Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
File: ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft (raw, json)
Hash identifier: brKozVSNfDt8TYjlYQLgY1xwrI0aPTSU/0vOz5+pxWM=
Subject key identifier: 09:D8:3D:89:8D:DA:78:6D:DB:96:D2:AD:F5:61:5C:F5:11:DD:BD:97
Authority key identifier: BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB
Certificate issuer: /CN=ba54d08b2b9006e66a483d482604f48b948529bb
Certificate serial: 01A1A82732DABD528EF64627DF28289A02AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
Manifest number: 08
Signing time: Wed 04 Nov 2026 20:01:43 +0000
Manifest this update: Wed 04 Nov 2026 20:01:43 +0000
Manifest next update: Thu 05 Nov 2026 20:01:43 +0000
Files and hashes: 1: 17kQshB363KWnmuIeBKThtYVQ5E.asa (hash: q5bzKCk6gTxlEMmUUF8Dkow0UZ47/8gkAlFSBNvHUCw=)
2: 4HNEJWv0jx0DHCf6yo5W_9O73O8.roa (hash: 3f68C1416KPzUwgiAxa0PSLdxb+HfasDPF3ODql1iJ8=)
3: ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl (hash: /kDjEx2ZmsbyF7Xq+xFzWvqjGAkf83o03Dw1FmVBLAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 20:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:27:32:da:bd:52:8e:f6:46:27:df:28:28:9a:02:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba54d08b2b9006e66a483d482604f48b948529bb
Validity
Not Before: Nov 4 20:01:43 2026 GMT
Not After : Nov 5 20:01:43 2026 GMT
Subject: CN=09d83d898dda786ddb96d2adf5615cf511ddbd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:47:43:9c:bf:ee:3f:e6:a7:40:67:79:60:
7e:35:99:91:0d:8e:2f:ab:18:00:76:25:67:c5:71:
21:84:02:fa:77:1e:b4:f0:80:8c:df:1b:a3:f1:c7:
ab:72:c9:a2:c4:2c:8d:83:5d:f1:9f:63:ee:0f:ed:
89:cb:bd:ed:d4:1e:9e:a2:c5:7f:64:6a:e3:9b:83:
f0:09:68:0c:10:b8:1c:e0:ef:9e:56:8c:20:28:c8:
f7:10:5c:6e:12:94:12:b1:c1:28:74:2c:b0:5c:c7:
74:b5:71:85:4d:24:2c:bf:f0:68:c5:4e:c1:bc:43:
3d:6c:1a:b3:63:00:18:1a:f6:a4:5a:4c:47:05:b7:
5c:f8:f7:0b:bf:8c:ca:29:25:25:e9:b6:87:ac:34:
ea:99:d3:79:35:fa:cf:71:50:8c:dc:c8:9f:7d:40:
50:0b:34:5b:db:dd:40:af:75:1d:2f:3b:21:e2:67:
93:60:58:2e:e3:8c:6b:89:f3:d0:0b:be:77:e0:0e:
a1:d3:85:b8:ff:32:f2:bf:83:43:32:5a:a4:70:fc:
a4:9a:ff:6d:65:5e:2b:67:43:6b:c8:ac:bf:78:d4:
7e:95:8d:a1:a5:e5:2a:c0:2f:46:4d:91:22:50:d7:
8a:ab:6d:da:8d:b8:1b:5c:a4:c3:ad:2e:44:89:1c:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D8:3D:89:8D:DA:78:6D:DB:96:D2:AD:F5:61:5C:F5:11:DD:BD:97
X509v3 Authority Key Identifier:
keyid:BA:54:D0:8B:2B:90:06:E6:6A:48:3D:48:26:04:F4:8B:94:85:29:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulTQiyuQBuZqSD1IJgT0i5SFKbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a76078-cae5-4f60-8861-e5cdb5a682d7/1/ulTQiyuQBuZqSD1IJgT0i5SFKbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:55:f3:3d:5f:13:10:33:bb:b3:0c:dd:86:23:8b:a9:93:
