Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File: B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier: /SO8eQLBVYE54UcG1A8xRK0eKmRSfJBtywCq1XQNOr0=
Subject key identifier: 5F:0E:65:F4:26:B0:72:DF:1D:0F:F4:DF:E3:3E:FF:62:93:F5:21:20
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer: /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial: 01A17E4F10C790638362E06E3EF9C370A65D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 17:01:12 +0000
Manifest this update: Tue 27 Oct 2026 17:01:12 +0000
Manifest next update: Wed 28 Oct 2026 17:01:12 +0000
Files and hashes: 1: 1ci4NPebCgeMNcywiGWuM9-74b0.roa (hash: NY5avTfHcZ7Ff+XOjRJKVaDYbSIYWepikXVoA2de9Ps=)
2: 3T09Td3RZBmm3zvrQZwwBpGpeB0.roa (hash: pFlvkiWfnXad6Oz+dG5TGKsNIEC3q4DoU1i3YQnxVfo=)
3: 5tzteWGlFwKyjVQ8xPXj-51OvPg.roa (hash: xh5JVCDA4vTE54YP7MSyM/w2gDnbTUxL3iC/W96lliI=)
4: AvaeWG-njVdOVlLECWj-IW43uqs.roa (hash: gNzxs1dP4CTxfTmXk2sbLEZ/MxqwjiItf63NRx4XFwI=)
5: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: 4Sr/GJoyoRvKIgxYLwTHmRKYcc1VIv3bsPaleHAz5EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:10:c7:90:63:83:62:e0:6e:3e:f9:c3:70:a6:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Validity
Not Before: Oct 27 17:01:12 2026 GMT
Not After : Oct 28 17:01:12 2026 GMT
Subject: CN=5f0e65f426b072df1d0ff4dfe33eff6293f52120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:ae:b5:20:b2:2d:87:5b:b3:fe:0b:39:09:
77:7f:6f:07:19:58:cb:00:5f:81:b7:18:17:98:6c:
e1:60:41:92:ff:9c:f7:d6:5c:8c:36:a7:73:be:94:
e4:dd:a3:1b:81:2e:10:cd:3b:3d:9b:2c:3b:50:b8:
2a:c8:03:5f:fc:8f:af:71:4f:69:6b:08:b5:d4:a1:
a9:4b:91:27:63:7e:e8:0f:32:17:61:77:c1:68:b2:
bb:61:bf:e3:96:b2:11:a3:3c:1f:e8:75:ca:19:b6:
60:cf:5e:9d:c0:7e:a4:f9:1b:a0:3f:d2:71:86:bb:
40:96:17:bd:8c:20:93:d7:03:7e:c2:89:2c:99:9c:
aa:31:59:2f:52:f3:33:87:66:39:f8:c0:77:b2:69:
6d:9f:e3:53:e9:5c:2a:f9:e2:cf:53:6e:d1:c4:30:
12:aa:7e:e8:0d:30:dc:79:45:3f:79:c7:1c:a6:ab:
ee:f5:2a:b7:02:95:a1:34:09:76:10:f7:32:94:39:
3f:d4:26:b7:a9:07:46:4e:8e:cf:b8:bd:d0:c7:9b:
bb:39:22:a9:6b:d4:af:6c:42:7a:73:bb:4b:81:b0:
c8:ec:58:40:d0:13:2a:0e:b1:be:54:63:83:d4:85:
6e:0e:13:d3:b9:0a:a0:c9:fc:ab:67:17:6f:f9:dc:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0E:65:F4:26:B0:72:DF:1D:0F:F4:DF:E3:3E:FF:62:93:F5:21:20
X509v3 Authority Key Identifier:
keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:67:27:c5:f6:dc:dd:a3:97:4f:f8:c3:e7:74:3f:c7:70:25:
a4:18:14:ae:e9:ad:50:13:6a:ac:2c:80:e9:e2:63:00:22:74:
8d:27:2e:45:eb:6c:27:2d:66:4e:6c:07:be:38:f5:46:82:76:
14:e0:09:f2:c1:08:98:e8:8c:bd:65:cd:b6:7a:d7:2e:ad:0e:
d9:38:0a:61:1f:3f:ae:74:99:9c:ea:3b:b4:08:48:44:42:91:
75:d6:16:d7:f7:e5:27:f5:57:c9:b3:14:f2:85:f7:7c:1d:78:
b7:ce:96:6f:f2:75:f9:6d:d3:71:80:f9:3e:04:f3:00:6d:49:
33:37:ed:36:ba:7c:b0:89:8a:cd:b2:77:82:6a:e7:13:4a:7e:
c9:3e:55:33:91:2f:d8:ea:26:86:cf:03:6b:83:5a:70:39:58:
eb:90:6c:5b:70:ef:6f:1c:dd:f3:88:cd:a0:a4:47:3d:5c:c6:
74:44:32:61:5d:d7:63:37:39:57:de:0b:30:38:3b:7e:8a:18:
2d:66:05:95:2b:f2:e6:22:89:5a:4f:b8:fa:d1:4f:6b:d3:c8:
5a:b4:27:2d:dd:9b:12:62:a3:9c:60:89:74:07:d4:23:12:f2:
97:c6:96:24:7b:3e:50:f5:fe:56:78:04:d3:01:8d:e8:2e:66:
71:cc:e7:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+TxDHkGODYuBuPvnDcKZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZTVjNGU0YmUzYjhjYmRlMGVhZTk0NjBhMTEwMzJkNmE2
NGFiNzEwHhcNMjYxMDI3MTcwMTEyWhcNMjYxMDI4MTcwMTEyWjAzMTEwLwYDVQQD
Eyg1ZjBlNjVmNDI2YjA3MmRmMWQwZmY0ZGZlMzNlZmY2MjkzZjUyMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHuutSCyLYdbs/4LOQl3f28HGVjL
AF+BtxgXmGzhYEGS/5z31lyMNqdzvpTk3aMbgS4QzTs9myw7ULgqyANf/I+vcU9p
awi11KGpS5EnY37oDzIXYXfBaLK7Yb/jlrIRozwf6HXKGbZgz16dwH6k+RugP9Jx
hrtAlhe9jCCT1wN+woksmZyqMVkvUvMzh2Y5+MB3smltn+NT6Vwq+eLPU27RxDAS
qn7oDTDceUU/ecccpqvu9Sq3ApWhNAl2EPcylDk/1Ca3qQdGTo7PuL3Qx5u7OSKp
a9SvbEJ6c7tLgbDI7FhA0BMqDrG+VGOD1IVuDhPTuQqgyfyrZxdv+dypRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8OZfQmsHLfHQ/03+M+/2KT9SEgMB8GA1UdIwQY
MBaAFAflxOS+O4y94OrpRgoRAy1qZKtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUt
NGM4ODgzMzI3YTJhLzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNmIxNzMtOTEyYy00MTUxLWJhYzUtNGM4ODgzMzI3YTJh
LzEvQi1YRTVMNDdqTDNnNnVsR0NoRURMV3BrcTNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGcnxfbc
3aOXT/jD53Q/x3AlpBgUrumtUBNqrCyA6eJjACJ0jScuRetsJy1mTmwHvjj1RoJ2
FOAJ8sEImOiMvWXNtnrXLq0O2TgKYR8/rnSZnOo7tAhIREKRddYW1/flJ/VXybMU
8oX3fB14t86Wb/J1+W3TcYD5PgTzAG1JMzftNrp8sImKzbJ3gmrnE0p+yT5VM5Ev
2Oomhs8Da4NacDlY65BsW3Dvbxzd84jNoKRHPVzGdEQyYV3XYzc5V94LMDg7fooY
LWYFlSvy5iKJWk+4+tFPa9PIWrQnLd2bEmKjnGCJdAfUIxLyl8aWJHs+UPX+VngE
0wGN6C5mccznOw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:26:26 2026 by rpki-client