Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
File: idvHFWpO58Z9nmhHZ6L0uvijW6s.mft (raw, json)
Hash identifier: IbPSCLUGNrb4eZXatHK2kcJerwL9Ij+Xo5KYSogL8b8=
Subject key identifier: CF:BE:F4:E9:A3:D4:C7:1A:B5:1E:64:36:84:54:E4:FE:A1:43:00:FD
Authority key identifier: 89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
Certificate issuer: /CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Certificate serial: 01A0292119EF858D216BAA838EDD4378DB29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
Manifest number: 1A1B
Signing time: Sat 22 Aug 2026 11:00:30 +0000
Manifest this update: Sat 22 Aug 2026 11:00:30 +0000
Manifest next update: Sun 23 Aug 2026 11:00:30 +0000
Files and hashes: 1: AMtRKXkFFUuu-FBFySOQZFh0CVc.asa (hash: m8zsToffrsGJPD49WuP8tnJc1KNywcrURjmTcAwvTds=)
2: GBd4rVL5dJN0-9cuwhBBwNEyoV0.roa (hash: iRjXs3gr4L7byQxpcKRUar4Pisuwylgwnacqi0QdLQQ=)
3: PLZ1UvYELfgIKPLrh6OHNKK9acc.roa (hash: Shni7jpvErA8s5MzWpDHouyJxJ3M6Tbya9IWgb+KMM8=)
4: idvHFWpO58Z9nmhHZ6L0uvijW6s.crl (hash: Jpu4JWIv1wbBzhJYnB0DmcWLlM8Wn6WrlIVz+pM1LW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:21:19:ef:85:8d:21:6b:aa:83:8e:dd:43:78:db:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dbc7156a4ee7c67d9e684767a2f4baf8a35bab
Validity
Not Before: Aug 22 11:00:30 2026 GMT
Not After : Aug 23 11:00:30 2026 GMT
Subject: CN=cfbef4e9a3d4c71ab51e64368454e4fea14300fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:64:a0:fe:1a:2a:a7:a5:a5:5f:87:2b:64:42:
d9:03:6b:14:95:01:5e:75:ff:9d:4f:4a:fa:bc:55:
bb:a2:05:2e:35:ee:45:33:21:ca:4a:c9:5e:f4:7a:
10:65:4d:a4:07:7a:5b:4e:44:b8:1c:9b:78:ed:75:
23:3e:11:8d:ca:77:fb:65:18:00:ef:ae:16:3b:e2:
22:e5:26:4a:96:30:00:b7:aa:09:bf:c8:e6:0c:4d:
b8:a8:72:68:43:db:2b:7a:00:ed:a7:59:88:35:2b:
d0:59:bc:78:c7:44:f4:32:4b:2e:6d:cf:d6:e2:de:
da:be:c6:b6:1c:bf:5f:96:c4:fc:1b:6d:da:0f:b0:
7c:cb:f2:c5:d2:c1:c8:fe:ed:99:aa:92:b3:14:88:
aa:dd:10:bf:ac:eb:52:c3:8a:b6:24:77:17:5a:70:
ec:2f:b4:d0:7d:ff:f4:90:91:a1:c4:f2:73:3d:3e:
5e:c2:8f:ac:8f:d9:2a:b8:7e:5b:9b:28:af:ea:ba:
c2:b2:9d:68:89:a9:9e:d2:d8:62:11:2d:f7:26:1e:
c5:7d:e3:f6:4a:83:0e:ba:6c:f1:b3:c2:4c:e3:a7:
3a:8c:d4:2c:80:93:a0:4e:23:7d:f4:c3:c3:32:6b:
b3:0f:a0:cf:cc:97:de:2c:36:e6:3b:60:68:97:9a:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BE:F4:E9:A3:D4:C7:1A:B5:1E:64:36:84:54:E4:FE:A1:43:00:FD
X509v3 Authority Key Identifier:
