Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
File: F1I5HgrS5kTP4trXYhEddX9YX2g.mft (raw, json)
Hash identifier: vobCg4L0ETFdnuZuVBYTR2MCnqC0XuhhfiSoEabBmMU=
Subject key identifier: 9D:53:E3:68:40:F7:FE:C2:60:8C:AB:4D:22:4D:8E:E6:08:AF:14:09
Authority key identifier: 17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
Certificate issuer: /CN=1752391e0ad2e644cfe2dad762111d757f585f68
Certificate serial: 01A17C29770A565A374235D2D29F5EDF3CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
Manifest number: 0430
Signing time: Tue 27 Oct 2026 07:00:54 +0000
Manifest this update: Tue 27 Oct 2026 07:00:54 +0000
Manifest next update: Wed 28 Oct 2026 07:00:54 +0000
Files and hashes: 1: 0lIK26YMPI1sU4_Dy7MmWqCLqXs.roa (hash: /1U+nqGuFd+Jm+nHWNDCpH/u8r8RBjhHKLcN02jjzrQ=)
2: 10JCy1pMlThUvrowqZBae-zy-xY.roa (hash: QL24fJcfm5SzuiNKNcYDuLlwRHdszAidplOFDy8xdVs=)
3: F1I5HgrS5kTP4trXYhEddX9YX2g.crl (hash: Y5JSP6RuAPWGnpQ/3uhO7GMxkdclf1prlpS361N0aj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:77:0a:56:5a:37:42:35:d2:d2:9f:5e:df:3c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1752391e0ad2e644cfe2dad762111d757f585f68
Validity
Not Before: Oct 27 07:00:54 2026 GMT
Not After : Oct 28 07:00:54 2026 GMT
Subject: CN=9d53e36840f7fec2608cab4d224d8ee608af1409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:9f:b1:68:23:f3:12:07:75:28:36:43:bf:
17:6a:55:be:1c:bd:ea:92:09:9c:35:70:cc:6b:9e:
a8:33:80:4f:4d:60:bc:67:89:13:4f:f2:56:9c:10:
25:1b:13:3f:20:f7:21:99:50:ae:25:df:b5:b2:49:
11:30:4e:0b:ca:2e:c5:b0:91:c3:01:0e:06:9a:3b:
65:8f:6b:4b:ba:da:9d:53:4f:47:f1:a8:ec:39:27:
f1:c3:16:ad:71:50:95:1e:80:48:54:43:10:d9:13:
a9:ba:90:de:9b:96:bc:32:fb:64:7b:9c:b2:a4:6b:
f4:33:e7:91:4c:97:8c:dc:47:85:a2:1f:63:f0:36:
35:28:68:bf:7a:ab:4d:db:87:17:88:f4:ff:c5:de:
f0:63:37:a8:a8:75:c6:ab:33:ff:cd:90:5f:7b:bf:
45:9b:2d:83:d8:d4:d0:62:56:35:a2:9d:f4:7e:39:
4b:89:8f:ed:1b:34:12:31:59:b7:04:23:66:62:0c:
9b:9e:8c:be:4f:2c:41:9d:54:e0:de:7c:70:43:5d:
1d:05:9f:b0:47:60:17:80:26:be:51:19:7d:7c:d9:
23:fa:ac:52:80:94:a4:9e:f9:0f:94:d2:fd:c9:f5:
1a:6a:c8:3f:dc:c8:06:1f:79:df:c0:f1:0c:14:18:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:53:E3:68:40:F7:FE:C2:60:8C:AB:4D:22:4D:8E:E6:08:AF:14:09
X509v3 Authority Key Identifier:
keyid:17:52:39:1E:0A:D2:E6:44:CF:E2:DA:D7:62:11:1D:75:7F:58:5F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1I5HgrS5kTP4trXYhEddX9YX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/25bc00-0ce2-447f-a139-39da6602c430/1/F1I5HgrS5kTP4trXYhEddX9YX2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:4f:01:a6:ee:8d:df:30:6b:b4:8c:a1:72:b0:a5:a8:62:9e:
ac:d6:5a:5c:90:2c:4c:ae:e3:ad:8a:98:37:a5:77:14:fb:89:
98:29:95:7e:c3:97:c5:6b:80:95:56:15:31:95:58:42:a2:a8:
00:a4:5f:46:11:77:28:19:bf:39:7f:f5:07:d4:ec:ba:51:21:
d2:d4:0f:ed:77:1a:af:31:44:09:3a:89:ae:d7:d4:53:d4:f6:
4a:fc:60:cc:da:71:72:0d:80:02:78:c2:14:10:11:b8:60:1c:
91:d4:67:b9:ab:b4:3e:47:0d:80:fe:34:29:07:cc:2b:91:f8:
6f:1a:f5:af:ad:38:67:af:b0:23:b6:bb:24:1f:22:5f:65:66:
94:57:fd:f5:04:1d:83:ab:81:79:66:76:10:ac:35:ce:e0:a4:
13:65:ff:39:50:33:b6:97:fc:4d:0f:b0:09:f8:15:e6:d4:9a:
48:ea:2a:7f:54:b0:f7:f1:3a:c8:4b:76:8f:41:4e:0b:4d:87:
f3:7b:65:31:89:9f:a7:2d:a8:4b:3a:57:79:b7:89:a8:48:de:
06:d0:b9:29:6a:9f:ca:90:b3:b2:dd:88:a8:39:0f:8c:e0:cd:
be:c2:87:ca:56:a0:68:5c:98:14:6a:39:8e:a2:ec:20:71:67:
ce:4c:90:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KXcKVlo3QjXS0p9e3zy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTIzOTFlMGFkMmU2NDRjZmUyZGFkNzYyMTExZDc1N2Y1
ODVmNjgwHhcNMjYxMDI3MDcwMDU0WhcNMjYxMDI4MDcwMDU0WjAzMTEwLwYDVQQD
Eyg5ZDUzZTM2ODQwZjdmZWMyNjA4Y2FiNGQyMjRkOGVlNjA4YWYxNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC2fsWgj8xIHdSg2Q78XalW+HL3q
kgmcNXDMa56oM4BPTWC8Z4kTT/JWnBAlGxM/IPchmVCuJd+1skkRME4Lyi7FsJHD
AQ4Gmjtlj2tLutqdU09H8ajsOSfxwxatcVCVHoBIVEMQ2ROpupDem5a8Mvtke5yy
pGv0M+eRTJeM3EeFoh9j8DY1KGi/eqtN24cXiPT/xd7wYzeoqHXGqzP/zZBfe79F
my2D2NTQYlY1op30fjlLiY/tGzQSMVm3BCNmYgybnoy+TyxBnVTg3nxwQ10dBZ+w
R2AXgCa+URl9fNkj+qxSgJSknvkPlNL9yfUaasg/3MgGH3nfwPEMFBik7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1T42hA9/7CYIyrTSJNjuYIrxQJMB8GA1UdIwQY
MBaAFBdSOR4K0uZEz+La12IRHXV/WF9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzkt
MzlkYTY2MDJjNDMwLzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNWJjMDAtMGNlMi00NDdmLWExMzktMzlkYTY2MDJjNDMw
LzEvRjFJNUhnclM1a1RQNHRyWFloRWRkWDlZWDJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA008Bpu6N
3zBrtIyhcrClqGKerNZaXJAsTK7jrYqYN6V3FPuJmCmVfsOXxWuAlVYVMZVYQqKo
AKRfRhF3KBm/OX/1B9TsulEh0tQP7XcarzFECTqJrtfUU9T2SvxgzNpxcg2AAnjC
FBARuGAckdRnuau0PkcNgP40KQfMK5H4bxr1r604Z6+wI7a7JB8iX2VmlFf99QQd
g6uBeWZ2EKw1zuCkE2X/OVAztpf8TQ+wCfgV5tSaSOoqf1Sw9/E6yEt2j0FOC02H
83tlMYmfpy2oSzpXebeJqEjeBtC5KWqfypCzst2IqDkPjODNvsKHylagaFyYFGo5
jqLsIHFnzkyQqA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 11:18:34 2026 by rpki-client