Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: SebNrGJcUsix0pKudj/H9rZcxL2Tq+z3lSaVJoBpKV4=
Subject key identifier: F1:AB:D3:6A:60:0A:B9:F1:68:51:8A:8A:FE:AE:43:21:FD:E5:0A:23
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 01A0C331CEC80AB9AAC4C317838844A6C461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0EAA
Signing time: Mon 21 Sep 2026 09:00:16 +0000
Manifest this update: Mon 21 Sep 2026 09:00:16 +0000
Manifest next update: Tue 22 Sep 2026 09:00:16 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: 8LIZl0NqCzEMTfUGrxOsIjSdQ34l7rVhGdY2tRHakGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:ce:c8:0a:b9:aa:c4:c3:17:83:88:44:a6:c4:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Sep 21 09:00:16 2026 GMT
Not After : Sep 22 09:00:16 2026 GMT
Subject: CN=f1abd36a600ab9f168518a8afeae4321fde50a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:7a:f0:7e:34:3b:b6:db:82:71:f2:42:f4:
a9:c0:f6:f1:a5:47:bd:88:9d:6f:e8:35:63:8b:f1:
87:03:97:1d:a0:38:48:2a:26:ee:e7:6e:35:ce:ba:
d4:ba:2a:0e:16:7c:ba:5f:60:3d:eb:37:8d:bb:26:
77:43:19:63:16:fd:8e:e2:5f:eb:7b:3c:d8:27:cc:
2c:bc:e5:ca:d0:59:f6:64:a8:a3:f8:bf:6f:3a:45:
5a:75:6c:87:b6:d8:02:b6:97:51:36:c4:f9:e5:bf:
3b:ef:0b:18:63:a6:e8:19:02:9c:6b:00:d0:50:c3:
fd:14:bb:2f:85:bb:66:ad:77:25:b7:88:45:04:f0:
05:67:1d:9e:e4:26:2e:85:c0:9c:13:de:af:a9:4d:
0d:0e:83:ed:b4:5b:60:90:d0:00:ef:d2:cb:c6:6b:
e4:70:eb:40:25:39:a9:df:b9:47:1a:bd:7a:90:ff:
20:c3:c5:53:54:9e:a9:47:6d:f6:5d:a2:8d:cc:ff:
11:db:fb:6f:fe:09:82:ea:f5:28:2d:8f:57:5d:0c:
6f:6b:68:cb:25:16:89:7e:62:46:2b:f3:4d:e9:83:
4e:bc:ab:69:4a:71:70:59:c8:19:fc:3c:24:d6:40:
7e:bf:db:6b:ee:63:d5:9b:51:3c:9f:f4:4c:42:93:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AB:D3:6A:60:0A:B9:F1:68:51:8A:8A:FE:AE:43:21:FD:E5:0A:23
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9f:28:f4:7a:30:b7:20:e3:ca:54:4d:fb:5c:90:26:cb:8b:
2f:67:2b:98:99:30:c2:e4:4b:f6:02:96:26:3a:bf:e9:27:f5:
1f:98:74:cd:b1:87:93:fb:6c:38:c4:d6:1d:05:18:ec:97:85:
1b:cc:25:8e:2b:ed:c5:98:02:66:cc:9c:3c:bb:24:4a:8f:7b:
80:83:48:a7:97:6c:4d:4c:ea:6a:70:4c:37:39:bf:c3:be:ea:
9b:1e:43:69:81:2e:5e:95:03:08:93:e6:5f:9c:24:e6:5a:e6:
4b:26:67:e3:dc:ac:59:b4:35:4c:8c:72:69:42:3a:1e:aa:a0:
7f:ce:f5:38:b5:85:a5:ea:3a:eb:6c:6c:85:c2:3b:99:c5:70:
c1:2a:e3:12:17:7f:e0:53:56:89:14:6e:4b:1a:40:cd:8a:38:
e4:ce:11:e8:94:53:a4:86:4a:de:1c:71:a0:49:38:fd:4e:5f:
e8:f9:35:db:de:d9:2b:af:84:cb:ba:ac:0e:52:b9:fe:ff:c3:
b5:62:5e:94:65:66:c2:c1:24:1a:29:1e:b4:33:43:5a:f2:1b:
1c:fa:c0:4b:ca:98:d4:35:bb:8b:24:70:b3:a8:ab:a2:9a:40:
64:41:bd:c6:b3:47:36:c6:00:d4:66:af:27:d7:65:92:92:f2:
df:d5:cd:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMc7ICrmqxMMXg4hEpsRhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjYwOTIxMDkwMDE2WhcNMjYwOTIyMDkwMDE2WjAzMTEwLwYDVQQD
EyhmMWFiZDM2YTYwMGFiOWYxNjg1MThhOGFmZWFlNDMyMWZkZTUwYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVt68H40O7bbgnHyQvSpwPbxpUe9
iJ1v6DVji/GHA5cdoDhIKibu5241zrrUuioOFny6X2A96zeNuyZ3QxljFv2O4l/r
ezzYJ8wsvOXK0Fn2ZKij+L9vOkVadWyHttgCtpdRNsT55b877wsYY6boGQKcawDQ
UMP9FLsvhbtmrXclt4hFBPAFZx2e5CYuhcCcE96vqU0NDoPttFtgkNAA79LLxmvk
cOtAJTmp37lHGr16kP8gw8VTVJ6pR232XaKNzP8R2/tv/gmC6vUoLY9XXQxva2jL
JRaJfmJGK/NN6YNOvKtpSnFwWcgZ/Dwk1kB+v9tr7mPVm1E8n/RMQpPZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGr02pgCrnxaFGKiv6uQyH95QojMB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO58o9How
tyDjylRN+1yQJsuLL2crmJkwwuRL9gKWJjq/6Sf1H5h0zbGHk/tsOMTWHQUY7JeF
G8wljivtxZgCZsycPLskSo97gINIp5dsTUzqanBMNzm/w77qmx5DaYEuXpUDCJPm
X5wk5lrmSyZn49ysWbQ1TIxyaUI6Hqqgf871OLWFpeo662xshcI7mcVwwSrjEhd/
4FNWiRRuSxpAzYo45M4R6JRTpIZK3hxxoEk4/U5f6Pk1297ZK6+Ey7qsDlK5/v/D
tWJelGVmwsEkGiketDNDWvIbHPrAS8qY1DW7iyRws6iroppAZEG9xrNHNsYA1Gav
J9dlkpLy39XNpQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:22:10 2026 by rpki-client