Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: MZM//kKPK/nU75qju670TgpjberEE2s2RH7HCwYfF2k=
Subject key identifier: F9:36:6F:DD:F6:17:F8:87:0D:F5:53:A7:63:8A:F3:3E:94:0B:9D:FF
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 01A10F5F18EE1103C6CEE410927DE44CBB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 18E3
Signing time: Tue 06 Oct 2026 04:00:52 +0000
Manifest this update: Tue 06 Oct 2026 04:00:52 +0000
Manifest next update: Wed 07 Oct 2026 04:00:52 +0000
Files and hashes: 1: 6Ek0LsLg1mj-Qb0NtI_8J-61-aA.roa (hash: 1q08fwF6CUq/nV3KQpMFbHej0fa8ZaJnnjgimNzFLGk=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: l8ZMJ1F94Djw17KQgYo8jbNb+h3Q9PE3f8swpCSB0+k=)
3: WiY8Q6iW3QYsT-jcDWbVZoxBD98.roa (hash: PQnRN4tcdL81dJ2nw2tisyXhDWdu4HIpAqk7AjL30ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5f:18:ee:11:03:c6:ce:e4:10:92:7d:e4:4c:bb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Oct 6 04:00:52 2026 GMT
Not After : Oct 7 04:00:52 2026 GMT
Subject: CN=f9366fddf617f8870df553a7638af33e940b9dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:96:2e:16:31:25:dc:dd:35:2e:a7:09:29:
84:be:01:1d:40:8e:2b:55:7e:80:fd:8f:2a:cc:83:
1b:3d:e5:87:7f:6c:d6:2f:26:62:81:64:fb:44:1e:
87:8b:58:12:16:93:8a:c4:d5:29:f7:b6:c7:1e:ef:
c2:0e:28:cf:a7:ef:9a:94:0a:cd:04:d2:be:df:6b:
90:90:40:a9:86:db:d5:fb:65:4e:73:30:67:97:e6:
79:69:97:10:c2:93:cd:99:a3:01:8e:92:6d:b1:24:
04:36:fd:31:ce:5a:ab:39:90:67:4c:79:1f:f4:95:
ee:89:50:05:dd:52:c8:ee:02:cd:ad:8e:f2:f8:a2:
bc:93:ce:3f:b1:1e:59:3b:29:fe:6c:2e:2d:bc:53:
34:b4:e5:20:a3:70:e2:f8:4a:11:7d:95:14:71:35:
66:3f:cf:2d:c6:5d:5d:f4:99:25:21:8c:57:a9:cf:
9c:b9:1d:1f:af:90:33:1a:88:94:85:73:ae:db:3f:
72:42:c6:3c:46:a8:c1:c2:d8:af:8d:07:6f:fa:35:
06:ba:6e:98:eb:04:0f:42:f4:4c:b8:ee:ca:89:72:
60:f0:97:27:84:56:7b:55:b2:ec:34:cb:18:9e:8f:
1b:7a:d0:6e:f8:bf:3e:c7:f5:9b:b9:2e:6e:a8:52:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:6F:DD:F6:17:F8:87:0D:F5:53:A7:63:8A:F3:3E:94:0B:9D:FF
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:49:67:6b:20:08:d2:3d:f2:4c:8b:eb:85:57:a0:f3:48:c8:
ad:ed:cc:20:27:70:74:94:79:d9:b5:e2:a3:ca:1e:dc:a5:ca:
d0:cc:29:f5:00:db:3a:37:fe:69:1e:e3:91:47:01:b6:db:f0:
35:84:c5:08:7a:e6:d0:0d:93:5b:aa:de:a8:82:51:6c:bc:96:
40:94:7f:95:31:5d:3e:04:f0:73:74:d5:00:b1:75:09:f0:ad:
d9:70:57:d2:ae:fb:88:5f:b6:65:87:05:c0:16:1e:1c:c0:65:
01:53:39:fd:2b:1f:5c:14:b6:29:69:45:c7:9c:37:d9:ae:e4:
61:ef:b2:b5:8e:e6:7f:e0:70:42:8a:e5:81:93:68:0a:3b:e1:
5b:cc:67:56:8d:d6:bd:1c:cf:21:0e:36:7a:ee:c3:3a:13:9b:
09:f9:5e:d3:6e:21:10:ce:5b:b1:30:1b:e5:c3:66:45:d9:d6:
6a:22:32:e2:fc:b9:5f:e4:9d:b9:53:b7:b7:69:94:48:1d:5d:
5b:66:e2:cc:66:dc:51:18:35:65:2d:de:f2:c2:ca:80:9f:bb:
fc:be:3a:5c:d0:4a:75:cb:c0:42:90:ad:cc:97:91:bf:aa:f7:
03:e9:5c:23:db:a4:97:ba:0e:21:5a:4c:ee:53:fa:4d:50:6b:
b2:17:3b:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPXxjuEQPGzuQQkn3kTLubMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTQwNTdmOWVhMDE0MGNlZjdjZTQ3ODkzNjljNWNmMDFm
N2M2OGUwHhcNMjYxMDA2MDQwMDUyWhcNMjYxMDA3MDQwMDUyWjAzMTEwLwYDVQQD
EyhmOTM2NmZkZGY2MTdmODg3MGRmNTUzYTc2MzhhZjMzZTk0MGI5ZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUWWLhYxJdzdNS6nCSmEvgEdQI4r
VX6A/Y8qzIMbPeWHf2zWLyZigWT7RB6Hi1gSFpOKxNUp97bHHu/CDijPp++alArN
BNK+32uQkECphtvV+2VOczBnl+Z5aZcQwpPNmaMBjpJtsSQENv0xzlqrOZBnTHkf
9JXuiVAF3VLI7gLNrY7y+KK8k84/sR5ZOyn+bC4tvFM0tOUgo3Di+EoRfZUUcTVm
P88txl1d9JklIYxXqc+cuR0fr5AzGoiUhXOu2z9yQsY8RqjBwtivjQdv+jUGum6Y
6wQPQvRMuO7KiXJg8JcnhFZ7VbLsNMsYno8betBu+L8+x/WbuS5uqFLf3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPk2b932F/iHDfVTp2OK8z6UC53/MB8GA1UdIwQY
MBaAFE7kBX+eoBQM73zkeJNpxc8B98aOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUt
YTE2NTM1OWE2MjExLzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jZjJlYmYtMmEwOS00M2QyLWEyMjUtYTE2NTM1OWE2MjEx
LzEvVHVRRmY1NmdGQXp2Zk9SNGsybkZ6d0gzeG80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbElnayAI
0j3yTIvrhVeg80jIre3MICdwdJR52bXio8oe3KXK0Mwp9QDbOjf+aR7jkUcBttvw
NYTFCHrm0A2TW6reqIJRbLyWQJR/lTFdPgTwc3TVALF1CfCt2XBX0q77iF+2ZYcF
wBYeHMBlAVM5/SsfXBS2KWlFx5w32a7kYe+ytY7mf+BwQorlgZNoCjvhW8xnVo3W
vRzPIQ42eu7DOhObCfle024hEM5bsTAb5cNmRdnWaiIy4vy5X+SduVO3t2mUSB1d
W2bizGbcURg1ZS3e8sLKgJ+7/L46XNBKdcvAQpCtzJeRv6r3A+lcI9ukl7oOIVpM
7lP6TVBrshc7wg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 12:29:36 2026 by rpki-client