Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier: 0VFl28ctP/kFcF7URFMJhZn1c2yGmW9uXNLF6Bri4PQ=
Subject key identifier: DB:67:32:CB:B5:BC:B2:97:4B:67:07:5D:E1:28:2F:73:C7:FF:54:8D
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01A0238D3F3556192B0A391CE8B61EB3F3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number: 13F1
Signing time: Fri 21 Aug 2026 09:00:54 +0000
Manifest this update: Fri 21 Aug 2026 09:00:54 +0000
Manifest next update: Sat 22 Aug 2026 09:00:54 +0000
Files and hashes: 1: 2zW08BKeRm7D1IDPo_HIO01939Y.roa (hash: 47sX7u1KvuJt0tJls26PNQunkQblcdvkWNhCFldDuVU=)
2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
5: Txc0Y3w5O2MeuabOsp_i0fCstJU.roa (hash: XbbTV+bUv06PJ/qu0aw1RaX6Asirn+MLh6nL3Y4mz7s=)
6: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: Ya3Bh1+Gux+Ka8kvbQ0IhgtCvT6AN/U8CpfiWQ91bts=)
8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:8d:3f:35:56:19:2b:0a:39:1c:e8:b6:1e:b3:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Aug 21 09:00:54 2026 GMT
Not After : Aug 22 09:00:54 2026 GMT
Subject: CN=db6732cbb5bcb2974b67075de1282f73c7ff548d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:19:64:6f:4f:74:c2:04:c8:04:af:7f:92:
fa:0c:15:59:da:75:81:da:58:71:2e:f8:2c:0d:c4:
c2:da:86:08:7d:32:18:d2:94:8c:6e:9a:11:ab:46:
b0:f4:84:a9:e9:0d:86:8e:ab:98:e7:de:c5:90:8f:
0e:54:8e:b6:fa:6e:7a:1e:0d:8e:93:9c:a4:99:39:
54:e1:14:c0:87:05:24:14:97:3d:6e:36:e4:c5:95:
b8:fe:61:20:97:6c:0f:3f:37:c6:34:aa:5e:24:03:
72:ce:ba:59:6b:2c:72:ce:5b:2c:cb:03:71:3d:8e:
ff:bb:24:fc:62:c5:14:f8:45:1a:d3:05:4e:45:00:
64:ac:e9:1a:a5:85:15:63:70:35:f2:6d:db:45:c4:
57:32:15:aa:ca:6e:cd:a5:c4:ee:ea:a8:ec:be:34:
e8:3b:e5:1a:20:b1:89:36:d1:e0:45:9c:7b:17:e0:
8b:3d:d7:4f:73:6f:d3:99:87:27:0d:b7:2e:61:ab:
b1:5e:b5:30:c2:f2:db:40:d6:a4:84:6d:6a:20:e9:
b6:a4:18:ed:38:d9:1f:b9:13:82:ea:ca:fa:d8:7b:
58:9c:86:5e:90:e2:47:12:71:fa:23:73:38:0c:42:
70:89:5f:24:15:ba:c9:8a:f4:fb:1d:1b:cf:f3:e1:
71:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:67:32:CB:B5:BC:B2:97:4B:67:07:5D:E1:28:2F:73:C7:FF:54:8D
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:36:2d:e1:15:8b:d7:67:32:63:3f:83:88:64:e5:ff:18:
07:80:9b:da:6e:62:d0:a5:18:df:d3:3e:74:e7:86:2f:91:91:
06:39:7c:65:7b:dc:d9:df:49:41:67:35:82:23:ac:1b:9e:61:
9c:d3:f4:74:56:ea:17:9e:c5:39:cb:67:ed:ef:84:c5:74:62:
cb:f5:29:65:1a:83:97:46:8d:b3:af:aa:2d:17:39:0d:fd:e9:
46:f6:81:4b:de:63:9c:05:8a:4f:8c:9b:c6:cd:fe:7b:63:53:
21:a9:ae:e8:e4:1a:4a:b4:ed:4b:17:21:c2:4c:f0:fe:54:b1:
c5:fd:99:c7:a8:af:26:b1:41:15:fe:4a:25:a5:2b:a7:9f:96:
24:3f:44:01:ea:a2:95:83:f2:9e:d6:55:09:de:c9:78:4a:50:
66:1a:f1:b7:1d:d8:fd:6e:a3:14:e8:e8:15:7a:cb:67:2a:9a:
2a:03:e0:b5:86:2b:06:1d:b8:a4:c9:ae:a3:c0:00:a2:78:d4:
10:10:fa:69:34:04:4b:e6:e6:9b:3a:fb:fb:5e:d5:31:79:2f:
8b:9d:a0:b4:7e:e1:29:ac:67:e3:b2:18:df:54:30:a3:ba:49:
14:0a:e9:d0:bf:50:1b:cc:7d:61:9c:10:92:fa:6e:2f:98:49:
22:5e:b5:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAjjT81VhkrCjkc6LYes/P1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw
Njk3ZDkwHhcNMjYwODIxMDkwMDU0WhcNMjYwODIyMDkwMDU0WjAzMTEwLwYDVQQD
EyhkYjY3MzJjYmI1YmNiMjk3NGI2NzA3NWRlMTI4MmY3M2M3ZmY1NDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXMZZG9PdMIEyASvf5L6DBVZ2nWB
2lhxLvgsDcTC2oYIfTIY0pSMbpoRq0aw9ISp6Q2GjquY597FkI8OVI62+m56Hg2O
k5ykmTlU4RTAhwUkFJc9bjbkxZW4/mEgl2wPPzfGNKpeJANyzrpZayxyzlssywNx
PY7/uyT8YsUU+EUa0wVORQBkrOkapYUVY3A18m3bRcRXMhWqym7NpcTu6qjsvjTo
O+UaILGJNtHgRZx7F+CLPddPc2/TmYcnDbcuYauxXrUwwvLbQNakhG1qIOm2pBjt
ONkfuROC6sr62HtYnIZekOJHEnH6I3M4DEJwiV8kFbrJivT7HRvP8+FxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtnMsu1vLKXS2cHXeEoL3PH/1SNMB8GA1UdIwQY
MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt
Mzk2YmM3MjBlMmI0LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0
LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKU2LeEV
i9dnMmM/g4hk5f8YB4Cb2m5i0KUY39M+dOeGL5GRBjl8ZXvc2d9JQWc1giOsG55h
nNP0dFbqF57FOctn7e+ExXRiy/UpZRqDl0aNs6+qLRc5Df3pRvaBS95jnAWKT4yb
xs3+e2NTIamu6OQaSrTtSxchwkzw/lSxxf2Zx6ivJrFBFf5KJaUrp5+WJD9EAeqi
lYPyntZVCd7JeEpQZhrxtx3Y/W6jFOjoFXrLZyqaKgPgtYYrBh24pMmuo8AAonjU
EBD6aTQES+bmmzr7+17VMXkvi52gtH7hKaxn47IY31Qwo7pJFArp0L9QG8x9YZwQ
kvpuL5hJIl61XQ==
-----END CERTIFICATE-----
Generated at Fri Aug 21 12:42:03 2026 by rpki-client