Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
File: _7ml8yjMMGUnzExHS9xLE6dGoag.mft (raw, json)
Hash identifier: 0Htzvs/q8XftmWWYM9PWT+ZlE57Vc8LnW356/ieN4vo=
Subject key identifier: 23:E3:02:09:A9:8B:4E:CE:89:EA:73:48:91:D4:D3:2E:FF:8B:FC:19
Authority key identifier: FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
Certificate issuer: /CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Certificate serial: 01A1607B101205B95952B732D9B8E35A9156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
Manifest number: 02BB
Signing time: Wed 21 Oct 2026 22:00:40 +0000
Manifest this update: Wed 21 Oct 2026 22:00:40 +0000
Manifest next update: Thu 22 Oct 2026 22:00:40 +0000
Files and hashes: 1: TjUAHrNX6D8KKFwZiePYTV0m3bk.roa (hash: 61/mGPF5yOHT2ppU4Jvr6b/vuT6FmCh4sw4OsDecTfo=)
2: _7ml8yjMMGUnzExHS9xLE6dGoag.crl (hash: vzQ4sD8ZFIps5GVrNnhKpS+EpSQSuCWlRKLUVgzVSEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:7b:10:12:05:b9:59:52:b7:32:d9:b8:e3:5a:91:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb9a5f328cc306527cc4c474bdc4b13a746a1a8
Validity
Not Before: Oct 21 22:00:40 2026 GMT
Not After : Oct 22 22:00:40 2026 GMT
Subject: CN=23e30209a98b4ece89ea734891d4d32eff8bfc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:65:1a:8a:e9:8d:92:a1:44:4a:89:85:d4:c9:
f5:01:fa:d2:24:24:d0:7b:3e:86:aa:a2:7e:78:f4:
e4:0d:73:31:d6:7b:ac:77:b3:b3:c4:5e:04:d4:1e:
ea:8b:30:7e:b8:39:00:95:cd:3e:b6:71:c5:d3:be:
d5:5f:31:b9:15:16:f6:ef:c8:31:79:aa:96:7b:c5:
1c:4d:2d:e7:d0:2c:15:d6:22:62:3d:00:fc:ea:40:
59:34:2b:19:78:94:82:c2:00:f4:b8:fa:8c:55:45:
fd:0e:3e:8c:74:b2:4a:07:72:d0:82:df:d1:0b:02:
aa:e1:e6:44:f9:87:06:e1:b3:26:6d:37:26:6a:06:
28:80:fb:30:4a:a0:1c:66:99:c5:37:fd:51:cb:c7:
7f:a2:d9:5e:3a:cc:37:68:23:56:84:ae:9f:f3:40:
b5:5f:b0:f7:aa:bb:72:2b:34:02:4c:66:ab:d7:63:
94:c6:7a:65:6a:92:0a:c3:ee:af:d6:4f:14:19:48:
ac:7d:26:44:d3:9f:3e:e4:7c:f4:59:6e:84:e6:34:
24:24:59:46:bc:81:5d:13:b6:e4:df:b7:53:03:94:
c7:b2:49:e0:18:6d:78:07:78:1b:e1:4a:c8:4c:35:
20:ab:0d:c2:99:3f:b5:9a:d9:53:11:ef:a1:dc:89:
73:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:02:09:A9:8B:4E:CE:89:EA:73:48:91:D4:D3:2E:FF:8B:FC:19
X509v3 Authority Key Identifier:
keyid:FF:B9:A5:F3:28:CC:30:65:27:CC:4C:47:4B:DC:4B:13:A7:46:A1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7ml8yjMMGUnzExHS9xLE6dGoag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2ffeff-6b0b-40c8-87ec-1f1642507193/1/_7ml8yjMMGUnzExHS9xLE6dGoag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:8d:66:f6:8d:c5:a4:18:2c:aa:ae:c1:01:bc:71:64:7b:
