Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: P6+V+5YtXCi4ceg2Sgg6AaHJ/Z+n3Jo9f7wJC7+ETJo=
Subject key identifier: 5F:04:70:CC:F5:33:64:E9:71:1F:4C:A1:95:27:B7:09:83:E2:97:E4
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01A0DFF34097CDD2E889E8B028FB3BDC924B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0B4B
Signing time: Sat 26 Sep 2026 23:00:55 +0000
Manifest this update: Sat 26 Sep 2026 23:00:55 +0000
Manifest next update: Sun 27 Sep 2026 23:00:55 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: zRnDCb0OHubsLgNK0b1EEihk2JvGGD5LvsxtUc4F3hM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:40:97:cd:d2:e8:89:e8:b0:28:fb:3b:dc:92:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Sep 26 23:00:55 2026 GMT
Not After : Sep 27 23:00:55 2026 GMT
Subject: CN=5f0470ccf53364e9711f4ca19527b70983e297e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:4b:03:ba:80:a0:fe:3c:2f:31:a1:b0:89:
0b:fd:d0:d9:23:e0:90:33:bd:b5:97:d1:82:fe:b6:
74:57:f9:b0:3b:d8:94:05:a6:6f:aa:f4:fe:dd:c1:
e8:a8:ed:e0:9c:f6:2f:78:82:d6:0d:bf:3d:ae:eb:
65:c0:5d:d5:a4:1a:28:ac:18:2f:b9:d8:a0:ee:30:
b4:4a:b4:82:3b:1a:b6:97:af:fb:49:71:78:ce:00:
61:a4:14:b4:f3:df:1e:25:8d:5a:ea:3c:3b:4e:d4:
92:7b:e7:00:e4:27:51:bb:19:f3:4a:49:39:26:be:
7f:a8:3d:fd:a1:7b:18:8c:ad:66:34:45:5e:e6:44:
cb:b8:59:f1:cb:ed:04:11:c0:2d:20:84:ce:d3:63:
76:54:83:21:0c:0c:c2:97:5d:a6:f1:a7:49:56:dd:
30:3d:cd:6f:99:78:84:ff:8c:7c:41:b6:e8:98:11:
ad:77:b8:90:c3:af:57:82:3c:6a:d7:3c:1f:d9:77:
db:d6:7a:6a:1c:d4:e1:31:7c:49:6b:cd:62:fa:6d:
b1:72:41:2f:63:72:95:14:d3:b3:c6:e1:72:1d:78:
23:c3:66:01:dc:70:17:dc:94:68:c7:58:69:5c:37:
0e:b3:dd:09:43:ae:7f:a9:7d:c5:15:84:17:a5:15:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:04:70:CC:F5:33:64:E9:71:1F:4C:A1:95:27:B7:09:83:E2:97:E4
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0e:35:6b:d8:6e:d7:37:29:03:fb:a5:66:72:d4:e1:51:15:
6e:63:bb:62:24:9d:99:4f:cd:8d:27:61:89:46:be:d0:2f:8e:
e9:a2:47:4a:f0:d8:c0:fb:f9:a3:0d:68:ea:2a:4e:af:38:00:
f5:10:d5:d0:7c:51:48:9a:e3:42:6f:20:ec:ec:04:95:98:c9:
51:f9:9c:e8:29:3f:2a:28:99:a8:77:aa:14:de:a5:96:89:b7:
68:cd:1d:5b:a3:12:cc:f5:8c:70:7d:7f:52:0b:94:c6:18:68:
5f:f9:1a:97:03:4e:8a:23:8d:94:b2:e0:2e:a3:7d:2c:ed:38:
4e:0d:a4:21:87:02:37:31:0c:1c:5f:1e:6c:ee:a4:8a:f6:5b:
b3:13:c1:b8:e7:93:f5:8f:79:26:d4:e1:7f:48:9f:3c:71:22:
e9:37:e4:cc:70:f9:0f:b4:c9:b0:b1:6e:81:9f:25:e9:41:b8:
d4:2c:1d:a0:a8:b0:53:55:76:bb:5f:0e:c1:6b:cd:7d:c5:9d:
c8:a4:c3:50:42:b6:72:b8:96:91:c2:6d:80:b1:ee:46:4a:73:
e5:e4:08:93:7b:06:59:49:4f:b3:a5:7e:64:56:38:fd:8b:42:
60:96:d2:97:57:6b:58:29:df:82:19:5d:44:9d:55:51:7b:07:
78:c5:7f:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf80CXzdLoieiwKPs73JJLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTNhMmIzZmI4M2Q4NmM3ODA2Y2MwNjYwZDgyOTExOWQ5
Mzc1YjQwHhcNMjYwOTI2MjMwMDU1WhcNMjYwOTI3MjMwMDU1WjAzMTEwLwYDVQQD
Eyg1ZjA0NzBjY2Y1MzM2NGU5NzExZjRjYTE5NTI3YjcwOTgzZTI5N2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXBLA7qAoP48LzGhsIkL/dDZI+CQ
M721l9GC/rZ0V/mwO9iUBaZvqvT+3cHoqO3gnPYveILWDb89rutlwF3VpBoorBgv
udig7jC0SrSCOxq2l6/7SXF4zgBhpBS0898eJY1a6jw7TtSSe+cA5CdRuxnzSkk5
Jr5/qD39oXsYjK1mNEVe5kTLuFnxy+0EEcAtIITO02N2VIMhDAzCl12m8adJVt0w
Pc1vmXiE/4x8QbbomBGtd7iQw69Xgjxq1zwf2Xfb1npqHNThMXxJa81i+m2xckEv
Y3KVFNOzxuFyHXgjw2YB3HAX3JRox1hpXDcOs90JQ65/qX3FFYQXpRVuRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8EcMz1M2TpcR9MoZUntwmD4pfkMB8GA1UdIwQY
MBaAFLRTorP7g9hseAbMBmDYKRGdk3W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQt
NDA2MGYyMTFmM2MzLzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9iZjc0OGQtYzRjYS00ZmQxLWE1OWQtNDA2MGYyMTFmM2Mz
LzEvdEZPaXNfdUQyR3g0QnN3R1lOZ3BFWjJUZGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALA41a9hu
1zcpA/ulZnLU4VEVbmO7YiSdmU/NjSdhiUa+0C+O6aJHSvDYwPv5ow1o6ipOrzgA
9RDV0HxRSJrjQm8g7OwElZjJUfmc6Ck/KiiZqHeqFN6llom3aM0dW6MSzPWMcH1/
UguUxhhoX/kalwNOiiONlLLgLqN9LO04Tg2kIYcCNzEMHF8ebO6kivZbsxPBuOeT
9Y95JtThf0ifPHEi6TfkzHD5D7TJsLFugZ8l6UG41CwdoKiwU1V2u18OwWvNfcWd
yKTDUEK2criWkcJtgLHuRkpz5eQIk3sGWUlPs6V+ZFY4/YtCYJbSl1drWCnfghld
RJ1VUXsHeMV/xg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:51:28 2026 by rpki-client