Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
File: _28m18gsaQh33DwsuSJrqDPXH5g.mft (raw, json)
Hash identifier: /thcjdG6A8YBU+uMXQowovCLdHnxyPDjfApzxmdl27w=
Subject key identifier: 88:C7:43:1A:4A:DE:90:28:D5:33:54:95:B7:60:F1:B6:14:32:94:5F
Authority key identifier: FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
Certificate issuer: /CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Certificate serial: 01A17ADFBA685965660495699B93095795E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
Manifest number: 0204
Signing time: Tue 27 Oct 2026 01:00:44 +0000
Manifest this update: Tue 27 Oct 2026 01:00:44 +0000
Manifest next update: Wed 28 Oct 2026 01:00:44 +0000
Files and hashes: 1: _28m18gsaQh33DwsuSJrqDPXH5g.crl (hash: Q72w/nH2NbA3dvmtskhdhGzLwc04LGvBv54QmWRKAfI=)
2: r3PrgEIeKzFmjmt3ehPNebzdklM.roa (hash: kYXy/2MYPdosdaY9oR/2nCiXwCSlodRD/44n2jwFVoY=)
3: vEurWAAG57x9in4ZKM4WCB7WM2A.asa (hash: xoR21DEaVsvOKNxVYSHBf4kYkxZjstx31TCW4LJF+xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:ba:68:59:65:66:04:95:69:9b:93:09:57:95:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6f26d7c82c690877dc3c2cb9226ba833d71f98
Validity
Not Before: Oct 27 01:00:44 2026 GMT
Not After : Oct 28 01:00:44 2026 GMT
Subject: CN=88c7431a4ade9028d5335495b760f1b61432945f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:9c:6f:61:b3:2c:e1:a9:82:94:52:9c:5f:
08:fc:c1:ca:d5:34:a3:8f:34:dd:62:db:c0:69:65:
47:86:f7:16:5b:98:50:62:68:44:4a:2e:7c:76:46:
92:e1:36:69:8b:0f:f9:77:6a:ee:b9:a5:25:26:0c:
bc:3d:91:e9:ab:5b:e4:d8:5f:0f:97:35:53:97:26:
f2:17:a7:ef:6b:e2:10:7c:b1:f6:00:3c:8e:15:95:
a5:4d:80:a9:68:6f:5b:66:b0:cb:11:f1:b2:35:93:
b3:d2:42:23:9b:da:bc:9d:40:0c:17:64:b1:59:b8:
9d:49:60:45:c3:2d:e3:e3:f0:2a:ef:53:ac:cf:e4:
a5:90:3c:46:2b:6f:6f:25:89:5e:72:f1:a4:41:16:
70:15:5a:b4:7c:88:54:76:f1:9e:6a:4b:7d:34:7e:
f6:2d:f2:a5:b2:2b:7c:fe:61:0a:2e:d9:5e:07:54:
6d:6f:2f:e4:b1:9f:37:ae:da:28:37:03:e2:e2:b9:
2c:96:a0:50:08:d6:b9:02:c5:d4:23:69:d2:48:21:
88:c8:2b:c5:8c:ee:90:84:eb:00:99:86:98:66:cf:
1d:6c:4a:76:dc:c7:d0:40:f2:0c:cc:94:b0:39:c9:
3e:45:6e:75:77:14:94:20:1c:25:0e:fc:d3:05:ec:
fc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:43:1A:4A:DE:90:28:D5:33:54:95:B7:60:F1:B6:14:32:94:5F
X509v3 Authority Key Identifier:
keyid:FF:6F:26:D7:C8:2C:69:08:77:DC:3C:2C:B9:22:6B:A8:33:D7:1F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_28m18gsaQh33DwsuSJrqDPXH5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/da3b69-c814-4569-a54a-6a4682943dfc/1/_28m18gsaQh33DwsuSJrqDPXH5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:80:6a:a8:81:e4:5b:75:07:43:1b:6b:7b:fb:9e:80:be:97:
