Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: dTtkfneSOnjhsZizEXPyT6IHhS5wTIi6Y3q+LNFMTMI=
Subject key identifier: B0:20:8A:74:B2:4E:86:21:4C:D3:12:F9:8F:8D:0A:7F:57:66:C5:B4
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 01A13DB8C4C079EA2D3FDE760F71EE99A3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 122E
Signing time: Thu 15 Oct 2026 04:01:21 +0000
Manifest this update: Thu 15 Oct 2026 04:01:21 +0000
Manifest next update: Fri 16 Oct 2026 04:01:21 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: geptt1ZDdDb0yKwG5ac+VAfh1lTbKetUuWGjyVLsaR0=)
2: ZHDfzOd0Vs1cFH4Cds3NQzXm5e0.roa (hash: b2Z3qDf5qe3MjesJLnqAMi8pQaoBZLbH5mVHFy7vu6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:c4:c0:79:ea:2d:3f:de:76:0f:71:ee:99:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Oct 15 04:01:21 2026 GMT
Not After : Oct 16 04:01:21 2026 GMT
Subject: CN=b0208a74b24e86214cd312f98f8d0a7f5766c5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:e7:18:3e:cf:fb:f5:e3:ae:92:4a:79:7e:
79:a3:ee:68:1e:91:97:2e:2f:3d:ee:f7:99:63:0c:
fa:0e:96:2c:c3:af:40:ab:c0:db:61:97:57:b1:36:
ca:72:8e:fd:e4:e3:54:f6:9f:ee:12:18:51:78:0c:
a2:87:73:15:6d:ac:73:5c:42:69:17:dc:83:c1:5f:
5e:34:49:56:1e:cc:96:a3:36:d9:03:38:ad:78:a4:
03:17:90:25:d7:3a:ba:cc:2e:f7:f7:a2:b4:0a:9e:
06:1b:1a:f1:72:11:df:df:96:be:be:e4:84:f4:88:
49:63:ee:1b:72:71:52:74:d8:4d:42:fe:ec:70:62:
38:35:95:6e:bb:9a:67:09:5e:ae:38:ae:44:01:31:
03:fb:cc:54:c2:6a:1e:b3:e9:7d:30:cb:a4:89:43:
ca:a7:7a:18:09:07:00:a5:dc:7b:fa:10:0f:d7:22:
06:fc:44:c5:51:73:ae:f8:42:78:4b:5f:1a:ef:b1:
80:a7:a9:68:ff:fe:53:4e:0d:23:04:da:b8:32:bc:
b3:7c:93:e1:71:fa:d6:4b:22:99:ed:07:67:c2:a3:
b7:15:c9:59:ac:20:58:1f:a0:8d:ec:07:5a:41:ee:
3b:61:01:88:bc:5a:39:17:dc:ec:a1:33:3a:a2:60:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:20:8A:74:B2:4E:86:21:4C:D3:12:F9:8F:8D:0A:7F:57:66:C5:B4
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:26:ec:18:63:e4:87:00:c5:79:7d:64:64:c5:43:b5:9d:e3:
a4:50:45:54:ba:08:e1:bb:6e:ae:63:25:a4:51:d6:76:36:57:
e9:13:f8:e8:f8:ac:17:d6:7e:e9:32:79:ed:8b:5b:d5:21:5f:
3e:c0:38:bf:66:5e:20:70:24:cc:43:6e:73:30:df:10:8f:63:
b7:6b:be:01:93:75:fc:38:3c:50:32:fb:68:32:c0:44:b8:bb:
34:11:97:0d:08:b8:48:9e:5e:35:19:85:d6:56:34:c5:65:66:
8c:d1:ee:7b:f8:37:a5:e4:01:de:f6:c6:0c:9d:a4:50:1a:fc:
a2:70:e5:c3:e8:80:63:96:95:59:a7:b9:2e:56:49:18:90:90:
8d:c8:03:1e:ed:72:6c:62:04:5d:6e:d3:bd:f5:18:86:0c:98:
11:51:cf:c7:21:00:c6:b2:4d:35:df:c6:df:03:ee:68:28:1e:
39:53:52:f8:db:7e:3f:b8:c2:bf:ce:99:19:af:7c:4b:93:26:
82:98:b9:e2:4e:dd:3d:d2:a9:df:ff:9c:59:92:4d:dd:13:5b:
38:47:9a:fb:82:f4:39:11:29:a3:0a:85:82:44:90:3c:76:35:
99:a0:9a:ba:4e:5e:4f:7e:ed:86:12:aa:52:44:97:46:78:85:
66:27:dc:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE9uMTAeeotP952D3HumaP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTZhZmM1NGZlNjNlZDE3NDBkNWU4OTZiM2Y1OTFiMTE4
NGY2ZGMwHhcNMjYxMDE1MDQwMTIxWhcNMjYxMDE2MDQwMTIxWjAzMTEwLwYDVQQD
EyhiMDIwOGE3NGIyNGU4NjIxNGNkMzEyZjk4ZjhkMGE3ZjU3NjZjNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqLnGD7P+/XjrpJKeX55o+5oHpGX
Li897veZYwz6DpYsw69Aq8DbYZdXsTbKco795ONU9p/uEhhReAyih3MVbaxzXEJp
F9yDwV9eNElWHsyWozbZAziteKQDF5Al1zq6zC7396K0Cp4GGxrxchHf35a+vuSE
9IhJY+4bcnFSdNhNQv7scGI4NZVuu5pnCV6uOK5EATED+8xUwmoes+l9MMukiUPK
p3oYCQcApdx7+hAP1yIG/ETFUXOu+EJ4S18a77GAp6lo//5TTg0jBNq4MryzfJPh
cfrWSyKZ7QdnwqO3FclZrCBYH6CN7AdaQe47YQGIvFo5F9zsoTM6omBOvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAginSyToYhTNMS+Y+NCn9XZsW0MB8GA1UdIwQY
MBaAFNeWr8VP5j7RdA1eiWs/WRsRhPbcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2Yt
MGE4NjM1OGU5Yzg0LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8zMmFiMTYtOGY2ZC00MTRkLTgwY2YtMGE4NjM1OGU5Yzg0
LzEvMTVhdnhVX21QdEYwRFY2SmF6OVpHeEdFOXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhybsGGPk
hwDFeX1kZMVDtZ3jpFBFVLoI4bturmMlpFHWdjZX6RP46PisF9Z+6TJ57Ytb1SFf
PsA4v2ZeIHAkzENuczDfEI9jt2u+AZN1/Dg8UDL7aDLARLi7NBGXDQi4SJ5eNRmF
1lY0xWVmjNHue/g3peQB3vbGDJ2kUBr8onDlw+iAY5aVWae5LlZJGJCQjcgDHu1y
bGIEXW7TvfUYhgyYEVHPxyEAxrJNNd/G3wPuaCgeOVNS+Nt+P7jCv86ZGa98S5Mm
gpi54k7dPdKp3/+cWZJN3RNbOEea+4L0OREpowqFgkSQPHY1maCauk5eT37thhKq
UkSXRniFZifcwQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:56 2026 by rpki-client