Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: wRNup0gVZiYQ9cDE7C/udN/S7mYB4JWEjoTt3EpUR70=
Subject key identifier: 2E:7F:4C:06:14:DD:3B:06:5C:9D:40:FB:40:14:C0:F8:91:6F:C6:90
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01A17F98E2E4EF8FD663CA94305DB46F4E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 1ADF
Signing time: Tue 27 Oct 2026 23:01:28 +0000
Manifest this update: Tue 27 Oct 2026 23:01:28 +0000
Manifest next update: Wed 28 Oct 2026 23:01:28 +0000
Files and hashes: 1: 1-5e-ZofQabhYdvBaKzUZn6VEjeQ.roa (hash: l1nCT+YTfjZffb+7AxU215iE+MqyAt5MOsQQFu/7geE=)
2: 3nUsl4RKj2z8CbMrvpcEfFCm3Ec.roa (hash: xOzepGbNFbatCq0zjXI/FXTlrydlg5FPTLxwydIci84=)
3: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: Z89G14yr+AIkzsJHdaP43Snft+WyYLAAATU1ye1yuNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:e2:e4:ef:8f:d6:63:ca:94:30:5d:b4:6f:4e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Oct 27 23:01:28 2026 GMT
Not After : Oct 28 23:01:28 2026 GMT
Subject: CN=2e7f4c0614dd3b065c9d40fb4014c0f8916fc690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2e:08:b1:b1:3c:23:65:92:b2:af:fe:01:f3:
bc:3d:52:eb:20:a2:81:ec:d6:27:c2:1e:58:79:25:
5e:25:f5:18:8e:db:b2:b2:e1:3e:8f:f2:48:e9:01:
97:27:3b:21:f1:69:93:28:b2:e1:68:f2:b2:99:db:
7d:08:3d:e3:50:48:8f:f3:0f:5a:b4:ad:88:47:32:
9d:ce:61:13:89:9c:08:ee:8c:49:a2:53:df:f1:73:
07:d5:e9:90:74:c6:08:b1:66:e5:12:7e:0a:eb:ce:
99:25:36:11:3a:ae:3f:4d:ac:6e:f0:ef:7a:7d:70:
de:6b:67:94:e3:df:ea:20:24:83:05:16:58:06:e5:
82:fd:6e:5c:73:54:36:7a:9b:6b:fc:c8:63:3a:b9:
1a:ec:fd:03:f1:17:bb:56:4f:d6:f8:a3:d5:ae:7a:
4f:a1:1b:96:56:6b:2f:e9:35:f9:08:39:d0:00:e6:
9d:0a:b6:39:8e:74:35:b9:eb:60:1d:59:2f:c1:b2:
89:a2:bb:26:2b:a6:ca:f7:59:dc:42:eb:ee:3e:ab:
f8:b2:a8:6b:b1:3e:4d:19:fb:5f:5b:47:c0:1b:9a:
54:63:fc:00:0b:f0:e0:2e:2a:53:66:e0:cf:a7:09:
e9:d3:03:e5:d7:52:f0:9f:66:0b:ed:0a:f3:59:04:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:4C:06:14:DD:3B:06:5C:9D:40:FB:40:14:C0:F8:91:6F:C6:90
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:70:2b:03:a6:21:cc:13:aa:b7:8c:4c:50:9a:70:fe:20:33:
ee:fb:96:d1:27:c1:cb:91:3c:a0:21:c0:c1:6f:4f:94:91:44:
9d:ea:7b:6f:d5:fb:71:dc:4d:31:db:33:a4:bc:3f:e4:01:8c:
74:19:f1:c5:bb:33:d1:6f:f2:a1:74:04:1d:2b:75:33:79:52:
55:e6:2d:05:92:d8:a0:7d:97:8e:b5:0b:e2:a2:b0:bc:19:e0:
eb:d2:e2:ea:c4:b1:c9:dc:f1:36:72:8f:34:c4:2e:53:ad:fb:
66:3d:21:1e:61:df:f8:32:bf:4e:14:ba:ce:12:54:ba:6d:51:
6f:d0:18:af:54:dd:ef:1b:29:bc:47:1b:40:bc:75:f8:89:15:
63:22:cd:cd:f3:b9:9e:2f:28:07:e7:d0:ed:69:58:d1:71:0a:
4e:3b:f7:21:e8:2d:07:2e:cd:5a:24:5a:f5:fe:29:cc:3f:93:
ab:da:c5:1b:ce:f5:69:29:d3:40:a7:f2:d2:d3:a3:97:e9:b7:
7e:12:09:2e:61:96:c1:18:d4:7d:2b:0a:72:5f:90:2e:9d:ea:
1a:67:b9:7b:7a:79:39:c8:b2:da:f6:61:35:17:50:dd:26:9f:
d5:e4:99:b2:5f:78:ec:af:e8:fb:95:93:85:aa:bb:a7:8d:c5:
78:ec:d2:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mOLk74/WY8qUMF20b04VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk
MzFmMmUwHhcNMjYxMDI3MjMwMTI4WhcNMjYxMDI4MjMwMTI4WjAzMTEwLwYDVQQD
EygyZTdmNGMwNjE0ZGQzYjA2NWM5ZDQwZmI0MDE0YzBmODkxNmZjNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS4IsbE8I2WSsq/+AfO8PVLrIKKB
7NYnwh5YeSVeJfUYjtuysuE+j/JI6QGXJzsh8WmTKLLhaPKymdt9CD3jUEiP8w9a
tK2IRzKdzmETiZwI7oxJolPf8XMH1emQdMYIsWblEn4K686ZJTYROq4/Taxu8O96
fXDea2eU49/qICSDBRZYBuWC/W5cc1Q2eptr/MhjOrka7P0D8Re7Vk/W+KPVrnpP
oRuWVmsv6TX5CDnQAOadCrY5jnQ1uetgHVkvwbKJorsmK6bK91ncQuvuPqv4sqhr
sT5NGftfW0fAG5pUY/wAC/DgLipTZuDPpwnp0wPl11Lwn2YL7QrzWQSzjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5/TAYU3TsGXJ1A+0AUwPiRb8aQMB8GA1UdIwQY
MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt
ZGM4YjUyZTNlYTBhLzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh
LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHArA6Yh
zBOqt4xMUJpw/iAz7vuW0SfBy5E8oCHAwW9PlJFEnep7b9X7cdxNMdszpLw/5AGM
dBnxxbsz0W/yoXQEHSt1M3lSVeYtBZLYoH2XjrUL4qKwvBng69Li6sSxydzxNnKP
NMQuU637Zj0hHmHf+DK/ThS6zhJUum1Rb9AYr1Td7xspvEcbQLx1+IkVYyLNzfO5
ni8oB+fQ7WlY0XEKTjv3IegtBy7NWiRa9f4pzD+Tq9rFG871aSnTQKfy0tOjl+m3
fhIJLmGWwRjUfSsKcl+QLp3qGme5e3p5Ociy2vZhNRdQ3Saf1eSZsl947K/o+5WT
haq7p43FeOzS6w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:05 2026 by rpki-client