e5:6e:b4:dc:98:63:f4:d9:66:69:9c:bd:d1:0b:d5:8a:1a:f1:
3d:8e:c5:98:94:4d:d6:8e:dd:b1:5f:f9:70:d4:0c:9d:5a:aa:
8d:57:ff:84:17:68:f8:07:bb:e2:15:d5:d7:37:63:df:8e:c1:
14:b8:d8:d9:17:3f:da:2e:a1:81:fe:42:a9:1c:ee:ef:6c:3c:
a3:1b:9f:ce:a9:f2:2a:fc:5b:b7:6c:ff:30:c9:19:34:80:a9:
e2:1d:88:43:71:d6:c3:19:ef:af:3f:ad:38:e6:0e:11:a7:a5:
ea:19:a3:25:ae:20:8a:63:ce:f7:46:20:dd:51:52:67:86:50:
ea:50:e6:7f:68:fc:4c:45:cb:d0:05:2c:d6:c2:ed:44:4a:4d:
cd:0c:8d:9d:1e:3e:cf:0c:41:e5:72:b6:13:50:47:2b:37:f0:
6e:1d:2f:81:ee:ce:17:03:89:aa:d0:1a:45:13:a5:9a:91:b8:
63:5b:7c:cf:66:5b:b5:b7:a3:fd:36:d9:fc:ea:35:40:f3:4e:
4f:cd:e2:58:68:97:4c:ab:12:ec:22:e2:f7:9b:08:ff:62:f4:
9b:5c:12:1f:0a:54:84:31:15:ce:e4:12:49:84:77:a6:8f:b5:
70:d9:71:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF637poWWVmBJVpm5MJV5XiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNmYyNmQ3YzgyYzY5MDg3N2RjM2MyY2I5MjI2YmE4MzNk
NzFmOTgwHhcNMjYxMDI3MDEwMDQ0WhcNMjYxMDI4MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg4OGM3NDMxYTRhZGU5MDI4ZDUzMzU0OTViNzYwZjFiNjE0MzI5NDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvCcb2GzLOGpgpRSnF8I/MHK1TSj
jzTdYtvAaWVHhvcWW5hQYmhESi58dkaS4TZpiw/5d2ruuaUlJgy8PZHpq1vk2F8P
lzVTlybyF6fva+IQfLH2ADyOFZWlTYCpaG9bZrDLEfGyNZOz0kIjm9q8nUAMF2Sx
WbidSWBFwy3j4/Aq71Osz+SlkDxGK29vJYlecvGkQRZwFVq0fIhUdvGeakt9NH72
LfKlsit8/mEKLtleB1Rtby/ksZ83rtooNwPi4rkslqBQCNa5AsXUI2nSSCGIyCvF
jO6QhOsAmYaYZs8dbEp23MfQQPIMzJSwOck+RW51dxSUIBwlDvzTBez8LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjHQxpK3pAo1TNUlbdg8bYUMpRfMB8GA1UdIwQY
MBaAFP9vJtfILGkId9w8LLkia6gz1x+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYTNiNjktYzgxNC00NTY5LWE1NGEt
NmE0NjgyOTQzZGZjLzEvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYTNiNjktYzgxNC00NTY5LWE1NGEtNmE0NjgyOTQzZGZj
LzEvXzI4bTE4Z3NhUWgzM0R3c3VTSnJxRFBYSDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIBqqIHk
W3UHQxtre/uegL6X5W603Jhj9NlmaZy90QvVihrxPY7FmJRN1o7dsV/5cNQMnVqq
jVf/hBdo+Ae74hXV1zdj347BFLjY2Rc/2i6hgf5CqRzu72w8oxufzqnyKvxbt2z/
MMkZNICp4h2IQ3HWwxnvrz+tOOYOEael6hmjJa4gimPO90Yg3VFSZ4ZQ6lDmf2j8
TEXL0AUs1sLtREpNzQyNnR4+zwxB5XK2E1BHKzfwbh0vge7OFwOJqtAaRROlmpG4
Y1t8z2Zbtbej/TbZ/Oo1QPNOT83iWGiXTKsS7CLi95sI/2L0m1wSHwpUhDEVzuQS
SYR3po+1cNlxJA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:18 2026 by rpki-client