Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: NRqDQhgRZG+jdKDSg2BoTfX5fwYrACYQVBWWTAKQlDY=
Subject key identifier: 56:CF:46:AC:E7:F0:CA:FD:4B:73:E3:2E:70:A4:9C:9A:0E:E1:2A:45
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 01A13AEDE97A2D1BE88311875B6938D8E486
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 17C2
Signing time: Wed 14 Oct 2026 15:00:32 +0000
Manifest this update: Wed 14 Oct 2026 15:00:32 +0000
Manifest next update: Thu 15 Oct 2026 15:00:32 +0000
Files and hashes: 1: AWxzzyNyiEe96JGpfTTltwTSHS0.roa (hash: e990mLN/bBQ15JQILJpMpdVXqqpNaInRtBdXK82dx1E=)
2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: cPl2pfSp/0aGbQCxnUYeq6fRxjHepEktqQJDbhUAQWQ=)
3: yHLToeByeR5LXnQLDh6oCy31RMM.roa (hash: JH11seY61l0JGKEmVY9l0Ssg5gMsTcO0W459L08nH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ed:e9:7a:2d:1b:e8:83:11:87:5b:69:38:d8:e4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Oct 14 15:00:32 2026 GMT
Not After : Oct 15 15:00:32 2026 GMT
Subject: CN=56cf46ace7f0cafd4b73e32e70a49c9a0ee12a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:6a:8b:2e:2d:3c:ee:a9:69:33:a5:54:fc:
48:a6:4b:5f:00:7e:e2:28:7c:77:81:34:04:cd:64:
ba:94:5d:e9:df:6b:b3:22:30:59:01:6b:d5:47:97:
3a:26:c5:04:17:a2:de:84:dd:ea:3b:da:da:e2:81:
10:ce:0f:d3:6c:59:2c:07:83:07:b1:b8:8b:80:9a:
f4:20:72:f1:26:92:36:e7:4e:a8:87:55:70:39:d4:
ab:af:bd:16:5f:a4:99:7f:bf:2f:21:91:88:85:c9:
9d:bf:19:92:86:bd:5f:48:c9:5c:86:07:2e:46:f6:
94:4d:78:7f:19:dd:9e:c5:e1:49:5e:ff:13:fe:e4:
5f:ac:58:b8:1a:c0:d6:cd:3e:3c:f2:37:06:5b:1b:
5e:27:eb:30:63:72:5f:16:d7:83:0b:bc:3b:c5:8b:
74:ff:25:32:b0:b9:40:8f:c5:de:b6:1c:2e:92:3f:
52:e5:ec:77:2f:4d:cd:87:56:d4:ef:f6:db:34:ab:
5f:8c:3b:9f:52:9e:2a:e3:e7:a9:94:53:21:4c:8d:
67:0a:4b:61:1f:01:b9:64:e9:46:93:15:15:34:7d:
b6:71:09:0a:64:f4:7b:09:8b:f7:b6:ae:f9:40:ff:
94:aa:08:6f:ef:d2:a2:ab:c0:7f:65:71:86:43:ff:
75:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CF:46:AC:E7:F0:CA:FD:4B:73:E3:2E:70:A4:9C:9A:0E:E1:2A:45
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:ee:c1:34:46:bf:b6:98:45:78:c0:71:21:88:f4:36:f8:03:
44:0e:35:0d:64:d6:0d:d2:74:ec:c0:3f:a1:b8:8b:39:74:3f:
30:81:2d:b7:3d:b5:85:34:58:a3:ed:d3:8e:ee:fd:d3:b2:52:
46:cd:79:ae:f2:18:34:bf:19:20:73:79:06:f6:4d:cd:67:ab:
b7:53:e0:99:98:b2:d9:ca:b2:09:f6:23:a7:f1:b4:f4:7b:ef:
68:41:0f:1b:f0:a1:5b:51:c5:74:dd:16:c5:bf:2c:0b:6e:c5:
a5:66:c4:32:5a:01:9d:06:fa:80:0a:80:3e:c1:e3:90:9e:90:
8b:08:5b:4a:73:47:93:a3:83:de:ca:79:a0:99:2a:6d:ba:c9:
9a:8a:45:d0:18:9a:8b:31:93:3c:0e:d3:64:b9:b8:72:82:c3:
57:7e:e6:0e:cf:32:65:6e:c6:01:de:f2:7d:ba:e1:e2:eb:13:
dc:71:cc:6a:d7:7a:18:dc:9d:b5:07:a0:77:a5:ae:6a:9e:00:
79:7d:41:f4:33:96:f7:f4:8c:3e:40:7b:27:87:47:e2:68:b9:
12:7b:a5:d1:79:e9:79:a5:a1:50:e7:23:ca:9a:9d:fe:4b:4d:
f3:2b:43:0e:a2:d5:27:85:6d:29:fb:17:82:43:a7:77:2e:26:
ab:8f:c0:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE67el6LRvogxGHW2k42OSGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjYxMDE0MTUwMDMyWhcNMjYxMDE1MTUwMDMyWjAzMTEwLwYDVQQD
Eyg1NmNmNDZhY2U3ZjBjYWZkNGI3M2UzMmU3MGE0OWM5YTBlZTEyYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArORqiy4tPO6paTOlVPxIpktfAH7i
KHx3gTQEzWS6lF3p32uzIjBZAWvVR5c6JsUEF6LehN3qO9ra4oEQzg/TbFksB4MH
sbiLgJr0IHLxJpI2506oh1VwOdSrr70WX6SZf78vIZGIhcmdvxmShr1fSMlchgcu
RvaUTXh/Gd2exeFJXv8T/uRfrFi4GsDWzT488jcGWxteJ+swY3JfFteDC7w7xYt0
/yUysLlAj8Xethwukj9S5ex3L03Nh1bU7/bbNKtfjDufUp4q4+eplFMhTI1nCkth
HwG5ZOlGkxUVNH22cQkKZPR7CYv3tq75QP+Uqghv79Kiq8B/ZXGGQ/91TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbPRqzn8Mr9S3PjLnCknJoO4SpFMB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1+7BNEa/
tphFeMBxIYj0NvgDRA41DWTWDdJ07MA/obiLOXQ/MIEttz21hTRYo+3Tju7907JS
Rs15rvIYNL8ZIHN5BvZNzWert1PgmZiy2cqyCfYjp/G09HvvaEEPG/ChW1HFdN0W
xb8sC27FpWbEMloBnQb6gAqAPsHjkJ6QiwhbSnNHk6OD3sp5oJkqbbrJmopF0Bia
izGTPA7TZLm4coLDV37mDs8yZW7GAd7yfbrh4usT3HHMatd6GNydtQegd6Wuap4A
eX1B9DOW9/SMPkB7J4dH4mi5Enul0XnpeaWhUOcjypqd/ktN8ytDDqLVJ4VtKfsX
gkOndy4mq4/ACA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 20:40:43 2026 by rpki-client