:b6:e5:da:e9:4c:ee:ed:b1:31:69:61:
5c:99:2a:ee:e2:43:a9:e8:d0:ef:a5:f7:6b:a5:60:
e0:bd:e9:b2:c5:1f:01:a7:87:7f:80:39:9c:d1:00:
21:90:cf:25:3f:05:30:5a:fc:4f:8b:13:6f:6d:b7:
ef:c1:9e:5c:04:62:db:07:a9:99:06:18:4e:e6:2c:
e8:6d:02:13:6b:1d:73:a8:85:a1:2b:d3:42:a4:f1:
d3:d9:66:3a:aa:d8:74:7a:6a:26:9a:91:11:d5:55:
e0:a7:46:3f:62:6a:76:10:88:1a:a1:ba:e4:8f:33:
b1:90:57:b4:d0:f1:8d:79:75:9f:d6:80:d0:c4:11:
4a:66:82:6c:bb:e0:21:29:14:b5:bb:e1:4e:6a:54:
9b:93:d4:16:32:25:fa:14:06:97:d9:ac:d8:2a:4b:
9f:27:45:22:9b:f5:cf:25:0c:70:a6:1b:79:e8:ca:
23:7c:4a:64:5f:f3:03:92:b5:3e:bf:a1:34:ff:96:
55:d2:55:8a:3f:90:86:44:fd:5f:3b:f7:d4:cd:0f:
f8:f5:50:08:38:53:d7:38:f4:66:22:f3:99:8b:f9:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A9:2A:D4:DD:12:A4:50:76:9F:28:04:B6:23:60:F2:8E:5F:61:70
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:2d:ef:91:4a:33:f3:24:2e:76:b7:b2:8c:29:56:ba:b3:ae:
7c:05:f7:75:dd:9a:3c:6d:dc:8b:e3:67:3e:78:7e:90:7f:c9:
af:9b:0b:4a:b9:a1:97:f9:f4:16:a5:52:9d:89:6a:e0:a9:07:
7f:39:24:2b:13:d0:60:c2:46:11:88:8e:11:8f:a1:60:90:0f:
32:d9:b9:ec:25:4c:6c:a4:3e:47:e2:40:0d:74:9c:12:51:f5:
60:28:0f:a0:86:40:95:49:85:26:7c:e0:4e:db:fc:e0:5e:d5:
c5:b4:4a:66:e0:80:b3:66:0b:2e:15:42:dd:d9:d1:2f:20:de:
53:8c:ba:58:62:d3:4d:f8:99:c5:21:e5:43:89:d9:b9:3b:29:
8b:14:d8:2b:26:7f:7f:62:0a:dd:00:56:df:10:07:73:7b:53:
23:9b:93:fb:8a:19:f2:9a:fc:39:46:ff:7e:2e:09:dc:89:21:
b2:ab:c7:88:73:7c:f6:02:14:82:1f:25:8b:3e:61:8c:07:36:
bf:4f:09:25:f5:64:28:e3:df:f0:1d:7b:9f:7e:f2:2b:5a:41:
0f:27:94:a8:eb:43:6a:b2:c6:27:ab:03:1c:b5:fa:a5:4b:28:
38:c9:b4:5c:48:ed:62:7f:c6:fd:d4:81:8a:21:26:0e:2f:29:
b2:b7:65:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PGe4C/JUiYMQ8Ap/K9o5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDJhYjE1NmQ1YWUxNTNhZDE2NTI4ZTg3ZDljODQ3OWRj
MGE0YTUwHhcNMjYxMDI3MTIwMTEzWhcNMjYxMDI4MTIwMTEzWjAzMTEwLwYDVQQD
EyhmOWE5MmFkNGRkMTJhNDUwNzY5ZjI4MDRiNjIzNjBmMjhlNWY2MTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHaYwMNzBEyXs9MRy6krxKo+NwJx
/Gqy+dQ0ulJvGMHStuXa6Uzu7bExaWFcmSru4kOp6NDvpfdrpWDgvemyxR8Bp4d/
gDmc0QAhkM8lPwUwWvxPixNvbbfvwZ5cBGLbB6mZBhhO5izobQITax1zqIWhK9NC
pPHT2WY6qth0emommpER1VXgp0Y/Ymp2EIgaobrkjzOxkFe00PGNeXWf1oDQxBFK
ZoJsu+AhKRS1u+FOalSbk9QWMiX6FAaX2azYKkufJ0Uim/XPJQxwpht56MojfEpk
X/MDkrU+v6E0/5ZV0lWKP5CGRP1fO/fUzQ/49VAIOFPXOPRmIvOZi/mXRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmpKtTdEqRQdp8oBLYjYPKOX2FwMB8GA1UdIwQY
MBaAFNNCqxVtWuFTrRZSjofZyEedwKSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUt
MDgxYTYzN2Y3MDNlLzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yNjM0NDctMGM4MC00Y2RhLWI5MTUtMDgxYTYzN2Y3MDNl
LzEvMDBLckZXMWE0Vk90RmxLT2g5bklSNTNBcEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPC3vkUoz
8yQudreyjClWurOufAX3dd2aPG3ci+NnPnh+kH/Jr5sLSrmhl/n0FqVSnYlq4KkH
fzkkKxPQYMJGEYiOEY+hYJAPMtm57CVMbKQ+R+JADXScElH1YCgPoIZAlUmFJnzg
Ttv84F7VxbRKZuCAs2YLLhVC3dnRLyDeU4y6WGLTTfiZxSHlQ4nZuTspixTYKyZ/
f2IK3QBW3xAHc3tTI5uT+4oZ8pr8OUb/fi4J3IkhsqvHiHN89gIUgh8liz5hjAc2
v08JJfVkKOPf8B17n37yK1pBDyeUqOtDarLGJ6sDHLX6pUsoOMm0XEjtYn/G/dSB
iiEmDi8psrdlgA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 21:11:39 2026 by rpki-client