Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: sKNGSZyhCnFJ3E6dq/OC17TJWA/f0/sd4bk2B4uW0IY=
Subject key identifier: AA:AA:C5:FD:61:B5:73:A0:C6:79:6B:5F:3B:36:50:D3:61:90:9B:60
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 01A10EBA21AA8692989B44BCC236854129CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 1A9E
Signing time: Tue 06 Oct 2026 01:00:41 +0000
Manifest this update: Tue 06 Oct 2026 01:00:41 +0000
Manifest next update: Wed 07 Oct 2026 01:00:41 +0000
Files and hashes: 1: 0MnT-Cev0aWfox9D3TA-NvqEMlk.roa (hash: JJLpUG+0ObMqR5bxSAi6saPQ/DL3PUHcYLY29JhBmbE=)
2: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
3: 4BHAHtAhc28ZrQwUD5OHuec1Ir8.roa (hash: 0iGZlpXjvTxGNf9N3a9R/JttWSb6ffwtMSks1EBv2mQ=)
4: 4qWGLPeV9cfuGGpVtJBLff_UhD4.roa (hash: fsCbic0Uc+tcg0uG7d9ay2R7taJTtXFIv1SOgaMPRbM=)
5: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
6: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: SdXd1gJf6EKV22xkcpY/mDsrrH3mpwjei/OcDV52S9U=)
7: jLoeQ1ou0WBg9J7CvjX-GemJzOc.roa (hash: l5EAwU3ekmbrZBP06TeMqr40qf//w4QSp1sb+SkDG2I=)
8: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ba:21:aa:86:92:98:9b:44:bc:c2:36:85:41:29:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Oct 6 01:00:41 2026 GMT
Not After : Oct 7 01:00:41 2026 GMT
Subject: CN=aaaac5fd61b573a0c6796b5f3b3650d361909b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e9:60:bb:2d:39:7c:8c:d5:37:2f:47:81:91:
fa:ac:b8:ef:86:26:4b:ba:e8:65:c2:34:bc:96:1a:
23:69:1a:8d:53:4d:62:f2:b3:a3:5e:55:05:92:a6:
02:c0:e5:ce:4a:b0:ec:55:5e:ac:f1:0b:65:aa:d2:
ca:71:6e:aa:fb:80:af:6c:10:ce:60:78:b0:56:b5:
43:af:8d:06:15:59:8b:e4:b7:8d:9f:06:dc:e1:0e:
d4:68:ed:5e:84:3c:45:fc:81:1f:bd:2a:48:a0:55:
5b:c2:91:a4:4d:90:97:fa:4f:ea:4b:2d:55:95:08:
e7:e6:ea:0c:82:9d:07:a8:fc:9a:c9:84:66:82:f9:
5e:b5:b7:5c:b2:c6:04:d4:49:33:09:06:36:1a:7e:
81:40:91:9b:bd:d5:db:6f:8e:f1:4f:c5:16:2f:9c:
ea:0e:83:c3:81:be:3f:44:96:2a:c1:12:3b:f3:39:
2b:88:f6:77:a9:6f:9f:b9:16:27:21:27:e7:37:8f:
52:70:57:78:b2:97:71:45:27:52:9a:20:b4:76:2b:
83:af:5c:2c:7a:60:76:be:a4:9e:34:7f:6f:17:ad:
0c:ca:d1:41:6c:79:ec:a4:90:4a:e2:d6:5a:a2:07:
5e:c7:66:bd:5d:24:b4:45:6a:3f:4b:00:6d:66:35:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AA:C5:FD:61:B5:73:A0:C6:79:6B:5F:3B:36:50:D3:61:90:9B:60
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:24:dc:4e:f5:67:d0:65:db:67:a2:73:7f:fe:fb:42:50:f7:
88:42:12:30:29:1a:9e:40:f6:ae:15:46:69:74:b4:6b:ad:7a:
30:28:3c:45:2e:05:6b:39:f3:d5:00:9a:d1:28:c3:e2:65:eb:
3c:0e:3e:65:4b:6c:d9:1b:0e:fc:ed:d3:b7:d8:94:5e:b5:d4:
5d:12:1b:35:cf:fd:f7:5b:20:e5:4b:f3:07:ad:99:77:01:77:
a3:48:37:d3:9d:b1:37:96:aa:b2:dc:da:a5:0b:88:f8:59:dc:
a8:37:84:25:31:36:d9:dc:d5:43:cc:06:36:8c:76:12:64:05:
39:59:4f:a6:6b:53:d2:d6:d3:1f:d3:6f:8c:95:b9:a4:87:b4:
b1:3f:c9:cc:1b:a0:32:e8:2a:54:c2:d4:e3:27:81:8e:1d:8e:
a7:17:d6:4b:01:7d:87:5d:79:5c:b8:d5:13:bd:1a:24:96:5c:
7c:96:24:b7:29:99:ae:8f:74:eb:ef:8b:37:ce:2e:fa:81:1d:
05:5f:f6:c6:7d:33:16:55:f7:53:50:3a:06:63:42:69:ae:f0:
e6:2c:0a:5e:af:66:9e:17:c5:75:ce:9f:56:21:71:db:24:89:
7f:13:b7:40:78:59:70:b7:af:78:06:d6:0a:aa:ca:99:ac:ff:
d4:68:5b:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOuiGqhpKYm0S8wjaFQSnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5
MDBhNzYwHhcNMjYxMDA2MDEwMDQxWhcNMjYxMDA3MDEwMDQxWjAzMTEwLwYDVQQD
EyhhYWFhYzVmZDYxYjU3M2EwYzY3OTZiNWYzYjM2NTBkMzYxOTA5YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+lguy05fIzVNy9HgZH6rLjvhiZL
uuhlwjS8lhojaRqNU01i8rOjXlUFkqYCwOXOSrDsVV6s8QtlqtLKcW6q+4CvbBDO
YHiwVrVDr40GFVmL5LeNnwbc4Q7UaO1ehDxF/IEfvSpIoFVbwpGkTZCX+k/qSy1V
lQjn5uoMgp0HqPyayYRmgvletbdcssYE1EkzCQY2Gn6BQJGbvdXbb47xT8UWL5zq
DoPDgb4/RJYqwRI78zkriPZ3qW+fuRYnISfnN49ScFd4spdxRSdSmiC0diuDr1ws
emB2vqSeNH9vF60MytFBbHnspJBK4tZaogdex2a9XSS0RWo/SwBtZjUoGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqqxf1htXOgxnlrXzs2UNNhkJtgMB8GA1UdIwQY
MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt
ODlhY2UzODIyMGZiLzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi
LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCTcTvVn
0GXbZ6Jzf/77QlD3iEISMCkankD2rhVGaXS0a616MCg8RS4Faznz1QCa0SjD4mXr
PA4+ZUts2RsO/O3Tt9iUXrXUXRIbNc/991sg5UvzB62ZdwF3o0g3052xN5aqstza
pQuI+FncqDeEJTE22dzVQ8wGNox2EmQFOVlPpmtT0tbTH9NvjJW5pIe0sT/JzBug
MugqVMLU4yeBjh2OpxfWSwF9h115XLjVE70aJJZcfJYktymZro906++LN84u+oEd
BV/2xn0zFlX3U1A6BmNCaa7w5iwKXq9mnhfFdc6fViFx2ySJfxO3QHhZcLeveAbW
CqrKmaz/1GhbgA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 11:56:50 2026 by rpki-client