Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
File: trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json)
Hash identifier: GMY1sYHrE9nqBaxecxXDUjCXHQqwxf1fkCEDPxreX6s=
Subject key identifier: 21:9E:66:54:52:5E:FC:97:AC:93:B3:DE:98:62:FC:A9:86:AA:B4:1A
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Certificate issuer: /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial: 01A15E1EDBF5595218CAC05D06875BE071C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
Manifest number: 031B
Signing time: Wed 21 Oct 2026 11:00:42 +0000
Manifest this update: Wed 21 Oct 2026 11:00:42 +0000
Manifest next update: Thu 22 Oct 2026 11:00:42 +0000
Files and hashes: 1: R53abRTy3nsePVXZ6FXqbP844c0.roa (hash: roRhMTyLNIYOGvT9vt5IgOR5P+5/7DtKqsBJYyp8XnI=)
2: ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa (hash: RYLFC72B9dzFoQN0FlnNd+oyUoSf2vNtWKltjAP5ay0=)
3: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=)
4: loPeDfGPyDMlaIz52TWhtcsHUe8.roa (hash: eVYCTyXWXF7uzmYgmDXlX+QmiWaxF3k2ICYH5NEVWDE=)
5: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: /thkpjB61CnOcA4MQoBEjDpW6GmGcPrmy3caVuhWSB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:1e:db:f5:59:52:18:ca:c0:5d:06:87:5b:e0:71:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Validity
Not Before: Oct 21 11:00:42 2026 GMT
Not After : Oct 22 11:00:42 2026 GMT
Subject: CN=219e6654525efc97ac93b3de9862fca986aab41a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:5f:fa:f3:af:cb:62:9a:f7:60:05:de:be:
93:be:a4:d1:b9:4d:49:8f:bb:68:fe:83:c6:7f:84:
54:a2:d3:83:4d:e4:f5:41:3e:ed:31:8f:fb:6e:be:
b7:7a:5f:01:76:39:db:5b:89:aa:e0:3d:a9:07:84:
5c:1a:7f:ea:d1:54:5e:4b:43:af:f2:2d:11:1f:97:
87:eb:f9:ad:88:19:8c:e1:c0:53:00:c5:1e:cf:c6:
3d:af:e0:25:99:b9:03:fe:0b:3b:06:17:b0:d0:67:
6c:18:dc:cd:41:76:71:c5:4e:9c:5a:26:70:ce:4e:
a8:bf:b0:4e:44:65:3d:22:2e:56:fa:b6:20:f7:b8:
87:60:e8:7b:84:c9:01:42:b4:a9:6f:c0:f0:c8:81:
c7:f0:d0:7d:a0:b5:76:1b:c7:1c:74:5a:76:72:26:
39:81:68:ec:cb:ef:8f:55:b0:ef:95:03:23:ab:08:
9c:c3:7f:bb:e2:81:45:2b:aa:94:68:72:74:e4:3f:
79:d0:be:ae:aa:78:73:ed:9b:13:16:7f:d1:b8:86:
0f:f7:cf:8d:4d:a6:95:7d:c4:41:c2:8b:7e:7c:20:
8d:28:03:e7:42:dc:d4:6d:b5:a4:c3:24:4e:db:ec:
0c:31:03:19:5c:ba:50:cf:74:94:dd:a4:56:2f:48:
ed:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:66:54:52:5E:FC:97:AC:93:B3:DE:98:62:FC:A9:86:AA:B4:1A
