Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
File: 1tcoXpK3QC6V29onv773Go4ifNQ.mft (raw, json)
Hash identifier: kxw/UyKG1dafSgwyurajQn7GZ167X20hAoYCuyaSrUY=
Subject key identifier: 77:AD:35:2C:A1:0D:B6:BD:6C:CF:6A:BD:01:DE:96:0D:93:9B:2A:CF
Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Certificate serial: 01A17702E4D4666CA1ADDDC417B58F75DEEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
Manifest number: 037D
Signing time: Mon 26 Oct 2026 07:00:40 +0000
Manifest this update: Mon 26 Oct 2026 07:00:40 +0000
Manifest next update: Tue 27 Oct 2026 07:00:40 +0000
Files and hashes: 1: 1-8bxl4_rfbBwo8TCBr5odrr0ZmY.roa (hash: cowmIq8yi7K6Ej80mk+QDIVVCB4mvUbDfkJB3Hrr7EA=)
2: 1tcoXpK3QC6V29onv773Go4ifNQ.crl (hash: 2dSSE2Wk6SYp9hojTCIzKRqrkV5Mnz2yHsfMi8MmGbw=)
3: cHkKo0DH80LlWl6mMB1Bk4ZyTuQ.asa (hash: nUOqpGWWngcltr0wRPhL84IrP/0KMpPD9+1PbqAf+iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:02:e4:d4:66:6c:a1:ad:dd:c4:17:b5:8f:75:de:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4
Validity
Not Before: Oct 26 07:00:40 2026 GMT
Not After : Oct 27 07:00:40 2026 GMT
Subject: CN=77ad352ca10db6bd6ccf6abd01de960d939b2acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:42:68:b4:82:9e:11:5d:a5:80:16:06:ba:
8a:af:b4:99:60:a8:52:9a:ae:f7:fe:6e:16:35:33:
85:0b:d0:66:c4:01:d7:66:12:71:87:c4:aa:91:61:
6d:94:3b:a1:9c:25:84:f6:bd:18:ca:2c:77:17:36:
8a:e6:a2:44:27:bc:e8:84:ec:1c:76:d6:09:3f:f2:
7c:0a:20:ef:9a:54:13:96:10:6d:ac:b7:3a:12:de:
dc:d8:77:32:1a:44:fc:19:89:8b:84:fc:c9:83:98:
81:d5:eb:59:cf:3d:45:fd:d4:ca:e3:36:4b:82:ef:
b6:47:8f:46:96:b4:d7:cf:3d:75:7a:ca:d5:8a:1d:
4b:c7:76:62:6b:0e:5d:99:39:ef:06:5d:df:c1:73:
2a:ca:de:08:6d:4e:e9:94:41:d9:63:4c:77:9b:50:
e3:f9:dd:da:fe:d8:ad:c4:92:1a:a9:a7:a2:21:d9:
20:a0:16:e7:3b:41:c9:35:09:09:7b:12:04:71:b4:
26:37:54:8a:b1:e8:29:41:fa:88:ad:2e:2a:70:a9:
ad:93:1f:f5:f6:43:4b:40:fc:1a:17:4a:f0:df:28:
99:9a:86:62:82:73:cc:bd:fd:c6:18:9e:35:c2:c2:
26:1a:4d:f1:69:6f:07:40:a0:55:e1:1d:86:5a:fe:
a0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:35:2C:A1:0D:B6:BD:6C:CF:6A:BD:01:DE:96:0D:93:9B:2A:CF
X509v3 Authority Key Identifier:
keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:7f:3e:9c:f6:a2:25:fc:68:18:2d:1b:be:9e:d2:c2:4b:b3:
b9:02:f6:86:f3:10:26:96:c5:4a:9d:64:a6:96:01:59:4f:a6:
c4:13:7a:0f:4a:d1:81:b6:c3:33:82:75:94:79:bc:7c:36:9a:
a9:12:a6:28:d8:ca:89:7f:08:88:0a:d9:fe:4d:c6:f7:b7:85:
ad:30:d2:f5:47:f9:01:04:06:fb:09:ea:67:fc:29:0b:6f:93:
52:b6:2d:d4:51:fe:2f:ca:7a:4e:9c:ae:28:3b:75:2d:e4:fd:
71:92:5c:4f:e5:86:15:0e:47:c8:51:6c:ec:f4:34:6f:87:dc:
6f:32:d3:73:4b:84:d9:85:15:f5:f3:d7:98:5d:8b:64:87:9f:
43:81:ee:21:57:0d:81:e0:4e:94:ff:ec:97:59:80:a3:e2:5d:
59:50:0d:12:19:bd:20:70:36:54:6c:25:ef:33:fe:44:cb:6f:
ac:36:5b:ad:0a:3d:31:74:99:f9:7a:f9:3e:58:11:e1:f9:bf:
0c:89:2b:91:2b:03:96:d5:de:43:9c:97:6b:b2:a7:3c:63:eb:
8a:f8:32:39:ef:af:4a:1c:e5:5c:d2:a7:7e:73:b9:8a:b8:93:
b9:e1:ca:f0:25:53:64:96:e5:e5:51:22:2f:60:b1:c4:29:f6:
6b:68:99:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3AuTUZmyhrd3EF7WPdd7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZDcyODVlOTJiNzQwMmU5NWRiZGEyN2JmYmVmNzFhOGUy
MjdjZDQwHhcNMjYxMDI2MDcwMDQwWhcNMjYxMDI3MDcwMDQwWjAzMTEwLwYDVQQD
Eyg3N2FkMzUyY2ExMGRiNmJkNmNjZjZhYmQwMWRlOTYwZDkzOWIyYWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLpCaLSCnhFdpYAWBrqKr7SZYKhS
mq73/m4WNTOFC9BmxAHXZhJxh8SqkWFtlDuhnCWE9r0Yyix3FzaK5qJEJ7zohOwc
dtYJP/J8CiDvmlQTlhBtrLc6Et7c2HcyGkT8GYmLhPzJg5iB1etZzz1F/dTK4zZL
gu+2R49GlrTXzz11esrVih1Lx3Ziaw5dmTnvBl3fwXMqyt4IbU7plEHZY0x3m1Dj
+d3a/titxJIaqaeiIdkgoBbnO0HJNQkJexIEcbQmN1SKsegpQfqIrS4qcKmtkx/1
9kNLQPwaF0rw3yiZmoZignPMvf3GGJ41wsImGk3xaW8HQKBV4R2GWv6gUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHetNSyhDba9bM9qvQHelg2TmyrPMB8GA1UdIwQY
MBaAFNbXKF6St0AuldvaJ7++9xqOInzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAt
ZDU1ZjVlMGZmNDNmLzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAtZDU1ZjVlMGZmNDNm
LzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdX8+nPai
JfxoGC0bvp7SwkuzuQL2hvMQJpbFSp1kppYBWU+mxBN6D0rRgbbDM4J1lHm8fDaa
qRKmKNjKiX8IiArZ/k3G97eFrTDS9Uf5AQQG+wnqZ/wpC2+TUrYt1FH+L8p6Tpyu
KDt1LeT9cZJcT+WGFQ5HyFFs7PQ0b4fcbzLTc0uE2YUV9fPXmF2LZIefQ4HuIVcN
geBOlP/sl1mAo+JdWVANEhm9IHA2VGwl7zP+RMtvrDZbrQo9MXSZ+Xr5PlgR4fm/
DIkrkSsDltXeQ5yXa7KnPGPrivgyOe+vShzlXNKnfnO5iriTueHK8CVTZJbl5VEi
L2CxxCn2a2iZ6g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 13:22:07 2026 by rpki-client