29:4b:24:66:71:bd:12:15:f7:30:3a:68:5c:46:21:8c:8c:b2:
3d:bc:8d:9a:60:9b:3f:ba:df:1c:12:a5:43:09:4f:3b:9c:5e:
a3:66:c5:36:8b:0d:37:f6:0d:b7:c7:4c:1a:3d:a5:cd:7d:4e:
34:b2:08:56:6b:9a:2c:62:a1:e1:dd:e2:e4:97:be:b0:56:68:
bd:93:6a:75:f4:ca:9d:03:2c:78:3d:b6:d0:30:77:a4:2f:ed:
b8:1b:3c:40:27:7c:97:ec:1e:09:d8:34:61:ed:ad:a0:26:f6:
27:a0:b3:a1:28:84:8a:c3:6d:a9:4c:06:d0:2b:bb:b7:86:1c:
09:c9:13:1b:55:7b:64:44:a0:a0:43:d5:8c:87:81:da:10:32:
8b:2d:9d:af:70:a3:30:a7:a2:62:77:45:68:a3:5a:89:49:2a:
7e:2e:1b:e2:f7:cf:6b:3e:c1:fe:d2:7e:13:a3:8e:f4:82:08:
1f:fe:aa:af:eb:ef:f3:0a:19:c7:a7:05:4d:9c:a0:24:03:7d:
45:c8:13:4a:77:de:de:47:9f:21:51:9b:88:a4:18:38:6a:21:
a8:6b:85:dc:2b:99:42:70:89:fe:93:9c:e1:c7:fc:41:c8:b6:
ed:67:e5:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGoJzLavVKO9kYn3ygomgKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTRkMDhiMmI5MDA2ZTY2YTQ4M2Q0ODI2MDRmNDhiOTQ4
NTI5YmIwHhcNMjYxMTA0MjAwMTQzWhcNMjYxMTA1MjAwMTQzWjAzMTEwLwYDVQQD
EygwOWQ4M2Q4OThkZGE3ODZkZGI5NmQyYWRmNTYxNWNmNTExZGRiZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv5HQ5y/7j/mp0BneWB+NZmRDY4v
qxgAdiVnxXEhhAL6dx608ICM3xuj8cercsmixCyNg13xn2PuD+2Jy73t1B6eosV/
ZGrjm4PwCWgMELgc4O+eVowgKMj3EFxuEpQSscEodCywXMd0tXGFTSQsv/BoxU7B
vEM9bBqzYwAYGvakWkxHBbdc+PcLv4zKKSUl6baHrDTqmdN5NfrPcVCM3MiffUBQ
CzRb291Ar3UdLzsh4meTYFgu44xrifPQC7534A6h04W4/zLyv4NDMlqkcPykmv9t
ZV4rZ0NryKy/eNR+lY2hpeUqwC9GTZEiUNeKq23ajbgbXKTDrS5EiRx8hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnYPYmN2nht25bSrfVhXPUR3b2XMB8GA1UdIwQY
MBaAFLpU0IsrkAbmakg9SCYE9IuUhSm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxUUWl5dVFCdVpxU0QxSUpnVDBpNVNGS2JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNzYwNzgtY2FlNS00ZjYwLTg4NjEt
ZTVjZGI1YTY4MmQ3LzEvdWxUUWl5dVFCdVpxU0QxSUpnVDBpNVNGS2JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hNzYwNzgtY2FlNS00ZjYwLTg4NjEtZTVjZGI1YTY4MmQ3
LzEvdWxUUWl5dVFCdVpxU0QxSUpnVDBpNVNGS2JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNRV8z1f
ExAzu7MM3YYji6mTKUskZnG9EhX3MDpoXEYhjIyyPbyNmmCbP7rfHBKlQwlPO5xe
o2bFNosNN/YNt8dMGj2lzX1ONLIIVmuaLGKh4d3i5Je+sFZovZNqdfTKnQMseD22
0DB3pC/tuBs8QCd8l+weCdg0Ye2toCb2J6CzoSiEisNtqUwG0Cu7t4YcCckTG1V7
ZESgoEPVjIeB2hAyiy2dr3CjMKeiYndFaKNaiUkqfi4b4vfPaz7B/tJ+E6OO9III
H/6qr+vv8woZx6cFTZygJAN9RcgTSnfe3kefIVGbiKQYOGohqGuF3CuZQnCJ/pOc
4cf8Qci27Wfl2Q==
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:11:37 2026 by rpki-client