aa:42:2f:53:1e:49:16:f1:e4:4e:ff:34:17:01:b8:d6:83:85:
bf:21:3a:d0:aa:00:04:af:10:6a:ae:b3:38:56:28:5b:18:7e:
33:6e:fc:fd:2c:37:88:95:e2:c8:a9:76:fc:54:a7:6d:1f:3e:
d1:b9:f8:2e:0a:66:01:7e:81:85:7b:89:98:3a:70:df:35:4e:
18:e7:df:ba:d0:a7:d0:be:ab:63:58:67:83:10:8d:39:29:7f:
04:ca:ac:48:72:fd:4c:c5:18:80:f0:8b:e7:2f:c9:61:8b:31:
0f:f2:96:9d:36:72:f1:1a:4a:4d:26:bf:81:d9:5a:94:c1:c0:
90:30:9e:10:e7:93:0e:05:6e:e8:15:cb:4c:a1:5a:0f:92:1f:
ec:d3:93:0e:e1:18:01:db:26:a3:3a:94:a3:8b:6b:9a:6c:5f:
72:31:01:4f:29:c1:b9:0c:21:f7:dc:55:1d:c9:bb:52:5f:f0:
59:70:e6:d1:d1:f1:6f:43:42:a1:4b:d8:d0:f9:23:44:3d:67:
2a:b3:45:39:68:d0:b1:90:90:b2:58:2e:00:b0:dc:28:d1:24:
e0:b8:6a:7b:fe:0e:71:43:c0:e0:8c:cf:7b:43:5c:c6:5a:e2:
76:8f:6b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFgexASBblZUrcy2bjjWpFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjlhNWYzMjhjYzMwNjUyN2NjNGM0NzRiZGM0YjEzYTc0
NmExYTgwHhcNMjYxMDIxMjIwMDQwWhcNMjYxMDIyMjIwMDQwWjAzMTEwLwYDVQQD
EygyM2UzMDIwOWE5OGI0ZWNlODllYTczNDg5MWQ0ZDMyZWZmOGJmYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WUaiumNkqFESomF1Mn1AfrSJCTQ
ez6GqqJ+ePTkDXMx1nusd7OzxF4E1B7qizB+uDkAlc0+tnHF077VXzG5FRb278gx
eaqWe8UcTS3n0CwV1iJiPQD86kBZNCsZeJSCwgD0uPqMVUX9Dj6MdLJKB3LQgt/R
CwKq4eZE+YcG4bMmbTcmagYogPswSqAcZpnFN/1Ry8d/otleOsw3aCNWhK6f80C1
X7D3qrtyKzQCTGar12OUxnplapIKw+6v1k8UGUisfSZE058+5Hz0WW6E5jQkJFlG
vIFdE7bk37dTA5THskngGG14B3gb4UrITDUgqw3CmT+1mtlTEe+h3IlzWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPjAgmpi07OiepzSJHU0y7/i/wZMB8GA1UdIwQY
MBaAFP+5pfMozDBlJ8xMR0vcSxOnRqGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yZmZlZmYtNmIwYi00MGM4LTg3ZWMt
MWYxNjQyNTA3MTkzLzEvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8yZmZlZmYtNmIwYi00MGM4LTg3ZWMtMWYxNjQyNTA3MTkz
LzEvXzdtbDh5ak1NR1VuekV4SFM5eExFNmRHb2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIWNZvaN
xaQYLKquwQG8cWR7qkIvUx5JFvHkTv80FwG41oOFvyE60KoABK8Qaq6zOFYoWxh+
M278/Sw3iJXiyKl2/FSnbR8+0bn4LgpmAX6BhXuJmDpw3zVOGOffutCn0L6rY1hn
gxCNOSl/BMqsSHL9TMUYgPCL5y/JYYsxD/KWnTZy8RpKTSa/gdlalMHAkDCeEOeT
DgVu6BXLTKFaD5If7NOTDuEYAdsmozqUo4trmmxfcjEBTynBuQwh99xVHcm7Ul/w
WXDm0dHxb0NCoUvY0PkjRD1nKrNFOWjQsZCQslguALDcKNEk4Lhqe/4OcUPA4IzP
e0Ncxlrido9r1w==
-----END CERTIFICATE-----
Generated at Thu Oct 22 02:07:45 2026 by rpki-client