Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json)
Hash identifier: IlEEmRBrHGm/g1OgVj2pxVrTMfQsePdmEFxIfY9kheE=
Subject key identifier: 84:CB:D6:B4:DF:2F:D3:85:B4:72:51:2C:8D:A5:15:7E:61:9E:38:42
Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Certificate serial: 01A0D315532A707BC93A0CFE385B1D890889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
Manifest number: 1944
Signing time: Thu 24 Sep 2026 11:03:04 +0000
Manifest this update: Thu 24 Sep 2026 11:03:04 +0000
Manifest next update: Fri 25 Sep 2026 11:03:04 +0000
Files and hashes: 1: 7H6l8W7mloQmdCFME5bjkjpVqlI.roa (hash: T59Tl9zcDPQTjILJPoiX/wQPlxPSK4JPOrKNgwU40yY=)
2: JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa (hash: +WZonE26u6Ny7SxSfdG+AH9dSkHMv7bOOSC0aT4GGz8=)
3: qPRMij18b3UBdhNaWj9X6XYBXVk.roa (hash: FnJYS8FAenTkSU7Qc1cYhhd/LFBxGNSv7vOsAQbJDN8=)
4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: tyO3t4Zb3+W4nM4203rYl+CEf8HFCeIsKUpMlFg+wVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:53:2a:70:7b:c9:3a:0c:fe:38:5b:1d:89:08:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a
Validity
Not Before: Sep 24 11:03:04 2026 GMT
Not After : Sep 25 11:03:04 2026 GMT
Subject: CN=84cbd6b4df2fd385b472512c8da5157e619e3842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:da:23:66:f9:45:fc:5b:3a:42:a8:74:d0:90:
55:b4:b1:79:33:97:d4:ef:ef:b0:72:20:71:bd:cf:
86:e3:22:1c:69:76:ba:55:76:8e:b7:3b:a3:39:01:
81:78:43:35:2c:fb:9e:a5:c6:87:82:fb:45:88:02:
bf:29:c8:8a:ea:5a:a3:83:20:7f:61:99:79:3c:f3:
31:ef:a1:06:dd:1c:36:a4:ef:5e:3b:b3:36:dc:50:
07:c8:d1:4e:82:a1:e0:38:c2:d1:07:62:68:60:e7:
c0:55:40:06:14:28:b2:64:58:c9:63:61:e5:31:97:
c5:92:ba:38:e6:4b:26:81:c3:b2:15:d9:07:37:01:
02:1d:43:72:21:53:dd:d8:51:da:b9:04:94:e5:e4:
40:e1:f0:7d:3c:04:f4:53:46:0b:4b:dd:9a:7b:6a:
22:81:a1:ca:d0:ff:80:e4:61:f1:60:0e:e9:8c:47:
2c:5f:69:94:6d:48:22:f4:37:be:4c:22:4c:54:c7:
eb:d9:5f:15:70:41:5b:35:92:95:50:53:e3:a2:21:
9f:a9:cc:ed:93:ed:ed:39:f1:b8:69:ef:4d:92:4f:
64:63:2c:64:f5:ab:88:8c:c3:5e:f7:5c:92:89:cd:
2c:3d:fb:25:03:19:fe:8d:eb:b4:11:bf:e4:de:aa:
76:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CB:D6:B4:DF:2F:D3:85:B4:72:51:2C:8D:A5:15:7E:61:9E:38:42
X509v3 Authority Key Identifier:
keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:6b:7e:5b:80:77:92:91:54:e4:db:b9:4e:de:5a:5d:e6:8f:
a9:46:34:de:f6:16:2f:6b:1c:7c:fc:3e:4f:c4:22:25:b2:88:
ec:8a:2e:69:95:e9:b9:90:67:7e:6f:6b:02:06:20:b7:96:a6:
0c:f4:d8:d0:ac:6f:3c:03:c0:f2:8a:12:5b:a7:79:7e:2a:a9:
63:36:e7:d9:30:68:57:c7:20:9c:18:b3:78:c4:96:4c:b3:51:
03:2c:14:6d:52:f3:ed:dd:39:f7:5e:5d:ce:06:94:56:85:ec:
0f:1f:cb:61:db:98:29:f1:33:58:e4:bb:60:3d:e6:0b:ba:16:
ec:20:9f:98:8a:32:fe:28:f1:27:c9:8a:b8:8c:06:f6:bd:65:
8a:df:ea:f3:57:a8:0b:2b:50:dc:db:f5:be:69:6d:8d:b1:ae:
fc:df:8f:e5:f6:33:88:85:60:ea:da:43:c3:09:4d:b9:bb:77:
20:ad:6e:9f:ba:af:2f:af:f7:2c:53:84:12:2d:16:b7:01:e2:
59:4f:00:88:4e:d0:2a:3a:a1:7f:ec:e5:c4:17:75:2d:a0:ae:
45:27:9d:50:bc:d7:16:1e:db:d6:97:c1:dc:06:32:f4:d5:74:
c7:bc:8e:8b:74:e9:8e:fb:a6:17:87:4b:06:88:b0:b1:56:42:
05:d3:74:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFVMqcHvJOgz+OFsdiQiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm
NjIyNGEwHhcNMjYwOTI0MTEwMzA0WhcNMjYwOTI1MTEwMzA0WjAzMTEwLwYDVQQD
Eyg4NGNiZDZiNGRmMmZkMzg1YjQ3MjUxMmM4ZGE1MTU3ZTYxOWUzODQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dojZvlF/Fs6Qqh00JBVtLF5M5fU
7++wciBxvc+G4yIcaXa6VXaOtzujOQGBeEM1LPuepcaHgvtFiAK/KciK6lqjgyB/
YZl5PPMx76EG3Rw2pO9eO7M23FAHyNFOgqHgOMLRB2JoYOfAVUAGFCiyZFjJY2Hl
MZfFkro45ksmgcOyFdkHNwECHUNyIVPd2FHauQSU5eRA4fB9PAT0U0YLS92ae2oi
gaHK0P+A5GHxYA7pjEcsX2mUbUgi9De+TCJMVMfr2V8VcEFbNZKVUFPjoiGfqczt
k+3tOfG4ae9Nkk9kYyxk9auIjMNe91ySic0sPfslAxn+jeu0Eb/k3qp2OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITL1rTfL9OFtHJRLI2lFX5hnjhCMB8GA1UdIwQY
MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt
YmE1MTMyM2RiNGU1LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1
LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2t+W4B3
kpFU5Nu5Tt5aXeaPqUY03vYWL2scfPw+T8QiJbKI7IouaZXpuZBnfm9rAgYgt5am
DPTY0KxvPAPA8ooSW6d5fiqpYzbn2TBoV8cgnBizeMSWTLNRAywUbVLz7d05915d
zgaUVoXsDx/LYduYKfEzWOS7YD3mC7oW7CCfmIoy/ijxJ8mKuIwG9r1lit/q81eo
CytQ3Nv1vmltjbGu/N+P5fYziIVg6tpDwwlNubt3IK1un7qvL6/3LFOEEi0WtwHi
WU8AiE7QKjqhf+zlxBd1LaCuRSedULzXFh7b1pfB3AYy9NV0x7yOi3TpjvumF4dL
BoiwsVZCBdN0AQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:51:14 2026 by rpki-client