Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
File: P1oa6clM3jczsUz3HS5FAjYCG-c.mft (raw, json)
Hash identifier: jtxNWswjSApQpOCzkLl6SArs7+Q9d+CpriEuWhNeZyc=
Subject key identifier: B2:D7:47:3C:01:FF:EB:33:4D:4E:24:3C:7F:19:E5:62:2A:26:85:2D
Authority key identifier: 3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
Certificate issuer: /CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Certificate serial: 01A168A360194BA513DAFEE5BB30B7F6AA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
Manifest number: 0134
Signing time: Fri 23 Oct 2026 12:01:39 +0000
Manifest this update: Fri 23 Oct 2026 12:01:39 +0000
Manifest next update: Sat 24 Oct 2026 12:01:39 +0000
Files and hashes: 1: 5tvg6R-aNFHAmDm8hsBhHIkdM_o.roa (hash: oPbe4w173UuB1VDOYJqEbd8iNWC/h8MGEf5qvBqUZd0=)
2: P1oa6clM3jczsUz3HS5FAjYCG-c.crl (hash: MzgueuNxcb/H5H0olNobI3mkLLALTJW3Zs23Jxrrj6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:a3:60:19:4b:a5:13:da:fe:e5:bb:30:b7:f6:aa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5a1ae9c94cde3733b14cf71d2e450236021be7
Validity
Not Before: Oct 23 12:01:39 2026 GMT
Not After : Oct 24 12:01:39 2026 GMT
Subject: CN=b2d7473c01ffeb334d4e243c7f19e5622a26852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:46:ec:d4:8a:96:fe:02:c1:69:8d:2a:44:
c7:f8:17:5c:67:47:2b:7b:0d:ed:17:29:a7:68:62:
de:02:8e:5a:e4:10:19:a2:ce:d3:b2:9b:f5:ed:31:
73:0c:8f:03:8d:11:b4:71:73:48:67:49:14:d2:a5:
8f:73:b0:5f:6c:a5:6b:1e:fe:b8:19:6f:a7:cd:47:
b1:c6:7d:24:7a:8c:37:bb:b8:de:d8:66:62:ac:b1:
f6:d6:3c:a4:89:85:8c:ae:ad:2e:80:9a:dc:f0:1f:
dd:39:60:87:48:a8:65:dc:cf:b9:7a:e5:a0:ab:ef:
6f:f1:51:1a:ae:46:73:ca:77:97:d3:7c:ca:d4:10:
12:8b:94:8f:2d:5e:27:6a:de:80:a7:2d:4e:b6:b5:
9e:95:d4:53:ab:d3:a7:b5:50:d9:19:c3:57:62:47:
80:6c:b8:35:35:85:46:74:8f:8a:8c:e3:bf:40:6b:
4c:2e:e0:b5:53:6a:7d:ae:10:76:85:c9:12:66:df:
18:68:e5:db:87:63:fe:43:69:41:23:b6:44:21:a5:
56:e5:ff:d7:9a:71:c2:c6:35:cc:6c:f0:c9:6a:02:
4d:e5:00:e5:74:17:da:84:74:9e:f7:41:d0:74:bf:
e5:65:26:c8:24:f6:42:54:bb:e5:7e:a0:8c:1c:e6:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:47:3C:01:FF:EB:33:4D:4E:24:3C:7F:19:E5:62:2A:26:85:2D
X509v3 Authority Key Identifier:
keyid:3F:5A:1A:E9:C9:4C:DE:37:33:B1:4C:F7:1D:2E:45:02:36:02:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1oa6clM3jczsUz3HS5FAjYCG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7309a9-46c8-4240-afef-840881a4d30d/1/P1oa6clM3jczsUz3HS5FAjYCG-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:2f:89:42:5a:4c:93:b1:4c:ac:b0:d5:38:fa:a1:3c:32:a9:
a7:23:38:8a:16:9d:7a:4f:d6:1e:3d:81:c0:d3:b0:8d:91:c0:
c8:38:75:13:17:ea:98:1b:16:69:ce:35:6b:e4:dc:fd:e7:b3:
82:2a:16:64:5d:85:79:df:72:68:26:5b:8d:d1:02:d6:5e:d0:
ae:36:65:1c:11:c8:b9:57:ab:72:06:b6:dd:a8:39:e2:66:65:
7d:61:34:0e:7e:e8:94:6d:d6:01:69:70:15:7a:3f:d9:90:34:
43:8d:c5:94:58:38:2d:e2:ff:7b:1b:12:fd:97:cf:ce:cc:4c:
6f:9d:05:57:3a:31:4e:02:38:f9:ad:44:7e:57:16:64:3a:d5:
21:97:a2:4c:ab:66:d5:2d:5b:6d:2b:47:eb:29:a8:0f:9e:62:
32:95:e7:e3:67:e7:e0:25:1f:36:fa:55:a4:22:cd:e2:82:ba:
13:1d:fc:42:2c:5e:39:4d:66:4f:86:a8:91:91:40:38:d8:97:
65:62:55:d7:fe:83:61:f6:ab:0c:f4:1a:e4:ab:33:87:5f:79:
a3:82:cf:5f:f4:eb:f5:36:8f:4b:4e:88:05:88:85:f6:7b:94:
b1:10:f2:69:ff:52:57:c0:49:9d:06:91:b5:37:b3:27:ce:0d:
80:e7:3b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFoo2AZS6UT2v7luzC39qpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmNWExYWU5Yzk0Y2RlMzczM2IxNGNmNzFkMmU0NTAyMzYw
MjFiZTcwHhcNMjYxMDIzMTIwMTM5WhcNMjYxMDI0MTIwMTM5WjAzMTEwLwYDVQQD
EyhiMmQ3NDczYzAxZmZlYjMzNGQ0ZTI0M2M3ZjE5ZTU2MjJhMjY4NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra5G7NSKlv4CwWmNKkTH+BdcZ0cr
ew3tFymnaGLeAo5a5BAZos7Tspv17TFzDI8DjRG0cXNIZ0kU0qWPc7BfbKVrHv64
GW+nzUexxn0keow3u7je2GZirLH21jykiYWMrq0ugJrc8B/dOWCHSKhl3M+5euWg
q+9v8VEarkZzyneX03zK1BASi5SPLV4nat6Apy1OtrWeldRTq9OntVDZGcNXYkeA
bLg1NYVGdI+KjOO/QGtMLuC1U2p9rhB2hckSZt8YaOXbh2P+Q2lBI7ZEIaVW5f/X
mnHCxjXMbPDJagJN5QDldBfahHSe90HQdL/lZSbIJPZCVLvlfqCMHOb7JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLXRzwB/+szTU4kPH8Z5WIqJoUtMB8GA1UdIwQY
MBaAFD9aGunJTN43M7FM9x0uRQI2AhvnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDFvYTZjbE0zamN6c1V6M0hTNUZBallDRy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYt
ODQwODgxYTRkMzBkLzEvUDFvYTZjbE0zamN6c1V6M0hTNUZBallDRy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83MzA5YTktNDZjOC00MjQwLWFmZWYtODQwODgxYTRkMzBk
LzEvUDFvYTZjbE0zamN6c1V6M0hTNUZBallDRy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1i+JQlpM
k7FMrLDVOPqhPDKppyM4ihadek/WHj2BwNOwjZHAyDh1ExfqmBsWac41a+Tc/eez
gioWZF2Fed9yaCZbjdEC1l7QrjZlHBHIuVercga23ag54mZlfWE0Dn7olG3WAWlw
FXo/2ZA0Q43FlFg4LeL/exsS/ZfPzsxMb50FVzoxTgI4+a1EflcWZDrVIZeiTKtm
1S1bbStH6ymoD55iMpXn42fn4CUfNvpVpCLN4oK6Ex38QixeOU1mT4aokZFAONiX
ZWJV1/6DYfarDPQa5Kszh195o4LPX/Tr9TaPS06IBYiF9nuUsRDyaf9SV8BJnQaR
tTezJ84NgOc7Xw==
-----END CERTIFICATE-----
Generated at Fri Oct 23 15:36:06 2026 by rpki-client