Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json)
Hash identifier: athViyWiskpkj6Caith5sv8F+ffgQw4Bb7p3vvU3yzM=
Subject key identifier: 8A:ED:11:BA:AA:36:23:C9:C8:18:D5:B7:BA:78:11:07:06:88:B7:A7
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial: 01A0C58E4A367B246119FACBFDAC49539048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
Manifest number: 02CC
Signing time: Mon 21 Sep 2026 20:00:31 +0000
Manifest this update: Mon 21 Sep 2026 20:00:31 +0000
Manifest next update: Tue 22 Sep 2026 20:00:31 +0000
Files and hashes: 1: R53abRTy3nsePVXZ6FXqbP844c0.roa (hash: roRhMTyLNIYOGvT9vt5IgOR5P+5/7DtKqsBJYyp8XnI=)
2: ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa (hash: RYLFC72B9dzFoQN0FlnNd+oyUoSf2vNtWKltjAP5ay0=)
3: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=)
4: loPeDfGPyDMlaIz52TWhtcsHUe8.roa (hash: eVYCTyXWXF7uzmYgmDXlX+QmiWaxF3k2ICYH5NEVWDE=)
5: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: v0fucJQaWOm2ZCUBd9EbC6Rjd0ON90XILUDml9glLIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:4a:36:7b:24:61:19:fa:cb:fd:ac:49:53:90:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Validity
Not Before: Sep 21 20:00:31 2026 GMT
Not After : Sep 22 20:00:31 2026 GMT
Subject: CN=8aed11baaa3623c9c818d5b7ba7811070688b7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:58:c4:82:8b:7c:ca:a6:19:4e:62:41:68:f2:
d5:a2:9d:70:05:bd:f9:f0:ea:b6:d9:ca:95:5d:e7:
1e:82:76:c9:20:c4:86:09:71:74:26:a3:ec:75:aa:
a1:a7:99:69:e0:09:7a:f8:a3:1a:87:06:2f:13:64:
92:82:3b:b6:e5:27:c7:3f:99:43:f5:87:0c:c9:9d:
5b:c6:e8:de:09:5e:96:bb:e9:4c:f1:be:ed:a3:21:
02:64:87:4b:10:25:73:5b:96:4a:8c:e7:f4:57:02:
6b:81:5f:de:97:d2:7b:85:5b:47:a1:b3:ff:af:4d:
ef:fa:68:28:f4:99:a6:f7:d3:50:13:d2:a3:0d:bc:
4f:c2:12:1c:9c:dd:1d:98:b5:2d:5a:61:6b:e1:66:
7f:c9:03:6d:26:95:e1:26:c5:34:ba:59:9f:76:21:
9a:01:8f:d8:46:8a:9d:78:a7:0a:9f:8c:9d:fb:19:
dd:f0:2b:7c:c4:41:9a:b4:67:86:7b:a3:c1:e0:d9:
ba:00:a8:ff:03:cc:e4:f4:19:5b:ea:ee:ee:8a:9f:
38:79:bb:e2:15:84:4a:0d:0e:ac:a2:28:92:98:7b:
1a:2f:74:d9:a0:5d:95:37:76:78:8d:e6:c5:80:b9:
28:4c:e2:ff:f4:af:98:a8:dc:6a:57:54:95:76:63:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:ED:11:BA:AA:36:23:C9:C8:18:D5:B7:BA:78:11:07:06:88:B7:A7
X509v3 Authority Key Identifier:
keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:13:ac:90:43:4d:61:1b:7a:d7:ff:b3:1f:2c:3c:d8:36:46:
18:ec:1e:c1:6a:c6:81:53:c4:dc:90:bf:8a:d8:c1:d6:d4:b8:
dc:ff:45:f8:5b:86:c1:af:25:ae:5a:c4:d6:a3:f4:91:25:3c:
2a:93:24:1b:43:42:de:c2:2e:88:3d:95:89:b5:81:56:88:dd:
bc:b0:de:19:52:5b:d9:2b:3d:46:3d:53:9b:43:27:01:ee:92:
6f:5a:93:06:d4:66:c4:1c:fb:98:39:d5:6e:23:a9:09:cc:4c:
c2:01:0d:d9:a1:85:e9:d1:ab:2c:1c:19:33:34:1f:9d:b8:ed:
73:ee:7f:1c:f4:aa:e0:14:60:58:bb:0a:ef:4a:4a:91:1c:fe:
57:fe:9a:6c:74:d0:71:f9:02:e1:ff:ef:2a:fc:be:b9:66:d5:
88:fb:71:43:32:5c:1c:82:54:44:b0:6a:c6:08:6c:e2:3e:1e:
b2:d4:24:83:f3:7d:57:59:32:1d:f7:e1:af:c7:23:98:f3:20:
26:7b:b9:33:55:1c:7c:7c:75:6a:09:52:50:11:eb:9d:4b:fe:
bb:d4:ad:21:c4:61:de:85:e2:11:2b:99:f6:92:5c:70:f3:b1:
5b:2d:84:2f:b9:93:05:55:a0:15:d9:87:e4:53:43:a8:52:9f:
8e:1b:60:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFjko2eyRhGfrL/axJU5BIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjIzMzNmMDY2NTczZjUzMTZlMDc1YTAxY2UyNDkwYjU4
YzZhZTEwHhcNMjYwOTIxMjAwMDMxWhcNMjYwOTIyMjAwMDMxWjAzMTEwLwYDVQQD
Eyg4YWVkMTFiYWFhMzYyM2M5YzgxOGQ1YjdiYTc4MTEwNzA2ODhiN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVjEgot8yqYZTmJBaPLVop1wBb35
8Oq22cqVXecegnbJIMSGCXF0JqPsdaqhp5lp4Al6+KMahwYvE2SSgju25SfHP5lD
9YcMyZ1bxujeCV6Wu+lM8b7toyECZIdLECVzW5ZKjOf0VwJrgV/el9J7hVtHobP/
r03v+mgo9Jmm99NQE9KjDbxPwhIcnN0dmLUtWmFr4WZ/yQNtJpXhJsU0ulmfdiGa
AY/YRoqdeKcKn4yd+xnd8Ct8xEGatGeGe6PB4Nm6AKj/A8zk9Blb6u7uip84ebvi
FYRKDQ6soiiSmHsaL3TZoF2VN3Z4jebFgLkoTOL/9K+YqNxqV1SVdmNCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrtEbqqNiPJyBjVt7p4EQcGiLenMB8GA1UdIwQY
MBaAFLayMz8GZXP1MW4HWgHOJJC1jGrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYt
ODA1MTcwYWM5YzBlLzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYtODA1MTcwYWM5YzBl
LzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBOskENN
YRt61/+zHyw82DZGGOwewWrGgVPE3JC/itjB1tS43P9F+FuGwa8lrlrE1qP0kSU8
KpMkG0NC3sIuiD2VibWBVojdvLDeGVJb2Ss9Rj1Tm0MnAe6Sb1qTBtRmxBz7mDnV
biOpCcxMwgEN2aGF6dGrLBwZMzQfnbjtc+5/HPSq4BRgWLsK70pKkRz+V/6abHTQ
cfkC4f/vKvy+uWbViPtxQzJcHIJURLBqxghs4j4estQkg/N9V1kyHffhr8cjmPMg
Jnu5M1UcfHx1aglSUBHrnUv+u9StIcRh3oXiESuZ9pJccPOxWy2EL7mTBVWgFdmH
5FNDqFKfjhtgXA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 00:35:37 2026 by rpki-client