Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier: TI2WztDLAOWkyudgDLY3IaJBw4Z9czmDWlefdU88WM8=
Subject key identifier: C9:34:C9:EA:D4:30:32:DD:3E:04:FA:B0:F9:DC:F0:93:A0:81:04:0A
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial: 01A1404BB787A38047F3C990B7B9C4FA2DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number: 15A5
Signing time: Thu 15 Oct 2026 16:01:06 +0000
Manifest this update: Thu 15 Oct 2026 16:01:06 +0000
Manifest next update: Fri 16 Oct 2026 16:01:06 +0000
Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: OGYs8AU3BbOKLHw5H9op532Le2W9h1C9nhkOTSkaaU0=)
2: 1pCvkt2PpE0ZPUQ0xcRpclm4Vx4.asa (hash: DhYV1vMdkhq6+tjylyKNPB9YXFnru1L+V/7iVRsUG3M=)
3: 2xGqMqbFa646EMEXsukXriphVW8.roa (hash: odEL2M6BYLsF4njGikEkDGjtP1dJDgPaubWbiCHPAAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4b:b7:87:a3:80:47:f3:c9:90:b7:b9:c4:fa:2d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Validity
Not Before: Oct 15 16:01:06 2026 GMT
Not After : Oct 16 16:01:06 2026 GMT
Subject: CN=c934c9ead43032dd3e04fab0f9dcf093a081040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:43:8f:9d:bf:4d:ee:56:a0:1f:2d:f0:6b:
54:12:00:67:56:e8:38:a7:c6:89:5c:a9:2b:ac:7d:
6a:4e:df:cc:bb:fb:09:37:69:00:85:0e:c4:13:74:
70:83:20:72:5a:6d:b7:da:cd:05:c3:81:04:65:81:
a7:e5:c3:4a:b2:c9:3c:9a:b9:4f:19:2c:83:cd:49:
3f:73:ba:96:15:49:b9:b0:ce:58:de:d4:80:bc:e2:
8a:61:81:87:33:8f:be:73:50:07:bd:37:cb:34:90:
fc:aa:c1:9d:69:7b:e8:63:78:15:4d:a5:cc:7a:3d:
db:39:ae:49:2d:e6:89:db:89:4c:60:53:2e:1c:a2:
b1:b5:0a:0e:bc:b9:98:df:53:0b:15:4c:54:8a:9f:
77:98:44:27:7c:93:d9:c4:8c:88:c7:73:ef:04:0e:
92:96:38:4e:8c:2c:9d:0c:39:f7:b8:00:ac:2d:b0:
87:fb:ba:16:84:a6:9c:fe:22:df:d5:a3:de:dc:1c:
70:6f:fc:82:ae:c2:45:45:17:08:f8:c5:10:b0:74:
ae:7c:fc:f9:56:e0:0c:2e:bf:b5:c0:01:0a:19:05:
9d:8c:b2:4f:67:ed:00:26:e3:e0:03:20:46:8b:3f:
1e:c2:fe:c9:b7:4c:7f:b1:75:29:1e:30:d4:76:0d:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:C9:EA:D4:30:32:DD:3E:04:FA:B0:F9:DC:F0:93:A0:81:04:0A
X509v3 Authority Key Identifier:
keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:94:66:d1:53:de:8f:59:25:76:51:e3:aa:39:25:0b:9c:79:
ec:8d:62:6e:37:ed:77:42:f3:01:e3:ed:51:f2:df:46:77:85:
c2:64:92:a3:36:84:80:03:02:fc:85:54:0f:ef:3d:af:a5:69:
37:41:d1:e9:e8:8d:8e:7c:09:7a:09:c5:b0:6f:3d:9d:95:46:
e4:c3:bb:e7:b3:14:64:22:fd:42:40:78:e4:38:03:a5:5f:05:
ce:e6:92:c7:09:b8:4b:82:34:67:90:42:c6:4f:44:fc:88:65:
66:bc:93:19:c1:8a:df:18:62:c9:54:a8:45:2d:13:bf:05:64:
55:19:88:e8:a5:f3:13:ee:54:d9:59:d4:6a:46:31:be:76:3d:
80:1c:84:fb:6c:8c:af:f8:e7:b4:77:6f:97:38:4c:3e:0e:37:
56:cf:1d:98:59:64:56:4b:e0:e4:75:1c:24:c6:12:07:aa:2b:
74:47:89:5f:86:62:73:76:bd:90:9b:3c:bd:98:da:3d:53:18:
b8:b2:ba:52:53:e0:50:20:c1:0d:1e:98:d8:e6:a3:a9:26:6a:
b9:40:f2:2c:8c:82:ef:60:2a:6d:ee:e9:71:34:17:dd:c9:79:
bb:ee:96:cd:2b:86:e2:c6:7c:99:ff:de:00:40:b0:c2:8f:1c:
a5:36:33:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAS7eHo4BH88mQt7nE+i3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3
MWQ5NzYwHhcNMjYxMDE1MTYwMTA2WhcNMjYxMDE2MTYwMTA2WjAzMTEwLwYDVQQD
EyhjOTM0YzllYWQ0MzAzMmRkM2UwNGZhYjBmOWRjZjA5M2EwODEwNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSpDj52/Te5WoB8t8GtUEgBnVug4
p8aJXKkrrH1qTt/Mu/sJN2kAhQ7EE3RwgyByWm232s0Fw4EEZYGn5cNKssk8mrlP
GSyDzUk/c7qWFUm5sM5Y3tSAvOKKYYGHM4++c1AHvTfLNJD8qsGdaXvoY3gVTaXM
ej3bOa5JLeaJ24lMYFMuHKKxtQoOvLmY31MLFUxUip93mEQnfJPZxIyIx3PvBA6S
ljhOjCydDDn3uACsLbCH+7oWhKac/iLf1aPe3Bxwb/yCrsJFRRcI+MUQsHSufPz5
VuAMLr+1wAEKGQWdjLJPZ+0AJuPgAyBGiz8ewv7Jt0x/sXUpHjDUdg1t6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk0yerUMDLdPgT6sPnc8JOggQQKMB8GA1UdIwQY
MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt
Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx
LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJRm0VPe
j1kldlHjqjklC5x57I1ibjftd0LzAePtUfLfRneFwmSSozaEgAMC/IVUD+89r6Vp
N0HR6eiNjnwJegnFsG89nZVG5MO757MUZCL9QkB45DgDpV8FzuaSxwm4S4I0Z5BC
xk9E/IhlZryTGcGK3xhiyVSoRS0TvwVkVRmI6KXzE+5U2VnUakYxvnY9gByE+2yM
r/jntHdvlzhMPg43Vs8dmFlkVkvg5HUcJMYSB6ordEeJX4Zic3a9kJs8vZjaPVMY
uLK6UlPgUCDBDR6Y2OajqSZquUDyLIyC72Aqbe7pcTQX3cl5u+6WzSuG4sZ8mf/e
AECwwo8cpTYzAA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 21:34:08 2026 by rpki-client