Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
File: _32KebrU-YPQxJiVr1DqigPrxw0.mft (raw, json)
Hash identifier: pRmsr0WHEDlTi1/zbPcgQqlqGO5DVW3Hq0w3T8uSjGc=
Subject key identifier: 50:98:C0:EA:3B:71:FB:5A:F2:9E:DA:F4:C0:0E:77:07:9F:51:56:F8
Authority key identifier: FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
Certificate issuer: /CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Certificate serial: 01A1DEA7DD557FFE708665E8F2A09F384AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
Manifest number: 11A9
Signing time: Sun 15 Nov 2026 10:01:45 +0000
Manifest this update: Sun 15 Nov 2026 10:01:45 +0000
Manifest next update: Mon 16 Nov 2026 10:01:45 +0000
Files and hashes: 1: OMZJTfEMX_P-o40x7sNRJUiIL4c.roa (hash: +/OiISUXHSKCG7hFmdUA41onjdMcxoyC7Y6Vt6TTSZY=)
2: YGa_r2r_wryz0f78Q6muEq3Ihr8.roa (hash: pQVv4oYm/4SbHKAIOEWLFIcaJcnYcvehUqLAA1irsTM=)
3: _32KebrU-YPQxJiVr1DqigPrxw0.crl (hash: Tu/+XIGeDOIKFq8iLNUkdAk2CvLxY3KrIcmkHhxwGRQ=)
4: f-YXM7BH83V0kvUXvW2GIs5BDg0.roa (hash: AsELevMPRLK8TdZ3qZnEEYe0IBvxlKOGzstiZBn5CSk=)
5: xbqzgM_8rHGdCCmC3aCtALvC9X0.roa (hash: VW3xB5SDLk/NU1uYM5YTvIiCQTrRqBzy1+ZJLHmDAiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:dd:55:7f:fe:70:86:65:e8:f2:a0:9f:38:4a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff7d8a79bad4f983d0c49895af50ea8a03ebc70d
Validity
Not Before: Nov 15 10:01:45 2026 GMT
Not After : Nov 16 10:01:45 2026 GMT
Subject: CN=5098c0ea3b71fb5af29edaf4c00e77079f5156f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:6e:29:c5:d0:bf:b1:85:d2:67:36:4d:a4:
cd:cb:e0:b0:91:bb:97:2a:5b:dc:2a:ce:42:90:19:
ee:92:b4:57:b2:e8:68:3d:21:5f:e8:f6:fe:92:87:
e2:ed:07:aa:5d:ca:24:b1:15:48:4d:cb:ea:ab:02:
4a:69:aa:77:23:33:d8:9e:28:fc:5d:43:12:0d:2d:
fe:bb:97:62:f2:89:9b:d1:83:f1:e7:15:a2:aa:07:
4f:c8:09:c7:09:58:83:6a:ed:64:8a:f9:0b:80:fd:
8a:1d:86:47:67:01:84:30:f1:78:82:be:69:ed:99:
a3:35:8a:74:cf:a8:22:cb:a7:8c:60:36:de:0c:94:
2c:8b:11:dc:25:c1:10:e3:d9:98:c7:b9:f2:1b:d0:
bd:32:38:46:44:4c:a4:70:91:65:d8:7e:16:a5:8e:
7a:2c:fc:b4:ab:1d:32:88:5e:9c:75:fe:70:33:16:
e5:3c:1f:b4:ee:12:d8:19:b0:d8:27:6b:db:1f:89:
aa:00:d8:23:59:ef:eb:86:86:89:bc:78:c0:50:79:
75:a9:6e:db:6f:1a:2a:48:73:7e:e1:db:44:1c:ce:
63:e2:7e:b2:78:5f:38:8a:49:0a:ff:70:1a:44:e0:
80:c3:42:4b:d0:f0:72:c6:73:a8:69:f2:c2:c7:e4:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:98:C0:EA:3B:71:FB:5A:F2:9E:DA:F4:C0:0E:77:07:9F:51:56:F8
X509v3 Authority Key Identifier:
keyid:FF:7D:8A:79:BA:D4:F9:83:D0:C4:98:95:AF:50:EA:8A:03:EB:C7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_32KebrU-YPQxJiVr1DqigPrxw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/4424ef-68aa-4b70-b2cc-0873e3994d0e/1/_32KebrU-YPQxJiVr1DqigPrxw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8e:90:5d:47:be:0e:85:e7:bf:22:a7:74:ba:f7:2d:de:16:
3f:be:7d:22:bb:b5:83:c9:7d:74:a5:2b:6a:94:d5:8f:f9:3b:
31:07:f6:22:26:1a:5a:a9:e1:68:e3:f7:3d:78:2d:3f:e4:0f:
cd:24:8c:4e:1a:26:c9:b8:7c:c1:5b:f8:7b:0d:7d:a0:8d:11:
b9:cd:a4:93:1f:2d:2e:f0:ec:ae:d3:4e:25:75:8a:52:7b:8c:
0a:49:ad:df:5f:86:5f:5c:e2:89:ef:ac:8f:e6:20:f8:d3:12:
ae:65:e4:3d:c4:85:ee:8c:9a:1e:81:6a:15:9d:5f:69:da:cb:
74:92:f5:2e:a7:84:2e:11:ab:ce:f7:c0:af:2e:7d:12:fc:eb:
57:c6:b8:c4:e1:77:c3:a0:fd:6b:89:f8:78:38:d4:78:9c:71:
df:eb:38:c5:9c:6f:36:ba:29:c9:5d:40:39:cb:90:69:af:4b:
0b:a6:9f:ed:08:1d:7f:43:8f:37:61:a5:55:f2:26:82:84:d6:
4e:50:38:ab:99:8c:e1:38:ec:12:e7:40:fb:f0:8a:0e:22:6d:
ba:7e:28:5e:e3:92:f5:e4:a1:ae:dc:be:d5:58:dc:9d:05:5a:
e2:09:4f:d9:07:2f:ee:af:cb:79:dd:f2:49:1a:c7:5e:1f:80:
1b:d6:a7:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep91Vf/5whmXo8qCfOErgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmN2Q4YTc5YmFkNGY5ODNkMGM0OTg5NWFmNTBlYThhMDNl
YmM3MGQwHhcNMjYxMTE1MTAwMTQ1WhcNMjYxMTE2MTAwMTQ1WjAzMTEwLwYDVQQD
Eyg1MDk4YzBlYTNiNzFmYjVhZjI5ZWRhZjRjMDBlNzcwNzlmNTE1NmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOZuKcXQv7GF0mc2TaTNy+CwkbuX
KlvcKs5CkBnukrRXsuhoPSFf6Pb+kofi7QeqXcoksRVITcvqqwJKaap3IzPYnij8
XUMSDS3+u5di8omb0YPx5xWiqgdPyAnHCViDau1kivkLgP2KHYZHZwGEMPF4gr5p
7ZmjNYp0z6giy6eMYDbeDJQsixHcJcEQ49mYx7nyG9C9MjhGREykcJFl2H4WpY56
LPy0qx0yiF6cdf5wMxblPB+07hLYGbDYJ2vbH4mqANgjWe/rhoaJvHjAUHl1qW7b
bxoqSHN+4dtEHM5j4n6yeF84ikkK/3AaROCAw0JL0PByxnOoafLCx+RAxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCYwOo7cfta8p7a9MAOdwefUVb4MB8GA1UdIwQY
MBaAFP99inm61PmD0MSYla9Q6ooD68cNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2Mt
MDg3M2UzOTk0ZDBlLzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi80NDI0ZWYtNjhhYS00YjcwLWIyY2MtMDg3M2UzOTk0ZDBl
LzEvXzMyS2ViclUtWVBReEppVnIxRHFpZ1ByeHcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP46QXUe+
DoXnvyKndLr3Ld4WP759Iru1g8l9dKUrapTVj/k7MQf2IiYaWqnhaOP3PXgtP+QP
zSSMThomybh8wVv4ew19oI0Ruc2kkx8tLvDsrtNOJXWKUnuMCkmt31+GX1ziie+s
j+Yg+NMSrmXkPcSF7oyaHoFqFZ1fadrLdJL1LqeELhGrzvfAry59EvzrV8a4xOF3
w6D9a4n4eDjUeJxx3+s4xZxvNropyV1AOcuQaa9LC6af7Qgdf0OPN2GlVfImgoTW
TlA4q5mM4TjsEudA+/CKDiJtun4oXuOS9eShrty+1VjcnQVa4glP2Qcv7q/Led3y
SRrHXh+AG9anrQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:36:17 2026 by rpki-client