Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: eahylmhyoq3FjfIS41drj2K9pcA16kvbQo6vavZKK3I=
Subject key identifier: 6D:32:52:94:59:65:FD:10:C4:DE:C9:22:76:1D:20:98:55:6C:F2:09
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01A14E3E13A3FFF02B9EEB91EA2FF1A9BA9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 1AB1
Signing time: Sun 18 Oct 2026 09:00:53 +0000
Manifest this update: Sun 18 Oct 2026 09:00:53 +0000
Manifest next update: Mon 19 Oct 2026 09:00:53 +0000
Files and hashes: 1: 7cWy2Dtu0T2NpUUPeyRVXzPq6qo.asa (hash: vB+jjoSmWpEAyNuaRojaUydNr1k4NHyMcQ12V/XrEsc=)
2: 8L86EXisfMWARlTLlv2bxbPUN_E.roa (hash: 5jC5ZKIGyizvr6GbHsW0/xJUuk1S0ZkI1AjiMly1A0Y=)
3: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: c+zRE0gXOmOCIfwS5rRIbhI9UavEJVSiawSDqdf7doA=)
4: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (hash: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:3e:13:a3:ff:f0:2b:9e:eb:91:ea:2f:f1:a9:ba:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Oct 18 09:00:53 2026 GMT
Not After : Oct 19 09:00:53 2026 GMT
Subject: CN=6d3252945965fd10c4dec922761d2098556cf209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:86:88:4a:8f:f7:8d:1a:ea:ad:68:ff:77:fb:
29:cb:8c:2d:ca:46:4e:46:a7:7a:78:2c:00:1c:4d:
db:3c:a9:03:df:ef:ff:4b:98:13:9a:ce:cf:be:96:
cb:6f:c1:a6:3e:3b:ca:b7:1c:b3:31:be:6d:ed:e8:
2f:7c:a8:d2:ea:23:48:60:5f:85:2d:4d:30:5a:ff:
c9:d7:2e:81:c4:df:6a:17:ee:f6:1c:d2:51:c4:0b:
cd:51:ee:4c:1f:95:c4:21:2c:50:43:db:42:f9:2d:
41:90:d4:c2:10:33:d7:a2:be:03:a9:a4:52:ad:02:
0f:33:96:c4:ae:34:4b:7f:a0:22:2a:1a:12:fa:81:
59:db:e8:e0:64:bc:db:85:ae:45:3b:ea:86:ea:47:
98:04:bc:30:2a:a8:59:b4:e2:27:41:7b:a5:73:47:
a1:ce:30:dd:04:dc:7b:28:82:db:4c:ad:d9:28:8a:
e7:78:13:dd:e3:40:b2:66:aa:60:0a:86:38:5f:41:
0d:c4:60:5a:08:63:ca:af:46:c0:95:8f:1f:9e:a1:
49:7b:9a:15:26:aa:fa:7d:9d:44:97:d9:67:e4:e9:
0c:c7:f0:a0:ce:c5:ea:f3:07:ba:e8:7d:22:4f:63:
35:c5:e6:72:5f:02:69:3f:a2:00:88:8a:c8:07:b0:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:32:52:94:59:65:FD:10:C4:DE:C9:22:76:1D:20:98:55:6C:F2:09
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:14:6d:3b:76:47:8d:6d:7e:db:cc:84:b7:a8:4f:22:f3:44:
e4:18:0e:d6:dd:fa:59:0a:c3:14:40:0c:e7:7f:e1:0c:4c:17:
20:db:cd:4e:be:ec:13:fd:58:2b:64:50:1d:e8:fe:6e:df:76:
d2:06:f5:d9:f1:c0:2f:d9:d1:84:17:67:5c:1c:74:2b:c3:a6:
62:f0:9d:b6:f5:0d:e5:4d:18:d1:b5:91:37:49:50:e4:24:7e:
c0:94:b9:1a:84:37:00:6d:d1:e0:89:e4:70:24:0a:60:5a:2d:
e9:08:df:ca:94:3d:01:bb:8c:40:ca:2b:a2:7c:3f:18:89:7d:
9a:a6:35:ce:ad:ce:ac:a4:b8:49:f2:94:79:48:05:4f:20:c3:
7d:92:4d:81:0d:ee:12:8c:53:6c:cb:e5:ca:41:aa:b8:0b:69:
de:dd:d4:ab:11:df:50:9e:df:62:ac:c8:55:b6:66:d6:48:db:
9c:f4:6e:c6:6a:67:6e:82:e3:d2:d2:ba:06:12:e9:e5:39:9f:
22:cd:76:b9:91:a4:55:0d:4e:a2:b1:85:d9:53:dd:f1:45:c5:
2e:18:00:6f:8a:3a:33:c9:7a:b7:a3:32:d7:cf:70:9d:0d:ed:
31:19:22:b6:94:95:cb:a4:b4:68:5a:30:78:66:31:51:55:ab:
53:df:e7:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOPhOj//ArnuuR6i/xqbqaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MGRkM2QzYzUyZDRjNmZhNTFiN2E4MzM1NzhjZWZiM2Fi
MjY2NDkwHhcNMjYxMDE4MDkwMDUzWhcNMjYxMDE5MDkwMDUzWjAzMTEwLwYDVQQD
Eyg2ZDMyNTI5NDU5NjVmZDEwYzRkZWM5MjI3NjFkMjA5ODU1NmNmMjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84aISo/3jRrqrWj/d/spy4wtykZO
Rqd6eCwAHE3bPKkD3+//S5gTms7PvpbLb8GmPjvKtxyzMb5t7egvfKjS6iNIYF+F
LU0wWv/J1y6BxN9qF+72HNJRxAvNUe5MH5XEISxQQ9tC+S1BkNTCEDPXor4DqaRS
rQIPM5bErjRLf6AiKhoS+oFZ2+jgZLzbha5FO+qG6keYBLwwKqhZtOInQXulc0eh
zjDdBNx7KILbTK3ZKIrneBPd40CyZqpgCoY4X0ENxGBaCGPKr0bAlY8fnqFJe5oV
Jqr6fZ1El9ln5OkMx/CgzsXq8we66H0iT2M1xeZyXwJpP6IAiIrIB7DZfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0yUpRZZf0QxN7JInYdIJhVbPIJMB8GA1UdIwQY
MBaAFAQN09PFLUxvpRt6gzV4zvs6smZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMt
YzJjMmFjYjkwOGJjLzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mZmMzNDktZjMyNi00MDk2LWJjYjMtYzJjMmFjYjkwOGJj
LzEvQkEzVDA4VXRURy1sRzNxRE5Yak8tenF5WmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBRtO3ZH
jW1+28yEt6hPIvNE5BgO1t36WQrDFEAM53/hDEwXINvNTr7sE/1YK2RQHej+bt92
0gb12fHAL9nRhBdnXBx0K8OmYvCdtvUN5U0Y0bWRN0lQ5CR+wJS5GoQ3AG3R4Ink
cCQKYFot6QjfypQ9AbuMQMoronw/GIl9mqY1zq3OrKS4SfKUeUgFTyDDfZJNgQ3u
EoxTbMvlykGquAtp3t3UqxHfUJ7fYqzIVbZm1kjbnPRuxmpnboLj0tK6BhLp5Tmf
Is12uZGkVQ1OorGF2VPd8UXFLhgAb4o6M8l6t6My189wnQ3tMRkitpSVy6S0aFow
eGYxUVWrU9/nIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 14:44:07 2026 by rpki-client