Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File: mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier: 3uLk8YoPD5cB/nCEQkhkEY1InHRpX6qKdJ6frlnJWso=
Subject key identifier: 5E:CC:8A:7E:C1:57:E5:CA:C8:90:71:09:CC:B6:27:B8:70:FF:F4:5D
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer: /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial: 01A12A69004AD00EEA616AAF2DD46D248939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number: 1A2F
Signing time: Sun 11 Oct 2026 10:01:26 +0000
Manifest this update: Sun 11 Oct 2026 10:01:26 +0000
Manifest next update: Mon 12 Oct 2026 10:01:26 +0000
Files and hashes: 1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: YvIpAYYB7GSSEfn0TcGjN10L1PihJD5L4wUEw3FcksA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:69:00:4a:d0:0e:ea:61:6a:af:2d:d4:6d:24:89:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Validity
Not Before: Oct 11 10:01:26 2026 GMT
Not After : Oct 12 10:01:26 2026 GMT
Subject: CN=5ecc8a7ec157e5cac8907109ccb627b870fff45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:8e:f3:6b:a8:d2:d1:15:cc:08:e9:9f:d6:
b7:ab:47:3f:59:18:75:cd:5e:04:86:15:54:00:f2:
10:0d:3f:82:4b:c8:28:16:b7:9f:d0:0a:3c:23:02:
a6:e7:9e:bd:6f:68:95:23:f7:ed:dc:63:21:c5:22:
66:0b:b1:9a:42:a5:c3:2a:24:77:68:12:45:c2:fc:
ef:3a:e6:6d:ef:a8:24:10:a9:12:62:3d:fa:d5:92:
65:8a:ad:25:a2:12:68:97:33:6f:d0:1e:6f:56:6a:
48:0b:1a:52:a5:28:80:03:1f:d9:ab:15:ce:f6:a2:
74:1e:75:91:50:d0:fe:67:72:9d:89:50:57:12:c9:
06:15:9a:95:1c:f9:a5:a1:58:93:0e:79:0c:0b:cf:
51:39:44:1d:4d:11:c8:ee:e9:92:23:ef:ff:e2:16:
57:2a:a6:3f:a3:23:c8:61:80:c9:03:1d:58:34:7f:
b1:12:26:49:61:df:17:5d:11:e2:3c:db:15:87:5d:
b1:79:7d:b9:5e:78:70:db:63:6a:92:d6:fa:8f:76:
0a:7c:73:07:1b:7b:72:db:e0:4e:ab:b6:9e:f0:18:
b6:a4:e2:72:a1:39:0f:ba:9a:c8:aa:f8:a6:71:25:
84:ec:99:26:9c:a1:d6:35:74:4c:23:35:46:c6:c9:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CC:8A:7E:C1:57:E5:CA:C8:90:71:09:CC:B6:27:B8:70:FF:F4:5D
X509v3 Authority Key Identifier:
keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:c2:0b:4f:98:b7:0b:7d:29:7a:8b:9f:79:fb:bc:2d:47:72:
f6:38:ea:38:a3:e2:e5:5c:b7:2d:6d:91:10:1a:93:81:c6:1e:
40:27:1e:03:a6:75:0c:06:75:3c:40:35:0a:b5:11:28:80:2d:
58:af:09:e3:b4:4a:70:07:ab:7d:83:6e:f1:31:e5:30:60:44:
8b:b4:03:db:bd:1c:b7:03:79:57:c3:45:ec:c4:1c:81:6a:48:
4e:8d:e6:30:d1:93:f8:40:3c:aa:91:96:4f:b9:8a:cb:74:c9:
82:a2:52:45:2d:eb:20:88:3e:3a:bd:57:dd:25:91:db:21:56:
1a:6e:5d:12:f1:0e:a3:29:90:86:ff:91:2c:2a:23:ba:6f:e4:
85:45:00:0e:c3:ff:67:e6:24:49:0c:a8:ac:70:9d:5d:7a:db:
1e:65:af:88:18:4e:2e:9b:b0:8c:5f:63:44:cd:5d:4c:28:6e:
4a:7a:25:e6:89:cd:e0:a6:af:91:59:2c:9a:2f:e3:4e:70:d4:
a1:e6:71:6d:7b:5f:2c:d3:22:bf:80:8b:95:63:5e:3f:07:ec:
2a:7c:69:71:c3:dd:fe:3f:d3:12:98:f2:bb:d2:2e:c9:f0:60:
a7:2f:69:a9:ab:52:39:80:dc:df:82:4a:fa:38:82:5d:aa:fa:
76:41:77:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqaQBK0A7qYWqvLdRtJIk5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmE1NDFkNWFjOGZmN2JiMDQwOGM3NDM0YWMxMDEyZWZm
NzNjYjUwHhcNMjYxMDExMTAwMTI2WhcNMjYxMDEyMTAwMTI2WjAzMTEwLwYDVQQD
Eyg1ZWNjOGE3ZWMxNTdlNWNhYzg5MDcxMDljY2I2MjdiODcwZmZmNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCKO82uo0tEVzAjpn9a3q0c/WRh1
zV4EhhVUAPIQDT+CS8goFref0Ao8IwKm5569b2iVI/ft3GMhxSJmC7GaQqXDKiR3
aBJFwvzvOuZt76gkEKkSYj361ZJliq0lohJolzNv0B5vVmpICxpSpSiAAx/ZqxXO
9qJ0HnWRUND+Z3KdiVBXEskGFZqVHPmloViTDnkMC89ROUQdTRHI7umSI+//4hZX
KqY/oyPIYYDJAx1YNH+xEiZJYd8XXRHiPNsVh12xeX25Xnhw22Nqktb6j3YKfHMH
G3ty2+BOq7ae8Bi2pOJyoTkPuprIqvimcSWE7JkmnKHWNXRMIzVGxsnVMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7Min7BV+XKyJBxCcy2J7hw//RdMB8GA1UdIwQY
MBaAFJgqVB1ayP97sECMdDSsEBLv9zy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDct
MDEyMDhkODZkZGNjLzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iOWNmM2ItOTU3Mi00OTkyLWIyNDctMDEyMDhkODZkZGNj
LzEvbUNwVUhWcklfM3V3UUl4ME5Ld1FFdV8zUExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsILT5i3
C30peoufefu8LUdy9jjqOKPi5Vy3LW2REBqTgcYeQCceA6Z1DAZ1PEA1CrURKIAt
WK8J47RKcAerfYNu8THlMGBEi7QD270ctwN5V8NF7MQcgWpITo3mMNGT+EA8qpGW
T7mKy3TJgqJSRS3rIIg+Or1X3SWR2yFWGm5dEvEOoymQhv+RLCojum/khUUADsP/
Z+YkSQyorHCdXXrbHmWviBhOLpuwjF9jRM1dTChuSnol5onN4KavkVksmi/jTnDU
oeZxbXtfLNMiv4CLlWNePwfsKnxpccPd/j/TEpjyu9IuyfBgpy9pqatSOYDc34JK
+jiCXar6dkF3Mw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 19:41:24 2026 by rpki-client