Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
File: pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft (raw, json)
Hash identifier: f168rAz6Kygf4kigIKUM/TurKCZ7TvSuRe95SRck+5w=
Subject key identifier: AC:37:F2:20:68:BD:EC:C3:96:F5:73:6E:B0:E0:1C:DA:59:11:57:8B
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 01A1359105F8F49D633FEF0049FCD272D89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
Manifest number: 011B
Signing time: Tue 13 Oct 2026 14:00:58 +0000
Manifest this update: Tue 13 Oct 2026 14:00:58 +0000
Manifest next update: Wed 14 Oct 2026 14:00:58 +0000
Files and hashes: 1: 5eCm7YiekLnQx2Yrufz0DKOe4t8.roa (hash: A4yzIFhcFavgDz/cnTf1E1mu+4JZXUZX4YW5ffY43Tw=)
2: AmJH-oKP8JDfCGjtvLBdScjcl94.roa (hash: JYSfH/iBbNzkn+YYYr8OyA3qLrDl+3bHlmfyOFI1Y70=)
3: BnfQ_AzrFoZh3KLGYso6JJ9GXdo.roa (hash: ENsW9JPhfPIhP5yk5NQtzakTi0pxm6wJtb9Q7w/b4ZM=)
4: FBnng7ak4AJweaj7mNiiDGPhP-A.roa (hash: 7O6BMYqqhyaPH6JejfjvmE43i9bE4Safke5zHGTaAxk=)
5: aZqL4PQIRKXk-Nf9g8MWjRBJYWY.roa (hash: oswi/PqLXiY69b2lF56784lBrhIisxDRepTm/CrpEY8=)
6: pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl (hash: 8ExOdIB4X50vqyC3lJUUoy81wqnEWVbdvS3Oc6g1yHU=)
7: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (hash: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=)
8: vlQgVNHMOMDCgexHalesjIDPMos.roa (hash: NKNm5ZfHR4kcXtf4m4rKT2uIMrcP5kuQXn9iZz+SX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:91:05:f8:f4:9d:63:3f:ef:00:49:fc:d2:72:d8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Oct 13 14:00:58 2026 GMT
Not After : Oct 14 14:00:58 2026 GMT
Subject: CN=ac37f22068bdecc396f5736eb0e01cda5911578b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:88:c8:aa:a9:3c:f3:cd:44:e9:eb:90:1a:
5b:b2:14:08:a0:d7:37:d5:c6:2a:54:d5:39:2e:bd:
38:0f:32:ca:11:c7:7d:c1:67:23:9e:d6:0b:be:f2:
8b:cc:b8:de:3c:f5:b7:35:1d:fd:0f:fb:86:dc:ca:
d5:7e:1c:e5:ae:a6:bc:3d:13:db:b6:11:97:6d:f5:
38:dd:00:ce:6d:ed:77:ce:02:64:74:a0:d7:86:6c:
c7:c3:6c:3f:3c:56:85:73:69:ef:a2:5c:8a:b8:f6:
30:54:35:b5:7e:75:1e:35:d9:9b:31:f6:82:2a:ff:
52:34:12:a1:f6:4f:64:71:7b:2b:80:63:bf:16:bc:
9f:82:3c:0d:c3:2c:36:f1:2b:c0:e0:b4:3e:d7:e9:
27:0e:2f:d3:98:9d:1f:68:e6:d5:3a:72:c8:8a:59:
5c:98:66:58:02:49:0d:6e:b2:24:56:c2:ce:e4:f5:
99:40:a3:e6:c8:ae:a4:ca:7c:21:a6:3a:8e:fe:d9:
a6:3a:e7:06:1a:d6:a3:fa:fa:07:80:d0:35:6c:1f:
79:cd:e0:de:1d:92:34:4a:aa:f7:18:a1:6f:19:2c:
b6:dd:6d:2d:82:a2:57:7a:73:b7:d9:b0:8a:d0:f5:
3b:93:e0:71:f9:d8:9e:4f:94:eb:bc:55:38:bf:a1:
70:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:37:F2:20:68:BD:EC:C3:96:F5:73:6E:B0:E0:1C:DA:59:11:57:8B
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:df:42:16:e2:7d:18:54:6a:a6:22:79:ee:68:87:45:b9:0d:
84:0d:b4:5e:fb:12:6e:91:9f:6b:58:41:1a:76:a3:34:c8:fa:
f6:73:12:27:76:45:34:cb:8d:b7:9b:aa:7f:6c:29:5a:4a:67:
5a:5a:fb:ed:ef:72:8a:db:4c:1e:0a:bb:48:f8:83:a0:0a:9e:
ac:a3:66:b9:df:69:6e:aa:ea:0e:2d:19:4d:7b:9b:ea:e7:52:
78:8f:09:d8:04:1f:00:dd:19:e3:06:40:1c:f7:1e:c7:89:4a:
0c:88:f8:d2:eb:f0:c1:09:5e:1e:de:89:76:b7:f3:74:62:0a:
10:91:d7:04:aa:13:b6:8c:27:d2:3c:4e:17:32:ee:ad:d2:8b:
00:51:38:52:9b:67:ac:6f:3f:c1:fe:89:9f:73:eb:ba:58:2c:
e4:74:a5:ec:1a:46:a8:85:65:03:d8:2d:88:11:9e:25:93:67:
e3:c0:87:5c:38:0b:f8:e6:d2:0c:77:6d:b5:c5:a2:37:9b:12:
36:ff:cb:3c:da:40:2e:78:6c:8e:fa:27:e6:b3:23:97:0b:d0:
e9:86:0b:6e:05:56:88:c1:8c:fd:23:8b:24:5f:7d:ea:71:06:
95:1f:15:c9:cd:ee:f2:e3:80:44:50:59:ba:ec:24:c0:d8:27:
5f:e0:93:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1kQX49J1jP+8ASfzScticMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NTM3Y2JlZGFkMzU2ODE5Y2JjNzdhZTNmY2ExN2Q2NTQz
MWMyODAwHhcNMjYxMDEzMTQwMDU4WhcNMjYxMDE0MTQwMDU4WjAzMTEwLwYDVQQD
EyhhYzM3ZjIyMDY4YmRlY2MzOTZmNTczNmViMGUwMWNkYTU5MTE1NzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwyIyKqpPPPNROnrkBpbshQIoNc3
1cYqVNU5Lr04DzLKEcd9wWcjntYLvvKLzLjePPW3NR39D/uG3MrVfhzlrqa8PRPb
thGXbfU43QDObe13zgJkdKDXhmzHw2w/PFaFc2nvolyKuPYwVDW1fnUeNdmbMfaC
Kv9SNBKh9k9kcXsrgGO/FryfgjwNwyw28SvA4LQ+1+knDi/TmJ0faObVOnLIillc
mGZYAkkNbrIkVsLO5PWZQKPmyK6kynwhpjqO/tmmOucGGtaj+voHgNA1bB95zeDe
HZI0Sqr3GKFvGSy23W0tgqJXenO32bCK0PU7k+Bx+dieT5TrvFU4v6FwKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw38iBovezDlvVzbrDgHNpZEVeLMB8GA1UdIwQY
MBaAFKRTfL7a01aBnLx3rj/KF9ZUMcKAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEZOOHZ0clRWb0djdkhldVA4b1gxbFF4d29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDIt
MzY4NjA4Mzg1ODgzLzEvcEZOOHZ0clRWb0djdkhldVA4b1gxbFF4d29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDItMzY4NjA4Mzg1ODgz
LzEvcEZOOHZ0clRWb0djdkhldVA4b1gxbFF4d29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQt9CFuJ9
GFRqpiJ57miHRbkNhA20XvsSbpGfa1hBGnajNMj69nMSJ3ZFNMuNt5uqf2wpWkpn
Wlr77e9yittMHgq7SPiDoAqerKNmud9pbqrqDi0ZTXub6udSeI8J2AQfAN0Z4wZA
HPcex4lKDIj40uvwwQleHt6JdrfzdGIKEJHXBKoTtown0jxOFzLurdKLAFE4Uptn
rG8/wf6Jn3Prulgs5HSl7BpGqIVlA9gtiBGeJZNn48CHXDgL+ObSDHdttcWiN5sS
Nv/LPNpALnhsjvon5rMjlwvQ6YYLbgVWiMGM/SOLJF996nEGlR8Vyc3u8uOARFBZ
uuwkwNgnX+CTIg==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:10:27 2026 by rpki-client