X509v3 Authority Key Identifier:
keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a8:7e:2b:98:73:bf:b6:90:43:99:93:74:c4:ab:68:cb:87:
1e:b4:e2:a5:ad:2f:4f:7f:7a:df:4c:1a:ac:bf:fb:50:7d:de:
45:2e:7d:16:1a:2c:0e:54:37:05:1a:48:82:01:9b:81:fe:1d:
02:b4:66:d8:62:f5:eb:5e:d4:32:f4:67:6b:a9:77:45:0b:e0:
d9:9b:4b:08:78:d5:5f:f3:05:57:37:ed:85:f5:91:03:bb:16:
a3:ba:a9:b6:f1:a7:d5:45:28:33:78:a2:81:33:11:ba:f8:87:
21:2b:9d:63:3b:38:03:84:5f:5e:77:17:d9:e3:64:6b:be:37:
1e:0c:87:0e:b3:38:84:ae:1e:49:75:6d:e0:8e:77:54:50:bf:
9c:3d:8f:69:24:74:c8:d6:2f:f3:d8:08:68:3c:30:73:ee:48:
ef:92:85:db:89:69:b7:f7:2a:c1:7f:bc:a2:a3:b7:b6:b1:5e:
74:cb:4b:42:ac:3c:04:15:fd:fd:bb:e8:0a:79:2f:86:bd:0f:
15:94:bd:f5:33:63:4b:a2:10:ef:49:a1:79:99:af:38:be:f1:
68:2d:ae:c0:86:a3:31:3f:4e:07:de:6f:97:d8:5d:57:d8:71:
21:3d:f6:1a:cf:a4:b0:01:fd:6e:5c:e8:3e:de:e7:62:cf:9a:
4a:cd:5a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFeHtv1WVIYysBdBodb4HHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjIzMzNmMDY2NTczZjUzMTZlMDc1YTAxY2UyNDkwYjU4
YzZhZTEwHhcNMjYxMDIxMTEwMDQyWhcNMjYxMDIyMTEwMDQyWjAzMTEwLwYDVQQD
EygyMTllNjY1NDUyNWVmYzk3YWM5M2IzZGU5ODYyZmNhOTg2YWFiNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAritf+vOvy2Ka92AF3r6TvqTRuU1J
j7to/oPGf4RUotODTeT1QT7tMY/7br63el8BdjnbW4mq4D2pB4RcGn/q0VReS0Ov
8i0RH5eH6/mtiBmM4cBTAMUez8Y9r+AlmbkD/gs7Bhew0GdsGNzNQXZxxU6cWiZw
zk6ov7BORGU9Ii5W+rYg97iHYOh7hMkBQrSpb8DwyIHH8NB9oLV2G8ccdFp2ciY5
gWjsy++PVbDvlQMjqwicw3+74oFFK6qUaHJ05D950L6uqnhz7ZsTFn/RuIYP98+N
TaaVfcRBwot+fCCNKAPnQtzUbbWkwyRO2+wMMQMZXLpQz3SU3aRWL0jtGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGeZlRSXvyXrJOz3phi/KmGqrQaMB8GA1UdIwQY
MBaAFLayMz8GZXP1MW4HWgHOJJC1jGrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYt
ODA1MTcwYWM5YzBlLzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi81ZDY4YTItOTVkMy00ZGRmLTg1ZjYtODA1MTcwYWM5YzBl
LzEvdHJJelB3WmxjX1V4YmdkYUFjNGtrTFdNYXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKh+K5hz
v7aQQ5mTdMSraMuHHrTipa0vT39630warL/7UH3eRS59FhosDlQ3BRpIggGbgf4d
ArRm2GL1617UMvRna6l3RQvg2ZtLCHjVX/MFVzfthfWRA7sWo7qptvGn1UUoM3ii
gTMRuviHISudYzs4A4RfXncX2eNka743HgyHDrM4hK4eSXVt4I53VFC/nD2PaSR0
yNYv89gIaDwwc+5I75KF24lpt/cqwX+8oqO3trFedMtLQqw8BBX9/bvoCnkvhr0P
FZS99TNjS6IQ70mheZmvOL7xaC2uwIajMT9OB95vl9hdV9hxIT32Gs+ksAH9blzo
Pt7nYs+aSs1aug==
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:18:40 2026 by rpki-client