Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
File: 0krezYS7F0i9NbmezqRncuAeyTU.mft (raw, json)
Hash identifier: RWQX3er1VXN7Dr95Plu8X5MpeuaUTS3LFaK5uA6nAj0=
Subject key identifier: E9:03:BB:B3:BF:AA:05:0E:D9:1D:BC:3C:78:39:87:7B:7D:3A:0C:A1
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 01A13DB863B9C021729C261A8EA40CDA74D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 04:00:56 +0000
Manifest this update: Thu 15 Oct 2026 04:00:56 +0000
Manifest next update: Fri 16 Oct 2026 04:00:56 +0000
Files and hashes: 1: 0krezYS7F0i9NbmezqRncuAeyTU.crl (hash: 1pIm6tqiOZ99KbOI1obHIIzyMSVPzLzWTjON/3IfVkc=)
2: q2viQQxnb5hv9cHSi6k5fpuWvhk.roa (hash: moDWR3w9AS8vgQ6/NXNmyaldf5yTsoXdPMVWWQQURXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:63:b9:c0:21:72:9c:26:1a:8e:a4:0c:da:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Oct 15 04:00:56 2026 GMT
Not After : Oct 16 04:00:56 2026 GMT
Subject: CN=e903bbb3bfaa050ed91dbc3c7839877b7d3a0ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:56:9f:8e:fd:19:3d:87:b0:2d:bb:6d:9b:
f4:43:cf:26:a1:24:ba:e7:ef:2e:85:53:53:dc:bb:
c0:78:99:2a:d8:ba:72:75:b3:94:18:c1:e3:81:6d:
34:ef:d0:18:09:9a:ec:1f:76:82:f8:9a:a2:b0:55:
b0:92:3c:03:33:8a:13:c1:b3:19:d8:30:3a:76:cc:
f9:9e:40:ea:0f:88:c2:fa:47:cd:dd:d2:41:31:f4:
5d:9c:a7:7f:ca:11:bf:ad:1f:e4:ed:92:38:cf:4c:
ac:bd:ea:ad:00:73:7f:96:6e:9a:30:09:5f:90:b9:
00:67:b3:4f:b6:19:b1:e5:14:05:0d:f5:04:8f:4c:
01:fe:53:59:13:28:fe:d9:af:cc:78:3e:ee:60:7c:
1c:d3:e0:eb:94:50:05:1e:89:43:97:5e:b6:17:8a:
6a:00:86:f6:f2:5c:ef:41:b3:99:45:36:50:53:a1:
07:8a:4d:44:4a:d8:eb:86:4d:7e:f1:5c:a2:12:cf:
d1:90:22:d7:5e:1c:1e:2c:14:a9:74:43:69:7c:26:
c0:61:0e:91:1b:0a:cc:45:e9:80:6c:0a:d7:a1:5d:
e0:15:62:bf:91:cb:22:09:24:81:c0:c3:7e:da:9d:
c7:6c:ef:ee:14:ab:83:1b:bc:a8:e0:98:8c:ac:73:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:BB:B3:BF:AA:05:0E:D9:1D:BC:3C:78:39:87:7B:7D:3A:0C:A1
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b2:ba:c6:87:71:aa:fd:ba:21:0f:c0:53:23:6a:c3:a8:1e:
ca:df:e6:05:ef:85:5a:86:b5:28:94:ca:5c:32:a8:a9:4c:de:
9d:f5:21:67:25:dd:d3:2b:3f:f6:62:6d:77:5a:28:ac:2d:12:
4d:27:9b:af:da:c3:95:10:72:c5:b7:23:90:ea:b5:1b:4d:f7:
97:f0:f8:58:b3:3e:c1:36:d9:b9:c7:ee:fb:54:e3:75:2e:9f:
18:24:6f:51:57:f5:5a:bb:42:15:7c:62:d0:dc:d4:f0:c8:0d:
9a:25:fc:63:c8:3a:71:d5:d2:9c:a4:ba:5f:47:c7:dc:7f:4f:
1b:bb:ee:78:2b:6c:c4:6f:ab:2c:49:a3:e3:f2:85:a9:e4:91:
91:d9:93:47:56:9b:f8:84:8f:b2:95:9d:ed:8f:c2:78:65:99:
ca:2f:25:b0:d5:fa:f8:96:37:a2:93:60:61:06:f5:79:42:2f:
6f:cb:e2:71:eb:c8:2d:c9:5a:00:5a:1a:09:db:e7:53:8d:78:
81:f5:02:7a:ae:69:3f:61:19:5b:ee:19:9b:84:78:89:2e:78:
4d:4e:45:1d:95:f9:b1:32:c5:68:33:b2:12:7a:d0:e2:a2:f6:
b2:ac:69:77:2f:bd:a9:f5:a6:30:9b:67:1f:37:cd:04:12:79:
5a:d2:4b:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uGO5wCFynCYajqQM2nTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNGFkZWNkODRiYjE3NDhiZDM1Yjk5ZWNlYTQ2NzcyZTAx
ZWM5MzUwHhcNMjYxMDE1MDQwMDU2WhcNMjYxMDE2MDQwMDU2WjAzMTEwLwYDVQQD
EyhlOTAzYmJiM2JmYWEwNTBlZDkxZGJjM2M3ODM5ODc3YjdkM2EwY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J5Wn479GT2HsC27bZv0Q88moSS6
5+8uhVNT3LvAeJkq2LpydbOUGMHjgW0079AYCZrsH3aC+JqisFWwkjwDM4oTwbMZ
2DA6dsz5nkDqD4jC+kfN3dJBMfRdnKd/yhG/rR/k7ZI4z0ysveqtAHN/lm6aMAlf
kLkAZ7NPthmx5RQFDfUEj0wB/lNZEyj+2a/MeD7uYHwc0+DrlFAFHolDl162F4pq
AIb28lzvQbOZRTZQU6EHik1EStjrhk1+8VyiEs/RkCLXXhweLBSpdENpfCbAYQ6R
GwrMRemAbArXoV3gFWK/kcsiCSSBwMN+2p3HbO/uFKuDG7yo4JiMrHMdawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkDu7O/qgUO2R28PHg5h3t9OgyhMB8GA1UdIwQY
MBaAFNJK3s2EuxdIvTW5ns6kZ3LgHsk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEt
NDhhNjA3YmJlMjVlLzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS82M2E4NDUtOGMwOS00ZDY5LWE3NzEtNDhhNjA3YmJlMjVl
LzEvMGtyZXpZUzdGMGk5TmJtZXpxUm5jdUFleVRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubK6xodx
qv26IQ/AUyNqw6geyt/mBe+FWoa1KJTKXDKoqUzenfUhZyXd0ys/9mJtd1oorC0S
TSebr9rDlRByxbcjkOq1G033l/D4WLM+wTbZucfu+1TjdS6fGCRvUVf1WrtCFXxi
0NzU8MgNmiX8Y8g6cdXSnKS6X0fH3H9PG7vueCtsxG+rLEmj4/KFqeSRkdmTR1ab
+ISPspWd7Y/CeGWZyi8lsNX6+JY3opNgYQb1eUIvb8vicevILclaAFoaCdvnU414
gfUCeq5pP2EZW+4Zm4R4iS54TU5FHZX5sTLFaDOyEnrQ4qL2sqxpdy+9qfWmMJtn
HzfNBBJ5WtJLmg==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:00 2026 by rpki-client