Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File: tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier: y/KGlUtBVZVGflYb9HwEjAFKiTzKkvMFOxLF8ETsvas=
Subject key identifier: 14:9A:11:BF:38:15:B0:9F:F5:C5:87:E1:8C:D0:2B:C8:72:10:C6:98
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A11A198198482C99B0209C114F1CDF089D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number: 08BE
Signing time: Thu 08 Oct 2026 06:00:41 +0000
Manifest this update: Thu 08 Oct 2026 06:00:41 +0000
Manifest next update: Fri 09 Oct 2026 06:00:41 +0000
Files and hashes: 1: FAR1JGDRfBlwTrXiCrjWu-9KPYY.roa (hash: ubnjQ9mTdiJtNsVEHvSHl8U6qYQGX98XEG0kwEFpsdo=)
2: K7oY9P0OfWkHD6GX0g5pIBjAf_Y.roa (hash: yKmgSoE9rg2APN1oH0dQLOoKGASWMZwho6luI43ZQ7U=)
3: LG1ojJBrL-is7jHDUY_yDrks3fo.roa (hash: EtYSJzsIuCwlPxFXPE10satuYqBBIprVHzKYznzYCYs=)
4: OteesfxlXNW_6oy-uZPA0RjwQqs.roa (hash: BVMKBS9it+saptlczy0sxrdp/hGNaoRQGuAEe0tEzJQ=)
5: hbo0pySSCroIegSOSs5RlRjwFvg.roa (hash: rU41ZGReAnZrPd0NAsMdD2ONr+HjXb57K3ZbIW856j0=)
6: jJqmq7ctfCRljbEe-rA7H6MPeAI.roa (hash: O+1YuOF5X9Aph1d+IEQe3EcREqu8Qs7VAkwaJPtR+U0=)
7: lXgeO6sL-ZIGs1Qbu6r6hhOZ8pQ.roa (hash: M0V4xWc5XxTvzmYTKrejIX4n2xNZ52yU26YzaFysbjM=)
8: o-WKTQa_X-7__zCzj6J6YkZ_raw.roa (hash: 1ouUgQsFwXp8X5fRClo+nxWAfb/FxjwTOeZILI6XYaY=)
9: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: XKoMlXI095Y/fQ1wKG4FPhEu4CmKNDx6HHuAenLWd7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:81:98:48:2c:99:b0:20:9c:11:4f:1c:df:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Oct 8 06:00:41 2026 GMT
Not After : Oct 9 06:00:41 2026 GMT
Subject: CN=149a11bf3815b09ff5c587e18cd02bc87210c698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:7a:a2:01:0b:05:b9:82:16:e3:80:be:83:
c0:fd:ec:8e:2f:6e:e0:cf:3e:7e:52:a3:98:1f:6f:
e0:d7:57:32:dc:71:af:6d:b5:42:1b:bd:95:c2:4d:
b6:41:5a:79:57:b0:ec:a7:53:f3:9d:4a:aa:60:5b:
15:f8:91:6d:24:e4:2d:32:a7:95:fe:f8:0d:74:54:
da:31:33:ed:23:e6:1c:dd:37:84:48:71:86:2f:e8:
5e:a3:92:a9:fc:11:6d:12:24:2a:8b:80:1b:e2:2c:
44:8e:88:75:c5:cc:b3:fa:f1:09:12:e0:40:9d:fb:
42:4f:43:aa:df:a3:36:08:17:3b:2f:8b:23:ad:a8:
e3:79:af:ea:78:7c:fd:f0:de:81:24:b9:34:d7:2d:
ac:00:5f:d4:f9:5f:ac:0f:d4:5c:c3:b3:26:54:fd:
27:fb:c2:fb:76:e1:31:5e:a0:ae:e7:44:51:0b:80:
13:ab:b6:f2:35:90:60:c2:b1:ee:c3:49:e5:08:ad:
48:5e:b6:4d:c2:d6:d5:aa:f1:08:58:2c:ba:cb:83:
6a:0f:06:ad:8b:14:e6:51:6a:2c:7a:9d:54:6b:c9:
11:c9:34:1a:85:4e:f7:4a:74:4d:21:64:81:13:0b:
bc:c5:f4:81:1a:0b:37:c6:af:8a:21:7e:7c:10:9b:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9A:11:BF:38:15:B0:9F:F5:C5:87:E1:8C:D0:2B:C8:72:10:C6:98
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:0d:95:7e:c1:07:31:79:17:ce:e2:48:fc:9c:d5:fd:2f:
69:e0:1c:19:e2:21:cc:0c:1f:06:15:7d:8b:85:4f:f4:66:25:
38:e4:3a:5c:c7:b2:b5:c6:68:c1:15:54:7b:02:5a:b2:49:9d:
f6:4d:f8:f2:3b:b5:cf:8f:4a:d3:87:bb:8f:17:32:79:4b:46:
96:8a:55:7f:ad:82:95:32:80:af:63:70:10:d4:ba:43:b0:c6:
57:d3:6f:e2:2b:1d:6e:23:a8:97:4c:88:ac:23:bd:48:ca:47:
d0:03:7f:da:bf:1a:d8:fe:a7:88:de:9b:64:ea:7a:a8:07:f7:
9c:bb:14:4d:af:92:76:c7:94:a7:2c:24:ae:41:56:b5:f5:83:
0c:f3:5e:85:22:df:c5:fa:31:74:7a:c9:22:e0:8a:fb:8e:56:
5c:2e:a9:3f:92:3b:44:ff:5a:68:33:5c:76:5e:9a:05:39:98:
a8:d5:6c:1a:8f:91:b4:ab:ce:4a:bd:3c:7e:2b:76:06:ca:b4:
a1:44:19:2d:8b:bf:7f:ae:42:25:01:d1:2b:54:35:4f:27:1f:
b5:04:3b:7c:2c:9f:17:93:5e:a7:e3:dc:35:dd:5a:28:9d:8a:
5b:d5:1e:a8:29:b4:4e:0c:4e:2a:6b:9f:2f:e8:9d:2d:b1:9b:
2b:cf:9a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaGYGYSCyZsCCcEU8c3widMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2
YzUyOTIwHhcNMjYxMDA4MDYwMDQxWhcNMjYxMDA5MDYwMDQxWjAzMTEwLwYDVQQD
EygxNDlhMTFiZjM4MTViMDlmZjVjNTg3ZTE4Y2QwMmJjODcyMTBjNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBl6ogELBbmCFuOAvoPA/eyOL27g
zz5+UqOYH2/g11cy3HGvbbVCG72Vwk22QVp5V7Dsp1PznUqqYFsV+JFtJOQtMqeV
/vgNdFTaMTPtI+Yc3TeESHGGL+heo5Kp/BFtEiQqi4Ab4ixEjoh1xcyz+vEJEuBA
nftCT0Oq36M2CBc7L4sjrajjea/qeHz98N6BJLk01y2sAF/U+V+sD9Rcw7MmVP0n
+8L7duExXqCu50RRC4ATq7byNZBgwrHuw0nlCK1IXrZNwtbVqvEIWCy6y4NqDwat
ixTmUWosep1Ua8kRyTQahU73SnRNIWSBEwu8xfSBGgs3xq+KIX58EJsl7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSaEb84FbCf9cWH4YzQK8hyEMaYMB8GA1UdIwQY
MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt
NTcxYjZjNjEyYmVjLzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj
LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxgNlX7B
BzF5F87iSPyc1f0vaeAcGeIhzAwfBhV9i4VP9GYlOOQ6XMeytcZowRVUewJaskmd
9k348ju1z49K04e7jxcyeUtGlopVf62ClTKAr2NwENS6Q7DGV9Nv4isdbiOol0yI
rCO9SMpH0AN/2r8a2P6niN6bZOp6qAf3nLsUTa+SdseUpywkrkFWtfWDDPNehSLf
xfoxdHrJIuCK+45WXC6pP5I7RP9aaDNcdl6aBTmYqNVsGo+RtKvOSr08fit2Bsq0
oUQZLYu/f65CJQHRK1Q1TycftQQ7fCyfF5Nep+PcNd1aKJ2KW9UeqCm0TgxOKmuf
L+idLbGbK8+aDA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:26:54 2026 by rpki-client