Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File: tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier: wwX1w7+/THHFmtpQPgk5yCHYUpbckEc1D9m55vZg+wc=
Subject key identifier: 47:33:EF:BC:87:67:88:A9:70:CE:42:36:3C:01:D0:FA:D3:23:0F:06
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A12B7B5195F9B3D7FCACE4B9899CED3A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number: 08C7
Signing time: Sun 11 Oct 2026 15:01:04 +0000
Manifest this update: Sun 11 Oct 2026 15:01:04 +0000
Manifest next update: Mon 12 Oct 2026 15:01:04 +0000
Files and hashes: 1: FAR1JGDRfBlwTrXiCrjWu-9KPYY.roa (hash: ubnjQ9mTdiJtNsVEHvSHl8U6qYQGX98XEG0kwEFpsdo=)
2: K7oY9P0OfWkHD6GX0g5pIBjAf_Y.roa (hash: yKmgSoE9rg2APN1oH0dQLOoKGASWMZwho6luI43ZQ7U=)
3: LG1ojJBrL-is7jHDUY_yDrks3fo.roa (hash: EtYSJzsIuCwlPxFXPE10satuYqBBIprVHzKYznzYCYs=)
4: OteesfxlXNW_6oy-uZPA0RjwQqs.roa (hash: BVMKBS9it+saptlczy0sxrdp/hGNaoRQGuAEe0tEzJQ=)
5: hbo0pySSCroIegSOSs5RlRjwFvg.roa (hash: rU41ZGReAnZrPd0NAsMdD2ONr+HjXb57K3ZbIW856j0=)
6: jJqmq7ctfCRljbEe-rA7H6MPeAI.roa (hash: O+1YuOF5X9Aph1d+IEQe3EcREqu8Qs7VAkwaJPtR+U0=)
7: lXgeO6sL-ZIGs1Qbu6r6hhOZ8pQ.roa (hash: M0V4xWc5XxTvzmYTKrejIX4n2xNZ52yU26YzaFysbjM=)
8: o-WKTQa_X-7__zCzj6J6YkZ_raw.roa (hash: 1ouUgQsFwXp8X5fRClo+nxWAfb/FxjwTOeZILI6XYaY=)
9: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: gsMrfe2bDAaVy3orSRYRKuO9rP1AgBNdLv7tpqMu+YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:51:95:f9:b3:d7:fc:ac:e4:b9:89:9c:ed:3a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Oct 11 15:01:04 2026 GMT
Not After : Oct 12 15:01:04 2026 GMT
Subject: CN=4733efbc876788a970ce42363c01d0fad3230f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:ac:f5:b1:c7:7f:51:8b:3d:7b:4b:c8:78:
3f:ed:26:b2:be:51:75:13:4c:7d:2d:c6:23:34:48:
49:a7:ce:5b:83:10:61:af:96:8a:c2:06:18:31:c8:
e3:68:24:b9:0b:a7:22:e0:89:86:2f:13:59:8b:cf:
57:88:33:f1:79:21:7a:75:89:c7:f9:0c:8f:1b:85:
fa:9f:68:e9:58:d4:af:4e:05:47:95:8b:2b:e2:2d:
64:bf:3e:64:d2:a3:f0:e8:ee:ce:c2:51:0c:45:ac:
ff:4c:45:20:f2:06:1a:f8:84:c0:8d:94:dc:14:d8:
71:89:2d:94:8d:42:4e:c4:52:6f:01:a1:17:f1:60:
2e:a0:9c:a6:07:26:05:bf:b2:98:d6:7c:f5:78:d5:
05:cd:3b:4a:2a:dd:9f:c0:37:c6:4f:70:3a:64:db:
16:cf:87:24:8b:d6:26:f4:48:e7:b0:3c:e4:52:ca:
1a:21:8a:5f:96:a6:2f:d8:26:03:74:63:6e:0f:50:
08:ec:6d:ae:2e:c0:86:63:68:ac:c4:05:98:8c:24:
65:68:78:21:23:59:b9:52:b1:46:c9:0e:40:31:5a:
33:36:e5:39:c9:0b:7d:dd:0e:d3:2e:52:f2:b2:45:
4b:89:6f:dc:1f:ed:e7:81:96:ca:ab:91:d5:a4:89:
cb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:EF:BC:87:67:88:A9:70:CE:42:36:3C:01:D0:FA:D3:23:0F:06
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3a:e9:41:32:51:81:4d:49:01:09:e3:aa:a8:87:e4:39:7e:
3c:62:9f:ac:a4:e7:e1:76:84:b7:ad:da:81:8b:03:47:ae:b9:
1a:e6:9b:e8:1f:7e:9e:cf:ac:67:6e:27:7f:e3:25:40:88:96:
92:e9:dc:cf:9f:f1:1d:31:e8:04:fb:d8:fd:8a:75:a0:c1:be:
16:3a:04:ed:5a:d3:81:b8:e2:1d:b2:f6:31:3c:64:c8:7c:f6:
da:29:c6:5b:c4:48:bc:6a:c5:44:16:6c:9c:20:57:dc:e2:06:
f1:57:e3:ec:61:01:ed:f9:96:0d:b0:ac:5c:67:31:6a:b8:2d:
79:69:0f:81:89:1b:f1:1c:92:d0:7e:b1:76:d6:09:86:39:49:
ef:4d:ce:61:db:6e:88:77:1d:8a:e5:5b:b5:73:32:51:69:38:
ce:b4:15:39:02:f5:e0:a4:f9:29:c3:f3:26:c5:7f:e1:cb:f5:
d3:fd:a8:c1:d5:ff:00:f5:a6:35:5f:31:d8:7a:40:31:1a:f0:
2f:95:40:65:1a:14:2c:09:7c:83:58:ab:ec:ab:9e:20:95:67:
81:f7:45:7e:16:b8:28:6e:15:83:7d:99:72:9a:4c:33:0d:24:
29:5d:ba:e2:49:e4:de:a4:83:56:05:97:f9:d5:d0:17:da:90:
0f:69:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:56:24 2026 by rpki-client