Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: 9sDkDWVLdIdfs5y8chMIKLB7odKqaIoh54hdA5HUJgo=
Subject key identifier: AE:14:16:F3:60:53:0E:B5:42:FA:87:15:37:8B:E3:26:09:15:85:59
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 01A110A98453A875FB368AFC4A6F9434F640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0F89
Signing time: Tue 06 Oct 2026 10:01:47 +0000
Manifest this update: Tue 06 Oct 2026 10:01:47 +0000
Manifest next update: Wed 07 Oct 2026 10:01:47 +0000
Files and hashes: 1: 3GwgcAPKG43MCPD8y9300VUUE7U.roa (hash: InZ5p01xw0MRhLMDOeL96L2077Wx0d7vpVCiYPBd65g=)
2: IGazZEaa03q0gZwkZa-a01KbsAE.roa (hash: kHgUBuHcjhycij9YJiSSXrr0v5v65zQmDRpctF0dSM8=)
3: YR_Sklpw1rT1jn14ENZmY_YlgSc.roa (hash: a6i5iaFNJsMyMSeoRuHDFzGc9ROq7AMhUx/2K/zffhI=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: MtqoLTP2Zp5HzuK6HNK/YGgC617pgnQIuUrN85Z/qRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a9:84:53:a8:75:fb:36:8a:fc:4a:6f:94:34:f6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Oct 6 10:01:47 2026 GMT
Not After : Oct 7 10:01:47 2026 GMT
Subject: CN=ae1416f360530eb542fa8715378be32609158559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:c9:5a:42:24:f7:2e:2d:bd:9f:10:1a:77:
d2:57:c8:c4:8a:c5:f5:f8:ea:40:18:3c:c2:89:bf:
97:06:1e:6e:4e:d2:68:c3:05:10:1c:f4:93:3f:0d:
84:76:26:ad:9c:97:3e:34:bb:45:4b:13:50:f4:87:
dd:6f:dc:db:aa:b7:54:20:7c:2a:15:24:4b:e4:73:
a4:3f:e9:e9:9e:5b:78:97:4f:08:4f:71:73:8c:7c:
7a:91:0a:81:77:3a:05:2e:bf:85:46:3b:53:ff:84:
bb:f3:4d:b3:3a:42:64:5c:aa:9b:9b:23:b2:45:b5:
d1:be:0a:35:03:6d:a3:61:99:20:2d:fa:09:67:5b:
8b:b2:69:91:5a:6c:72:ff:46:a0:2c:f6:e5:08:27:
16:fb:2d:3b:74:9b:20:b2:cd:f4:e7:5b:71:34:3c:
9e:4c:b9:56:65:5e:da:12:59:f3:12:e7:25:7e:c9:
66:d9:86:a5:fc:84:76:dc:5a:17:21:c3:83:d8:9d:
83:7e:96:ed:e1:31:dd:ec:97:d6:f7:2b:3e:4f:a2:
98:02:28:96:d8:f0:ef:5e:fe:78:c1:da:0f:f1:eb:
f3:6a:34:c2:6e:8f:3d:83:96:ef:c7:8e:a9:53:fc:
5b:b0:fd:61:cc:f5:aa:cf:55:3a:e0:5a:f7:af:ee:
a1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:14:16:F3:60:53:0E:B5:42:FA:87:15:37:8B:E3:26:09:15:85:59
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0f:01:8c:e7:c1:9e:68:fb:25:4d:81:65:a1:c4:9b:6f:2c:
97:1b:bd:ce:d6:8b:1a:d2:a2:dc:5a:10:43:be:1a:2b:52:0f:
5b:f3:6c:c5:50:f4:68:e8:47:3b:33:b3:25:6a:0e:bf:9a:de:
e1:70:41:b7:c5:80:b8:61:6e:1c:c8:39:e5:1b:4a:00:d8:8b:
05:63:d2:07:6b:ae:76:16:db:88:dc:ed:3f:8f:ca:6a:50:6b:
cd:0a:a0:8c:65:16:72:65:d6:b4:7b:3c:ae:0c:64:0b:8b:f5:
7d:79:c4:32:fc:04:b8:bf:2e:2e:5f:ea:14:a9:3c:95:48:7a:
86:dc:a2:e0:08:6c:f5:73:50:90:27:04:79:41:83:af:34:15:
9f:9b:b8:f4:4f:14:15:51:97:65:22:2c:68:0f:24:3a:9c:30:
96:46:43:16:42:76:73:0b:57:cb:4c:6f:88:ee:64:8e:31:5e:
d4:30:f7:16:14:42:b9:f7:00:f1:f1:1a:fc:4c:fa:c0:e3:ef:
97:b4:f9:9c:22:1f:8a:bb:7a:ec:56:c2:84:87:d5:6e:79:47:
66:c0:f8:94:f0:47:0e:70:b6:45:7b:ac:45:4f:09:68:11:95:
4e:48:13:8f:99:3b:02:a6:ea:27:54:a1:31:c5:06:1e:5a:14:
3a:2a:d4:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQqYRTqHX7Nor8Sm+UNPZAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOGVkMzNiNzBiZTZjYzIwYzg5ZmJiYWM3N2E1OWNhM2I0
YzA5MzQwHhcNMjYxMDA2MTAwMTQ3WhcNMjYxMDA3MTAwMTQ3WjAzMTEwLwYDVQQD
EyhhZTE0MTZmMzYwNTMwZWI1NDJmYTg3MTUzNzhiZTMyNjA5MTU4NTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0nJWkIk9y4tvZ8QGnfSV8jEisX1
+OpAGDzCib+XBh5uTtJowwUQHPSTPw2EdiatnJc+NLtFSxNQ9Ifdb9zbqrdUIHwq
FSRL5HOkP+npnlt4l08IT3FzjHx6kQqBdzoFLr+FRjtT/4S7802zOkJkXKqbmyOy
RbXRvgo1A22jYZkgLfoJZ1uLsmmRWmxy/0agLPblCCcW+y07dJsgss3051txNDye
TLlWZV7aElnzEuclfslm2Yal/IR23FoXIcOD2J2Dfpbt4THd7JfW9ys+T6KYAiiW
2PDvXv54wdoP8evzajTCbo89g5bvx46pU/xbsP1hzPWqz1U64Fr3r+6hdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4UFvNgUw61QvqHFTeL4yYJFYVZMB8GA1UdIwQY
MBaAFK6O0ztwvmzCDIn7usd6Wco7TAk0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUt
MDRkYmM5YWMxNDQ0LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNzFkOWYtZjFkYS00MDBhLWI0ODUtMDRkYmM5YWMxNDQ0
LzEvcm83VE8zQy1iTUlNaWZ1NngzcFp5anRNQ1RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnw8BjOfB
nmj7JU2BZaHEm28slxu9ztaLGtKi3FoQQ74aK1IPW/NsxVD0aOhHOzOzJWoOv5re
4XBBt8WAuGFuHMg55RtKANiLBWPSB2uudhbbiNztP4/KalBrzQqgjGUWcmXWtHs8
rgxkC4v1fXnEMvwEuL8uLl/qFKk8lUh6htyi4Ahs9XNQkCcEeUGDrzQVn5u49E8U
FVGXZSIsaA8kOpwwlkZDFkJ2cwtXy0xviO5kjjFe1DD3FhRCufcA8fEa/Ez6wOPv
l7T5nCIfirt67FbChIfVbnlHZsD4lPBHDnC2RXusRU8JaBGVTkgTj5k7AqbqJ1Sh
McUGHloUOirUNA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:58:40 2026 by rpki-client