Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: PKDQ4Z/Ihh1bu9Z+70DAzmAVG0fR1/IxZZnmaAvhhfc=
Subject key identifier: C6:65:F3:D0:D4:B2:EB:78:B7:B7:78:04:53:30:44:64:79:EA:D5:B7
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01A111167D6E50AB0CB8D7F2665D60AD12D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1A55
Signing time: Tue 06 Oct 2026 12:00:48 +0000
Manifest this update: Tue 06 Oct 2026 12:00:48 +0000
Manifest next update: Wed 07 Oct 2026 12:00:48 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: Mi/1K5vnck63kSP32TXHKrFA6VEedfZVlC/xTkzc/tg=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:16:7d:6e:50:ab:0c:b8:d7:f2:66:5d:60:ad:12:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Oct 6 12:00:48 2026 GMT
Not After : Oct 7 12:00:48 2026 GMT
Subject: CN=c665f3d0d4b2eb78b7b778045330446479ead5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0b:71:5e:c6:6e:8c:10:fb:28:68:e0:39:2f:
7a:de:75:9d:48:03:d2:ac:4b:57:3c:02:08:fd:12:
2b:31:2a:13:64:72:c1:2c:52:ff:d8:ec:33:d7:96:
10:70:d3:61:04:6f:c1:ae:79:cd:f9:28:00:4b:23:
ab:26:a2:68:f4:e8:ee:59:a4:92:19:4f:23:5e:65:
02:0c:6e:90:06:4f:3c:d2:3b:cb:60:d9:5a:71:f4:
6b:95:f7:4d:38:ab:ef:d9:8b:bf:20:53:dc:f5:46:
0b:7c:71:12:0b:1e:57:6e:6e:f3:58:a3:19:93:f3:
57:a0:5d:62:94:93:76:d3:41:00:df:a1:7f:e1:a3:
89:1f:78:d6:5e:0a:fe:67:62:a5:2c:c1:6e:23:0b:
f5:16:b4:0a:45:99:84:f1:72:10:95:4d:38:31:ff:
d7:30:12:6e:5b:ef:ef:c7:db:77:fb:39:f3:f8:c6:
4a:26:52:f6:22:12:62:2b:e6:60:87:e3:30:e4:8d:
60:b9:af:a9:17:11:80:35:51:d1:ca:64:c1:bf:42:
e0:d8:92:1d:b8:22:92:9a:a4:51:2c:98:eb:64:81:
3d:09:06:85:7e:9e:01:a9:96:70:84:dd:b3:2a:f8:
8e:2a:a8:29:ec:81:9a:33:3f:57:4e:bd:91:2d:20:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:F3:D0:D4:B2:EB:78:B7:B7:78:04:53:30:44:64:79:EA:D5:B7
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:7f:5d:cf:4f:79:fe:d5:6c:5f:1a:ce:4d:95:f9:9d:97:3d:
b1:46:01:11:87:13:05:a8:f8:dc:92:4d:ff:c0:0b:c9:ab:84:
b4:d0:21:8f:0c:52:e0:50:7e:f7:29:58:55:ff:d9:21:71:58:
fc:7d:92:a9:e6:51:fa:f6:96:2e:b7:e5:ea:5c:ad:cd:2c:85:
48:6b:40:4c:69:9a:0f:83:77:ca:85:bc:ed:c5:bd:38:b1:d7:
e4:90:6b:01:a6:ec:62:61:05:41:3c:35:54:4d:b0:5c:6d:82:
1c:7a:91:da:69:08:f2:05:18:34:81:2a:68:48:16:a5:2c:b4:
e2:3d:ef:f1:a7:01:db:30:a7:aa:37:3e:5c:39:55:10:7a:56:
35:9f:6e:95:b0:a8:0a:2d:4d:3c:69:34:bc:eb:da:6e:36:92:
13:b7:42:74:9c:87:21:de:c2:dc:de:5b:bd:1e:64:c6:44:ad:
28:b8:89:f2:7f:db:03:41:74:07:c7:e3:c1:81:a4:97:b8:9c:
2c:a9:5e:08:c6:94:9c:86:7e:25:a4:f4:8a:7f:32:d9:05:e0:
f6:9a:64:86:26:22:94:3e:0c:b1:c4:c9:d6:0d:bb:1a:26:3a:
6a:69:8a:c5:14:5f:fe:fd:06:ce:0f:85:0d:47:5e:36:56:37:
79:25:35:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERFn1uUKsMuNfyZl1grRLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTk4YjFkMGVjY2NjNGY2ZmYxYTdlN2RiODRiNGJiMmY1
NWIwOGQwHhcNMjYxMDA2MTIwMDQ4WhcNMjYxMDA3MTIwMDQ4WjAzMTEwLwYDVQQD
EyhjNjY1ZjNkMGQ0YjJlYjc4YjdiNzc4MDQ1MzMwNDQ2NDc5ZWFkNWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwtxXsZujBD7KGjgOS963nWdSAPS
rEtXPAII/RIrMSoTZHLBLFL/2Owz15YQcNNhBG/BrnnN+SgASyOrJqJo9OjuWaSS
GU8jXmUCDG6QBk880jvLYNlacfRrlfdNOKvv2Yu/IFPc9UYLfHESCx5Xbm7zWKMZ
k/NXoF1ilJN200EA36F/4aOJH3jWXgr+Z2KlLMFuIwv1FrQKRZmE8XIQlU04Mf/X
MBJuW+/vx9t3+znz+MZKJlL2IhJiK+Zgh+Mw5I1gua+pFxGANVHRymTBv0Lg2JId
uCKSmqRRLJjrZIE9CQaFfp4BqZZwhN2zKviOKqgp7IGaMz9XTr2RLSC8WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZl89DUsut4t7d4BFMwRGR56tW3MB8GA1UdIwQY
MBaAFPypix0OzMxPb/Gn59uEtLsvVbCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzIt
NThmMGYzMjVjMmI4LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85NzFlNzMtZmE4My00NTc5LTg1MzItNThmMGYzMjVjMmI4
LzEvX0ttTEhRN016RTl2OGFmbjI0UzB1eTlWc0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA239dz095
/tVsXxrOTZX5nZc9sUYBEYcTBaj43JJN/8ALyauEtNAhjwxS4FB+9ylYVf/ZIXFY
/H2SqeZR+vaWLrfl6lytzSyFSGtATGmaD4N3yoW87cW9OLHX5JBrAabsYmEFQTw1
VE2wXG2CHHqR2mkI8gUYNIEqaEgWpSy04j3v8acB2zCnqjc+XDlVEHpWNZ9ulbCo
Ci1NPGk0vOvabjaSE7dCdJyHId7C3N5bvR5kxkStKLiJ8n/bA0F0B8fjwYGkl7ic
LKleCMaUnIZ+JaT0in8y2QXg9ppkhiYilD4MscTJ1g27GiY6ammKxRRf/v0Gzg+F
DUdeNlY3eSU1UA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:41 2026 by rpki-client