Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: lQ2vZ0ImVvLO69JtblcXCXZIka2KFuDlS7+fjsgSUu0=
Subject key identifier: C4:D5:EB:FB:DF:5E:AE:2D:56:29:93:F1:E3:0D:D3:0F:A9:DE:23:BA
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 01A17326851D194002E31D824BA359DF65F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 1AC7
Signing time: Sun 25 Oct 2026 13:01:06 +0000
Manifest this update: Sun 25 Oct 2026 13:01:06 +0000
Manifest next update: Mon 26 Oct 2026 13:01:06 +0000
Files and hashes: 1: JWU_Eybq_voKppgJUuEJOKd0rVU.roa (hash: njhB/xlo+7JtkXiroETjNYgdxqkXiy6zH7cizTgQk+0=)
2: uEzr34GI2Dr5hwhEVt4xZfPC8EI.roa (hash: kGeEk7OkD0P+nD/81UEoWaKV/DOV/0iCVS4vvfQK9NA=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: HpJ6WecT4WLvTNDsOO5OLejBR2pKHxt/ibgBZPczuow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:85:1d:19:40:02:e3:1d:82:4b:a3:59:df:65:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Oct 25 13:01:06 2026 GMT
Not After : Oct 26 13:01:06 2026 GMT
Subject: CN=c4d5ebfbdf5eae2d562993f1e30dd30fa9de23ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:60:d1:40:20:8d:42:fa:5d:db:cc:37:0c:
57:27:11:66:9c:d4:6f:26:45:76:f4:d8:cf:a5:47:
7d:e5:09:9a:83:c8:36:43:56:6c:1f:cf:bc:c6:0f:
2e:89:6e:dc:0b:7a:24:7c:c9:3b:57:df:1b:05:09:
e9:af:27:c8:b3:44:d1:e6:9c:8a:da:8c:53:fd:16:
3f:26:3a:b1:96:f8:d9:b9:ec:70:d0:a1:e1:49:0b:
94:51:c9:d1:44:ca:91:17:ad:5b:2c:a5:6e:ad:7a:
05:6d:0a:3b:18:2e:8f:11:b8:99:b7:49:93:d2:64:
a2:3f:fa:72:8c:f7:b7:6a:46:11:1c:85:5f:19:53:
6d:b0:f8:e8:b6:cb:13:cb:15:53:34:e6:86:5c:ca:
cb:59:27:bc:7d:7f:6a:91:d2:ab:11:98:fa:8f:ed:
e5:f1:03:e4:9d:cf:1c:a9:d4:bf:a4:49:51:8e:b2:
95:62:f8:65:3c:38:b6:08:ec:f3:81:2f:e5:c5:ab:
ec:f3:20:48:f6:bd:b4:1d:a8:5d:e5:2a:dc:5a:fd:
2d:e1:1a:b8:40:d8:c5:67:f2:0e:ea:1d:65:19:5a:
7f:6e:99:4b:a7:ed:89:94:dc:55:f1:96:0f:7a:f3:
55:21:d7:cc:5b:ca:5f:b9:3f:55:cd:a6:75:f8:65:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D5:EB:FB:DF:5E:AE:2D:56:29:93:F1:E3:0D:D3:0F:A9:DE:23:BA
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8b:a7:1b:53:45:d2:2b:be:fb:59:1d:e8:db:4d:4f:0e:bf:
60:fb:86:3b:1d:ac:17:5a:fa:9d:92:11:7a:a1:da:54:08:da:
5d:d9:fb:f2:da:c2:b0:ad:49:73:66:bf:a7:a1:74:4d:c7:65:
c2:77:6b:4b:e6:0d:18:4f:30:18:8b:31:53:47:e5:8a:4f:bc:
2f:84:1a:37:5a:fe:0e:eb:e1:b6:69:ad:93:96:69:9f:35:86:
7f:3f:43:92:68:f0:a1:fa:4b:e6:5a:4d:48:4f:c1:fa:e3:be:
f8:9a:f7:7a:ce:40:51:33:33:9a:f5:2d:75:ad:c4:96:7d:ad:
70:f1:e5:4a:2f:50:8f:8f:38:4a:38:ed:f2:52:ac:a3:59:0b:
fc:43:ce:58:a5:b9:70:55:2a:77:5b:5f:3a:4d:d6:42:c0:e5:
fb:d4:f6:a7:cf:93:d4:13:28:00:66:1d:39:a4:48:e1:60:3e:
db:9f:df:e6:7c:f1:03:65:ae:c9:f1:ea:c8:a4:fe:7b:e5:b6:
f7:ea:e0:c9:94:a0:65:2e:01:58:42:05:af:24:ef:97:2d:aa:
bd:2f:4d:5c:11:d6:45:c7:d1:b5:73:b8:e2:4b:b4:db:6b:14:
c2:4f:a7:04:00:ae:13:bf:f0:23:55:b0:1a:09:ab:14:83:a3:
7c:b7:e6:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFzJoUdGUAC4x2CS6NZ32X1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTZmYzc2OGFkNDdiOTY4ZTBhMjU5ZmVjYzhhM2RhMzJm
YWM1ZWEwHhcNMjYxMDI1MTMwMTA2WhcNMjYxMDI2MTMwMTA2WjAzMTEwLwYDVQQD
EyhjNGQ1ZWJmYmRmNWVhZTJkNTYyOTkzZjFlMzBkZDMwZmE5ZGUyM2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaNg0UAgjUL6XdvMNwxXJxFmnNRv
JkV29NjPpUd95Qmag8g2Q1ZsH8+8xg8uiW7cC3okfMk7V98bBQnpryfIs0TR5pyK
2oxT/RY/JjqxlvjZuexw0KHhSQuUUcnRRMqRF61bLKVurXoFbQo7GC6PEbiZt0mT
0mSiP/pyjPe3akYRHIVfGVNtsPjotssTyxVTNOaGXMrLWSe8fX9qkdKrEZj6j+3l
8QPknc8cqdS/pElRjrKVYvhlPDi2COzzgS/lxavs8yBI9r20Hahd5SrcWv0t4Rq4
QNjFZ/IO6h1lGVp/bplLp+2JlNxV8ZYPevNVIdfMW8pfuT9VzaZ1+GURBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTV6/vfXq4tVimT8eMN0w+p3iO6MB8GA1UdIwQY
MBaAFL/m/HaK1HuWjgoln+zIo9oy+sXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMt
ZWE1N2NiZTM2ODExLzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8wMGM3MTEtMGMyOS00MzAxLTk0YmMtZWE1N2NiZTM2ODEx
LzEvdi1iOGRvclVlNWFPQ2lXZjdNaWoyakw2eGVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnounG1NF
0iu++1kd6NtNTw6/YPuGOx2sF1r6nZIReqHaVAjaXdn78trCsK1Jc2a/p6F0Tcdl
wndrS+YNGE8wGIsxU0flik+8L4QaN1r+Duvhtmmtk5ZpnzWGfz9DkmjwofpL5lpN
SE/B+uO++Jr3es5AUTMzmvUtda3Eln2tcPHlSi9Qj484Sjjt8lKso1kL/EPOWKW5
cFUqd1tfOk3WQsDl+9T2p8+T1BMoAGYdOaRI4WA+25/f5nzxA2WuyfHqyKT+e+W2
9+rgyZSgZS4BWEIFryTvly2qvS9NXBHWRcfRtXO44ku022sUwk+nBACuE7/wI1Ww
GgmrFIOjfLfmTg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 22:35:10 2026 by rpki-client