Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: gyjsuqJck0vsg7z7WB6iXhk23BAp44wdM0yxjhcX3v0=
Subject key identifier: BF:EC:21:F0:27:31:46:C7:B5:F6:65:47:1B:B3:00:CA:F2:86:B6:CD
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 01A0D4CBBA5C41742FF5077165006C2D352D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 19:01:56 +0000
Manifest this update: Thu 24 Sep 2026 19:01:56 +0000
Manifest next update: Fri 25 Sep 2026 19:01:56 +0000
Files and hashes: 1: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (hash: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=)
2: _8o003HukJtANidMUuNfF8h2iro.roa (hash: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: 66jXntiwaPdmfcDygkcrdHnIqWKK/Ryvy8cuEGt4icI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:ba:5c:41:74:2f:f5:07:71:65:00:6c:2d:35:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Sep 24 19:01:56 2026 GMT
Not After : Sep 25 19:01:56 2026 GMT
Subject: CN=bfec21f0273146c7b5f665471bb300caf286b6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:5d:67:07:46:18:e7:7f:78:76:6d:8f:e6:
d8:b5:c3:4c:4a:d1:a3:45:33:d7:bb:dd:03:16:79:
21:6a:7c:90:05:2e:a4:98:f2:42:9e:2c:32:3f:39:
91:c1:c5:ed:9e:92:f0:8e:81:9b:0b:a6:6c:31:b6:
32:bf:30:7f:82:9d:bd:76:37:a5:81:4e:34:23:1a:
ad:13:a2:86:5d:2c:24:2f:15:c3:90:8a:dd:e9:bc:
07:07:ff:09:46:76:16:9e:e5:91:b5:1c:61:db:9f:
9a:66:14:88:79:67:a8:8f:fd:c9:ce:52:16:f7:39:
aa:6f:49:9b:b4:00:08:6f:b1:11:41:22:69:93:87:
f0:2e:a6:5a:d1:e9:05:be:06:ca:b1:d9:0d:59:21:
f2:46:8f:1b:d9:66:01:26:dd:33:41:54:85:a6:78:
12:9b:7a:62:a6:f5:84:77:fd:1a:a2:a0:41:11:db:
62:ee:05:17:97:ae:8e:f0:49:d2:08:06:38:d1:83:
7d:a4:1f:45:7a:40:df:b8:64:b5:6f:9a:21:1d:f6:
56:4a:99:25:06:be:8e:2d:f1:19:21:ee:09:06:41:
eb:e6:68:81:94:a2:42:b5:d7:15:c8:2f:54:e3:82:
a0:ce:39:e2:52:25:7f:c4:e8:5a:9e:12:48:a4:55:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:EC:21:F0:27:31:46:C7:B5:F6:65:47:1B:B3:00:CA:F2:86:B6:CD
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:08:84:ee:05:9a:9a:1b:94:68:2e:42:4d:56:86:06:fc:
69:dc:2f:d4:4c:92:c3:70:53:1b:48:23:df:2a:d1:c2:ed:98:
ed:bf:e5:7c:03:b7:9d:2c:ba:ba:4d:a9:e9:77:15:51:e4:bc:
1a:02:50:c9:98:fb:18:17:fb:16:d3:38:92:b6:7a:fc:6e:54:
8e:71:71:79:e7:4c:00:7c:53:fa:48:1a:63:55:6b:44:b3:56:
2c:ee:39:ba:9c:e8:4e:f1:b2:92:41:c4:7e:cb:4b:1a:31:dc:
a2:c6:ee:14:df:bb:ed:15:81:b0:82:eb:59:8c:24:28:92:5f:
92:ab:df:46:b7:1c:62:d6:83:a5:23:56:fc:7f:ca:81:12:84:
45:17:9e:54:58:0d:6f:3e:4d:de:43:88:02:cc:59:f2:bc:8c:
50:a6:32:b9:e3:49:a5:06:9a:83:88:85:d5:4d:0e:00:c9:ff:
0f:a9:3e:cf:47:36:d3:2c:38:96:15:cf:47:ce:c9:86:93:db:
b6:57:95:26:1e:95:4b:99:a2:2f:5a:9e:e6:39:46:51:4e:99:
69:67:6c:2d:0e:f0:74:c6:b5:fd:01:02:fe:0b:72:43:4a:52:
73:25:f3:b3:c0:fd:c3:da:67:3d:94:94:28:1d:82:5a:eb:32:
b3:eb:ca:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUy7pcQXQv9QdxZQBsLTUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODNmNzg3OWMyYzc0YTExNjUyYjVlMDhhZjY0YWFjOTA4
MDBiMDQwHhcNMjYwOTI0MTkwMTU2WhcNMjYwOTI1MTkwMTU2WjAzMTEwLwYDVQQD
EyhiZmVjMjFmMDI3MzE0NmM3YjVmNjY1NDcxYmIzMDBjYWYyODZiNmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4NdZwdGGOd/eHZtj+bYtcNMStGj
RTPXu90DFnkhanyQBS6kmPJCniwyPzmRwcXtnpLwjoGbC6ZsMbYyvzB/gp29djel
gU40IxqtE6KGXSwkLxXDkIrd6bwHB/8JRnYWnuWRtRxh25+aZhSIeWeoj/3JzlIW
9zmqb0mbtAAIb7ERQSJpk4fwLqZa0ekFvgbKsdkNWSHyRo8b2WYBJt0zQVSFpngS
m3pipvWEd/0aoqBBEdti7gUXl66O8EnSCAY40YN9pB9FekDfuGS1b5ohHfZWSpkl
Br6OLfEZIe4JBkHr5miBlKJCtdcVyC9U44KgzjniUiV/xOhanhJIpFWCHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/sIfAnMUbHtfZlRxuzAMryhrbNMB8GA1UdIwQY
MBaAFK6D94ecLHShFlK14Ir2SqyQgAsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0Mzkt
NDczZDc0YTVlMjBmLzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0MzktNDczZDc0YTVlMjBm
LzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQwIhO4F
mpoblGguQk1Whgb8adwv1EySw3BTG0gj3yrRwu2Y7b/lfAO3nSy6uk2p6XcVUeS8
GgJQyZj7GBf7FtM4krZ6/G5UjnFxeedMAHxT+kgaY1VrRLNWLO45upzoTvGykkHE
fstLGjHcosbuFN+77RWBsILrWYwkKJJfkqvfRrccYtaDpSNW/H/KgRKERReeVFgN
bz5N3kOIAsxZ8ryMUKYyueNJpQaag4iF1U0OAMn/D6k+z0c20yw4lhXPR87JhpPb
tleVJh6VS5miL1qe5jlGUU6ZaWdsLQ7wdMa1/QEC/gtyQ0pScyXzs8D9w9pnPZSU
KB2CWusys+vKIQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:55:37 2026 by rpki-client