keyid:89:DB:C7:15:6A:4E:E7:C6:7D:9E:68:47:67:A2:F4:BA:F8:A3:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idvHFWpO58Z9nmhHZ6L0uvijW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5a9a99-43c2-4cc8-a37b-49501a7694c4/1/idvHFWpO58Z9nmhHZ6L0uvijW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:aa:45:b8:80:e7:c6:9c:aa:9c:2b:b0:29:7d:ae:67:64:7a:
7c:6e:a8:b4:40:14:03:c8:41:68:7a:e5:f5:e2:ca:a7:d4:c4:
1b:a3:01:dd:06:f8:7f:83:ae:df:49:70:7e:59:14:cf:0e:08:
10:d7:78:41:19:78:66:45:95:c9:d5:00:50:6b:2b:f2:2a:33:
10:67:bf:e0:04:d3:a4:0d:2d:b9:4d:f6:b8:58:cf:4c:5f:95:
31:df:b4:6e:70:fd:95:ef:74:b2:76:02:6e:2d:4a:68:5f:61:
e0:61:bc:ea:0e:72:c4:c7:24:0e:4f:9e:5c:4c:69:27:d8:ee:
f9:a8:b0:cc:b1:c2:6e:8e:e5:61:18:b5:79:a8:ae:3f:25:0a:
9d:be:75:3b:9e:17:d6:01:b8:6e:eb:fa:af:12:a6:08:fc:cf:
10:3a:96:f2:a5:3d:a3:2b:a8:38:c3:af:d2:05:5b:45:d7:36:
c2:86:f0:39:cd:70:85:52:bc:69:54:ee:d0:7e:4c:e7:9d:94:
e2:2f:ca:af:b0:c2:40:7a:84:aa:84:a3:92:19:a6:6a:da:ec:
95:f8:a2:6f:6d:0a:64:2c:0c:ae:9d:5e:c8:36:a6:8e:e7:6b:
46:24:11:80:72:53:11:df:52:dd:61:76:bf:43:fd:ef:bd:1d:
6d:2d:c8:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaApIRnvhY0ha6qDjt1DeNspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGJjNzE1NmE0ZWU3YzY3ZDllNjg0NzY3YTJmNGJhZjhh
MzViYWIwHhcNMjYwODIyMTEwMDMwWhcNMjYwODIzMTEwMDMwWjAzMTEwLwYDVQQD
EyhjZmJlZjRlOWEzZDRjNzFhYjUxZTY0MzY4NDU0ZTRmZWExNDMwMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWSg/hoqp6WlX4crZELZA2sUlQFe
df+dT0r6vFW7ogUuNe5FMyHKSsle9HoQZU2kB3pbTkS4HJt47XUjPhGNynf7ZRgA
764WO+Ii5SZKljAAt6oJv8jmDE24qHJoQ9sregDtp1mINSvQWbx4x0T0Mksubc/W
4t7avsa2HL9flsT8G23aD7B8y/LF0sHI/u2ZqpKzFIiq3RC/rOtSw4q2JHcXWnDs
L7TQff/0kJGhxPJzPT5ewo+sj9kquH5bmyiv6rrCsp1oiame0thiES33Jh7FfeP2
SoMOumzxs8JM46c6jNQsgJOgTiN99MPDMmuzD6DPzJfeLDbmO2Bol5p0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM++9Omj1McatR5kNoRU5P6hQwD9MB8GA1UdIwQY
MBaAFInbxxVqTufGfZ5oR2ei9Lr4o1urMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2It
NDk1MDFhNzY5NGM0LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy81YTlhOTktNDNjMi00Y2M4LWEzN2ItNDk1MDFhNzY5NGM0
LzEvaWR2SEZXcE81OFo5bm1oSFo2TDB1dmlqVzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHapFuIDn
xpyqnCuwKX2uZ2R6fG6otEAUA8hBaHrl9eLKp9TEG6MB3Qb4f4Ou30lwflkUzw4I
ENd4QRl4ZkWVydUAUGsr8iozEGe/4ATTpA0tuU32uFjPTF+VMd+0bnD9le90snYC
bi1KaF9h4GG86g5yxMckDk+eXExpJ9ju+aiwzLHCbo7lYRi1eaiuPyUKnb51O54X
1gG4buv6rxKmCPzPEDqW8qU9oyuoOMOv0gVbRdc2wobwOc1whVK8aVTu0H5M552U
4i/Kr7DCQHqEqoSjkhmmatrslfiib20KZCwMrp1eyDamjudrRiQRgHJTEd9S3WF2
v0P9770dbS3IJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 22 20:23:16 2026 by rpki-client