Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: fEo+iVY0ku8npUcLm3GnM4gaWmOruAemh6nOwB/BmPk=
Subject key identifier: 31:E9:9A:A2:DB:08:96:84:6B:62:68:27:0E:12:C4:B3:61:49:FF:D0
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 01A146F29C409A14252FAA77F38D60FA361B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 09F3
Signing time: Fri 16 Oct 2026 23:01:06 +0000
Manifest this update: Fri 16 Oct 2026 23:01:06 +0000
Manifest next update: Sat 17 Oct 2026 23:01:06 +0000
Files and hashes: 1: F5-0m80tGgQaB6VZO47ty9lw_m0.roa (hash: oQoBwhHoNc0uwJ0ShH4VE+ATyTC8Z15nDhm83FZUfmE=)
2: snDtm5EPq4bt8uwg0uwMS4ldr3M.roa (hash: Re/iBzYv9n7wH6AvwpA38RzBVI5qHPbHIdU0N2m905E=)
3: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: mbpjmly8iZXD6WNIy/D/EeBUAUgVmH0REeZsdqedslQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:f2:9c:40:9a:14:25:2f:aa:77:f3:8d:60:fa:36:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Oct 16 23:01:06 2026 GMT
Not After : Oct 17 23:01:06 2026 GMT
Subject: CN=31e99aa2db0896846b6268270e12c4b36149ffd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:7c:ac:fc:14:0a:61:49:5b:22:62:7a:0f:
5b:2f:2e:b0:d5:6e:ec:e9:a4:1e:46:55:34:c9:78:
56:80:18:2c:67:1d:e3:39:08:bc:44:4b:83:a4:d5:
d4:fb:10:75:6b:21:23:b0:88:f7:38:38:ac:fe:60:
71:ce:8d:e8:11:ba:51:37:1f:ed:a1:3f:a5:b4:df:
80:f2:1f:bc:10:64:51:ab:78:3c:8d:5b:c8:1c:48:
c0:f5:7b:53:e7:aa:d4:1c:c2:f8:ff:a5:44:40:b0:
5c:b7:16:dd:01:1e:ac:9e:43:a0:94:e8:1f:8a:3d:
11:63:27:02:28:09:b8:98:ac:67:0c:20:08:54:bb:
13:f1:a7:5b:48:76:57:f6:4b:e0:78:0e:b1:77:99:
e5:1a:f7:c5:2f:32:8e:b4:57:85:1a:d1:18:e5:63:
be:a5:1e:a4:38:75:70:86:58:e4:de:31:ff:df:0f:
e7:4a:52:f6:a8:a7:ca:d9:fe:b5:17:70:72:e2:cd:
9f:dc:d5:ff:72:45:58:a5:60:8d:62:33:cd:d4:6f:
93:5f:4c:c7:ad:a5:1c:7b:63:af:9b:39:ed:f8:24:
b7:ae:f0:0a:4e:06:34:23:fb:28:f5:ab:73:1b:bf:
c4:05:43:b4:6e:b4:d2:14:82:a2:ab:cc:55:f7:fb:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E9:9A:A2:DB:08:96:84:6B:62:68:27:0E:12:C4:B3:61:49:FF:D0
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:cf:2a:2d:de:4b:f9:de:3d:8f:b3:f4:bf:78:b4:c1:f5:
66:b5:1d:13:82:17:ca:2a:50:1d:c6:ba:54:b8:e6:eb:02:f6:
3c:f1:19:da:c1:91:e5:3c:5c:11:3e:fb:70:ef:6b:4e:6b:86:
88:09:56:ac:0c:ac:6e:98:db:e1:3e:6a:9c:91:43:c8:20:e2:
12:db:9a:04:d4:61:a9:19:2b:1b:78:44:46:9a:c3:6a:0d:a1:
91:be:9c:38:ed:66:a6:58:e0:42:b8:a0:50:8c:46:80:4a:48:
bd:61:59:3e:2e:93:c1:c4:d6:5c:ed:30:61:59:ea:cf:b1:61:
a0:24:68:60:40:d5:65:95:e0:36:65:ad:95:51:33:22:85:1d:
76:8d:dc:c1:7d:fa:fa:92:60:1c:00:6e:57:92:e9:f4:8c:5a:
56:7b:f7:13:d3:b1:b0:c4:20:6d:e6:f0:bc:1e:40:d3:c3:45:
92:a9:ae:68:2f:5a:88:35:01:e1:bc:3a:f8:dc:b7:2b:af:2f:
07:47:c2:ec:93:58:85:86:0f:f7:9a:5b:26:37:e0:74:3b:e3:
5d:75:83:ac:26:41:51:e1:83:29:17:32:86:be:4c:0f:dd:5c:
d2:85:a7:75:91:b5:df:11:bb:05:f1:d2:db:09:e7:71:d9:73:
f6:4d:84:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFG8pxAmhQlL6p3841g+jYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YzgxNGZmY2E1MzEwODYyYTIyMjRmMGFmZDkwY2FhOTZh
YzBiNTQwHhcNMjYxMDE2MjMwMTA2WhcNMjYxMDE3MjMwMTA2WjAzMTEwLwYDVQQD
EygzMWU5OWFhMmRiMDg5Njg0NmI2MjY4MjcwZTEyYzRiMzYxNDlmZmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg98rPwUCmFJWyJieg9bLy6w1W7s
6aQeRlU0yXhWgBgsZx3jOQi8REuDpNXU+xB1ayEjsIj3ODis/mBxzo3oEbpRNx/t
oT+ltN+A8h+8EGRRq3g8jVvIHEjA9XtT56rUHML4/6VEQLBctxbdAR6snkOglOgf
ij0RYycCKAm4mKxnDCAIVLsT8adbSHZX9kvgeA6xd5nlGvfFLzKOtFeFGtEY5WO+
pR6kOHVwhljk3jH/3w/nSlL2qKfK2f61F3By4s2f3NX/ckVYpWCNYjPN1G+TX0zH
raUce2Ovmznt+CS3rvAKTgY0I/so9atzG7/EBUO0brTSFIKiq8xV9/uGpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHpmqLbCJaEa2JoJw4SxLNhSf/QMB8GA1UdIwQY
MBaAFLTIFP/KUxCGKiIk8K/ZDKqWrAtUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAt
ZjQ2N2IyZjQyYWY2LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xYWFlNDUtZjZiZS00MDFjLWIzZDAtZjQ2N2IyZjQyYWY2
LzEvdE1nVV84cFRFSVlxSWlUd3I5a01xcGFzQzFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrXPKi3e
S/nePY+z9L94tMH1ZrUdE4IXyipQHca6VLjm6wL2PPEZ2sGR5TxcET77cO9rTmuG
iAlWrAysbpjb4T5qnJFDyCDiEtuaBNRhqRkrG3hERprDag2hkb6cOO1mpljgQrig
UIxGgEpIvWFZPi6TwcTWXO0wYVnqz7FhoCRoYEDVZZXgNmWtlVEzIoUddo3cwX36
+pJgHABuV5Lp9IxaVnv3E9OxsMQgbebwvB5A08NFkqmuaC9aiDUB4bw6+Ny3K68v
B0fC7JNYhYYP95pbJjfgdDvjXXWDrCZBUeGDKRcyhr5MD91c0oWndZG13xG7BfHS
2wnncdlz9k2ElA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 06:21:59 2026 by rpki-client