Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: ERy487GgqPMMGL0qYm12ofPhdVcte6+zYtxvA+R6HCo=
Subject key identifier: 93:78:7F:1C:6B:9A:61:65:6F:F6:59:6B:0B:E6:A9:CC:DC:57:08:B8
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 01A12A9F3F0674934FEB828D8C717FC5064D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 150B
Signing time: Sun 11 Oct 2026 11:00:41 +0000
Manifest this update: Sun 11 Oct 2026 11:00:41 +0000
Manifest next update: Mon 12 Oct 2026 11:00:41 +0000
Files and hashes: 1: 58ydFFoOvrTPYA8iOIAgZMf_cpo.roa (hash: F/vDL/5heMjU5cUbUY7RNuovDGPBXC3rXD0ZADSlfk8=)
2: roH8dSJ1cyQiwOhgeOOscUYpa4E.roa (hash: 3JORgmdPZaQ8xXUzauNxbxZQHf1X4hPOhgbsIE182Bg=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: iU+GxHoJTxoGgBbi/f3BGOft66RprrKioJwXRNlBh4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:3f:06:74:93:4f:eb:82:8d:8c:71:7f:c5:06:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Oct 11 11:00:41 2026 GMT
Not After : Oct 12 11:00:41 2026 GMT
Subject: CN=93787f1c6b9a61656ff6596b0be6a9ccdc5708b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9a:3f:02:03:3f:5b:04:a3:c4:c5:b8:ba:87:
74:b4:65:8a:24:8b:a3:7d:8f:a6:62:b1:bd:9b:76:
dd:70:ae:10:e7:c6:a9:fd:5c:54:5c:94:c8:d8:74:
5b:be:82:03:b1:41:77:26:a5:5d:33:61:88:96:46:
df:f6:39:38:55:6c:31:e9:7c:60:5c:51:7c:e1:f3:
08:3b:cb:9b:b9:25:8f:02:33:79:e1:17:2d:f2:72:
26:65:2d:23:2a:3a:16:4e:28:26:57:12:4d:4d:8d:
66:1f:9b:d5:24:eb:e7:24:b5:10:3a:26:93:33:c2:
85:dc:32:21:01:92:57:fd:6e:1b:7f:47:63:ec:3c:
7d:20:ea:ad:e3:81:b4:fd:1f:73:0d:27:00:fa:6d:
15:06:5f:ba:d1:bc:93:b7:5d:fe:15:71:23:28:84:
3a:dc:8b:32:ee:72:31:14:47:1a:09:52:b1:74:01:
34:53:cf:b2:e0:e9:fc:2d:1b:16:61:89:df:e9:c7:
43:65:57:75:7a:7a:5e:33:4a:90:c0:f9:4c:1c:53:
ca:6e:b3:91:0b:af:59:08:55:9d:ac:d8:aa:24:d0:
c6:b1:e1:d3:4d:c2:a3:0e:dc:7f:fd:8c:80:06:cb:
c5:8f:ec:b5:30:41:45:21:e8:c6:b4:b6:3d:41:be:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:7F:1C:6B:9A:61:65:6F:F6:59:6B:0B:E6:A9:CC:DC:57:08:B8
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:21:f5:12:bb:c2:2f:97:bf:99:81:32:2a:eb:43:17:4c:b8:
64:c7:86:2e:9b:09:22:95:70:a8:3c:f6:48:37:11:a6:87:79:
7e:8e:f0:08:f6:01:5d:7a:50:8b:49:25:90:7a:98:35:43:e4:
92:1a:ff:83:12:78:7e:ac:d2:41:d5:94:74:fd:d8:76:2d:09:
20:3c:3b:24:5d:58:db:5d:97:db:e3:f5:e4:68:d0:68:94:8c:
51:6b:03:9d:f1:43:53:0b:89:6c:0a:93:95:13:0a:0f:3a:7f:
c5:b5:8c:2c:37:1c:c7:ac:7c:ca:0e:87:74:b0:19:14:ce:18:
94:ac:7f:ba:5d:81:df:48:a1:0b:55:7c:c6:a5:7b:3f:3d:60:
42:9e:cb:dc:9b:0c:cf:75:39:fc:e9:fd:80:dc:e5:57:b0:45:
bc:3b:cc:be:25:43:1d:b7:eb:b9:e0:0d:eb:9a:4e:e0:b6:4c:
d1:0b:47:42:bc:cf:14:22:a7:a5:ad:b2:aa:19:7d:8a:9d:4b:
b1:4b:aa:4c:ab:1e:34:e6:ba:22:8a:0d:f6:ff:2a:29:22:9c:
1a:f2:79:cf:a1:08:93:07:ef:fe:67:be:21:f5:8d:76:ba:cf:
af:7f:52:75:52:76:94:ed:f5:b9:c7:8b:8b:b0:e7:9d:d4:ac:
86:16:1e:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEqnz8GdJNP64KNjHF/xQZNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjBhMjA0ZjRlMDljYzgzYTYyNThkN2FhNDRmN2QyZjBm
YTQ0YTAwHhcNMjYxMDExMTEwMDQxWhcNMjYxMDEyMTEwMDQxWjAzMTEwLwYDVQQD
Eyg5Mzc4N2YxYzZiOWE2MTY1NmZmNjU5NmIwYmU2YTljY2RjNTcwOGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65o/AgM/WwSjxMW4uod0tGWKJIuj
fY+mYrG9m3bdcK4Q58ap/VxUXJTI2HRbvoIDsUF3JqVdM2GIlkbf9jk4VWwx6Xxg
XFF84fMIO8ubuSWPAjN54Rct8nImZS0jKjoWTigmVxJNTY1mH5vVJOvnJLUQOiaT
M8KF3DIhAZJX/W4bf0dj7Dx9IOqt44G0/R9zDScA+m0VBl+60byTt13+FXEjKIQ6
3Isy7nIxFEcaCVKxdAE0U8+y4On8LRsWYYnf6cdDZVd1enpeM0qQwPlMHFPKbrOR
C69ZCFWdrNiqJNDGseHTTcKjDtx//YyABsvFj+y1MEFFIejGtLY9Qb42wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN4fxxrmmFlb/ZZawvmqczcVwi4MB8GA1UdIwQY
MBaAFLUgogT04JzIOmJY16pE99Lw+kSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAt
YjhiMWU0YjRlY2I5LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hNWE2YjMtM2VjMy00ODdlLWFiYTAtYjhiMWU0YjRlY2I5
LzEvdFNDaUJQVGduTWc2WWxqWHFrVDMwdkQ2UktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSH1ErvC
L5e/mYEyKutDF0y4ZMeGLpsJIpVwqDz2SDcRpod5fo7wCPYBXXpQi0klkHqYNUPk
khr/gxJ4fqzSQdWUdP3Ydi0JIDw7JF1Y212X2+P15GjQaJSMUWsDnfFDUwuJbAqT
lRMKDzp/xbWMLDccx6x8yg6HdLAZFM4YlKx/ul2B30ihC1V8xqV7Pz1gQp7L3JsM
z3U5/On9gNzlV7BFvDvMviVDHbfrueAN65pO4LZM0QtHQrzPFCKnpa2yqhl9ip1L
sUuqTKseNOa6IooN9v8qKSKcGvJ5z6EIkwfv/me+IfWNdrrPr39SdVJ2lO31uceL
i7DnndSshhYeGQ==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:10:16 2026 by rpki-client