Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: /6kOPLoW+D+Pm5HxjEZ6ll4B57xto0C1FzLK/BUvr+M=
Subject key identifier: 40:8F:3E:45:97:95:75:4E:17:D1:6F:66:E4:49:55:4D:16:75:BB:BC
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01A17C2971408B3E3FC34DD576CBD2E89EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 07:00:53 +0000
Manifest this update: Tue 27 Oct 2026 07:00:53 +0000
Manifest next update: Wed 28 Oct 2026 07:00:53 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: 1mETtCzXUgSQnlSqWAZf/WeYkOVA0J0SuHw+S9ixUPM=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:71:40:8b:3e:3f:c3:4d:d5:76:cb:d2:e8:9e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Oct 27 07:00:53 2026 GMT
Not After : Oct 28 07:00:53 2026 GMT
Subject: CN=408f3e459795754e17d16f66e449554d1675bbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:95:5f:ff:3d:8a:35:10:b8:65:94:61:1e:
0d:de:a1:8d:19:75:51:2f:95:2c:2f:60:a6:74:60:
2a:52:18:06:75:23:15:b8:eb:84:81:6c:cf:09:85:
e6:68:10:90:c9:22:7b:07:d5:54:a5:b9:01:e6:da:
cb:5e:0c:f7:03:74:aa:59:86:e7:68:00:4c:79:16:
18:a0:f5:db:c1:27:27:e2:6c:e5:bd:a7:2d:8d:c1:
5b:f0:b0:02:96:df:d4:60:4a:85:10:53:4d:35:b9:
a7:34:8c:89:38:b1:11:0c:9d:af:cc:23:27:88:99:
80:f8:27:57:d4:b9:88:f6:fb:db:01:6e:73:c0:28:
cf:78:5b:8b:19:06:a0:29:77:5c:ae:f7:6b:9e:8e:
c7:60:4d:43:df:d4:12:36:8c:84:8f:cc:39:cf:23:
fb:19:90:91:73:c8:ed:62:c9:b6:8c:0b:48:8f:93:
1f:46:43:86:8b:95:9c:37:d5:64:8e:cf:91:3f:a5:
52:bd:3a:07:19:f3:97:d6:3a:87:93:87:17:5c:2b:
a9:9c:53:d0:f1:8f:52:0e:44:2d:03:87:24:70:22:
67:d6:b4:41:8d:8e:16:5d:b2:1b:20:9f:e3:31:4f:
fd:f8:61:f6:ce:3e:57:c9:2b:00:23:d5:9d:84:56:
02:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8F:3E:45:97:95:75:4E:17:D1:6F:66:E4:49:55:4D:16:75:BB:BC
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:53:25:88:7b:61:9e:dc:7f:9c:54:a6:9d:e7:95:1d:13:e8:
fa:b4:ed:15:c0:b0:b5:5b:d9:a2:fb:39:50:7b:0e:29:a5:41:
2a:c3:b0:81:60:3f:ed:77:d6:3b:29:45:ec:12:59:79:33:8f:
2f:b8:da:d7:4e:fd:5a:60:5e:dd:b5:c9:fc:aa:86:9d:74:9a:
c5:a4:47:0e:93:58:0e:2c:22:92:41:1c:03:28:b8:5e:37:9c:
92:2a:ea:cf:14:6a:35:ef:d0:21:5c:09:5a:bc:3b:c3:d0:f4:
c4:28:a4:36:06:37:7a:12:e0:da:ab:6a:6f:d7:15:f0:0b:75:
44:7e:50:16:7d:3d:63:74:ff:01:95:d9:c5:9b:82:d4:35:55:
8c:68:b4:7c:25:87:ef:7b:9f:e0:ad:f2:86:f7:af:a2:5d:70:
7d:f9:0c:88:a9:12:68:62:b9:b7:ba:c3:e2:be:67:97:16:36:
46:3b:c7:9f:9f:6c:a5:ff:76:c5:54:fb:89:82:cc:fd:e0:6a:
86:1b:b9:08:d8:4d:9c:e9:db:c6:34:a4:86:e0:a1:3a:97:79:
e6:c1:4d:43:1a:85:9d:f1:a3:1c:f5:99:98:52:c5:30:62:b0:
f0:27:2d:79:ab:23:5b:38:95:f7:6f:ec:cf:47:a2:36:bc:f2:
5e:38:a7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KXFAiz4/w03VdsvS6J7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjkxZWVmYTZkODA0NmQ5MThlMzY0MDQ1NjA0OTUyNjQw
YmMxNWQwHhcNMjYxMDI3MDcwMDUzWhcNMjYxMDI4MDcwMDUzWjAzMTEwLwYDVQQD
Eyg0MDhmM2U0NTk3OTU3NTRlMTdkMTZmNjZlNDQ5NTU0ZDE2NzViYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcSVX/89ijUQuGWUYR4N3qGNGXVR
L5UsL2CmdGAqUhgGdSMVuOuEgWzPCYXmaBCQySJ7B9VUpbkB5trLXgz3A3SqWYbn
aABMeRYYoPXbwScn4mzlvactjcFb8LAClt/UYEqFEFNNNbmnNIyJOLERDJ2vzCMn
iJmA+CdX1LmI9vvbAW5zwCjPeFuLGQagKXdcrvdrno7HYE1D39QSNoyEj8w5zyP7
GZCRc8jtYsm2jAtIj5MfRkOGi5WcN9Vkjs+RP6VSvToHGfOX1jqHk4cXXCupnFPQ
8Y9SDkQtA4ckcCJn1rRBjY4WXbIbIJ/jMU/9+GH2zj5XySsAI9WdhFYCfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFECPPkWXlXVOF9FvZuRJVU0Wdbu8MB8GA1UdIwQY
MBaAFJO5Hu+m2ARtkY42QEVgSVJkC8FdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEt
MzU4NmFhZTEzZGE3LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEtMzU4NmFhZTEzZGE3
LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVMliHth
ntx/nFSmneeVHRPo+rTtFcCwtVvZovs5UHsOKaVBKsOwgWA/7XfWOylF7BJZeTOP
L7ja1079WmBe3bXJ/KqGnXSaxaRHDpNYDiwikkEcAyi4XjeckirqzxRqNe/QIVwJ
Wrw7w9D0xCikNgY3ehLg2qtqb9cV8At1RH5QFn09Y3T/AZXZxZuC1DVVjGi0fCWH
73uf4K3yhvevol1wffkMiKkSaGK5t7rD4r5nlxY2RjvHn59spf92xVT7iYLM/eBq
hhu5CNhNnOnbxjSkhuChOpd55sFNQxqFnfGjHPWZmFLFMGKw8CcteasjWziV92/s
z0eiNrzyXjinog==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:59:32 2026 by rpki-client