Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File: Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier: kaH2LvXYX/rTKgoXiPH8PFusB59E2DbW+r8+TfbuVWo=
Subject key identifier: 2D:FE:0F:40:11:75:B7:D3:D4:CB:68:6A:0F:D2:91:A4:E1:BF:B7:21
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial: 01A0016FE06A2CC00C0EA7EC47934C94735B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number: 1A12
Signing time: Fri 14 Aug 2026 18:01:44 +0000
Manifest this update: Fri 14 Aug 2026 18:01:44 +0000
Manifest next update: Sat 15 Aug 2026 18:01:44 +0000
Files and hashes: 1: 0MnT-Cev0aWfox9D3TA-NvqEMlk.roa (hash: JJLpUG+0ObMqR5bxSAi6saPQ/DL3PUHcYLY29JhBmbE=)
2: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (hash: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw=)
3: 4BHAHtAhc28ZrQwUD5OHuec1Ir8.roa (hash: 0iGZlpXjvTxGNf9N3a9R/JttWSb6ffwtMSks1EBv2mQ=)
4: 4qWGLPeV9cfuGGpVtJBLff_UhD4.roa (hash: fsCbic0Uc+tcg0uG7d9ay2R7taJTtXFIv1SOgaMPRbM=)
5: 9h9M7PjhCe5Xzh52sY19F_HCfoo.roa (hash: dKnlXAO85KhguToJuoLLUtMZOEcwIkloXdGeaFlciRA=)
6: AFX34QTnP207XVV_8PKrJ8TJVJg.roa (hash: hVizqqIjbbc78J/ZubGhAhYsI/9yAoa6vJ1uP6RfMPU=)
7: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: huEwPogDrcbn8vjf/r7Qzf404li7zYZdfwD3AIpHNe0=)
8: kHyEvJhu_w11Kx9L4McOAF2P03o.roa (hash: jmuEXw0e3wCECNG5mj5zMNmwosrMAavIJYnu60jwGTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:e0:6a:2c:c0:0c:0e:a7:ec:47:93:4c:94:73:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Validity
Not Before: Aug 14 18:01:44 2026 GMT
Not After : Aug 15 18:01:44 2026 GMT
Subject: CN=2dfe0f401175b7d3d4cb686a0fd291a4e1bfb721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:97:cb:d8:90:63:25:5a:d7:8e:cd:a4:f5:
2b:3f:66:e5:b7:1c:42:e0:c9:b4:41:50:b7:2d:6a:
a5:d7:b3:04:7b:b6:00:e7:e9:d2:a7:ad:ee:a6:14:
d8:47:ee:4a:49:39:48:cc:80:a5:62:1b:cd:fb:3b:
a1:99:0b:25:6d:2b:d1:55:b3:2e:82:18:71:78:04:
cb:4e:77:1e:ae:9d:e7:30:eb:e6:72:e8:47:32:78:
5d:78:60:64:04:27:fc:85:98:d9:70:70:90:22:3e:
2e:32:b9:d3:37:84:d8:d5:4c:c1:0e:43:81:f7:29:
5b:4a:0f:f9:b1:91:67:20:c7:09:bc:a8:79:8e:a1:
e6:b6:30:41:ec:d4:97:4f:f6:9a:ba:54:59:e9:2c:
fa:64:18:8e:e8:b1:e0:21:77:a4:fe:14:af:f8:83:
5e:af:7b:c0:54:c9:7e:2b:7c:ff:f9:04:31:b3:a6:
76:a9:92:30:a6:43:73:e1:bc:41:6c:83:06:5d:02:
40:db:aa:d3:82:1c:55:6d:38:51:2e:80:cc:34:9f:
30:67:67:89:fa:f2:a0:0f:87:a0:e0:45:45:3d:1a:
ac:55:b2:ca:94:80:51:cb:44:0c:98:17:c8:e0:3b:
6d:7a:78:bc:d1:bf:ca:c3:55:6d:41:f6:89:9a:c3:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:0F:40:11:75:B7:D3:D4:CB:68:6A:0F:D2:91:A4:E1:BF:B7:21
X509v3 Authority Key Identifier:
keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:a3:71:82:e0:e6:e2:04:d7:a1:cd:4a:85:a0:71:b6:37:
bb:67:7e:63:38:28:69:21:80:6d:b3:71:1b:74:07:eb:9a:82:
9b:97:2c:59:3b:8d:82:1f:be:94:1e:57:29:09:a4:41:ba:fb:
ae:03:af:69:dd:9b:be:8d:2d:1e:df:34:ae:b1:7a:f6:f3:56:
89:3f:c0:28:6d:14:94:1c:cd:d1:78:73:22:b7:78:19:35:be:
01:29:2d:13:da:96:eb:5d:d2:bb:c0:5d:99:fc:7a:28:5a:91:
f6:d8:48:22:e2:42:2c:2a:a3:8a:e2:7a:3a:4f:de:47:ce:ce:
51:77:af:f0:e7:48:45:e8:19:12:b1:1a:ef:0a:43:a5:64:01:
62:22:3d:c9:30:8f:43:4e:6c:53:c3:75:7f:6b:7d:fc:a2:c3:
72:4c:7d:3f:75:f3:27:53:f1:04:fd:99:42:cf:78:ea:38:75:
96:f9:e1:a9:e0:fc:9c:73:8b:a4:88:f9:0a:7c:a2:b5:f5:21:
4e:d0:14:44:32:99:0e:23:b7:58:56:b9:c6:e0:9b:72:0b:06:
cf:10:75:34:77:e4:c2:1c:59:6b:89:ec:83:dd:77:f3:4a:42:
63:cc:41:79:53:4f:ab:3f:0f:8d:1b:c0:cc:b3:ef:87:7a:d6:
32:29:af:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb+BqLMAMDqfsR5NMlHNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5
MDBhNzYwHhcNMjYwODE0MTgwMTQ0WhcNMjYwODE1MTgwMTQ0WjAzMTEwLwYDVQQD
EygyZGZlMGY0MDExNzViN2QzZDRjYjY4NmEwZmQyOTFhNGUxYmZiNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOmXy9iQYyVa147NpPUrP2bltxxC
4Mm0QVC3LWql17MEe7YA5+nSp63uphTYR+5KSTlIzIClYhvN+zuhmQslbSvRVbMu
ghhxeATLTncerp3nMOvmcuhHMnhdeGBkBCf8hZjZcHCQIj4uMrnTN4TY1UzBDkOB
9ylbSg/5sZFnIMcJvKh5jqHmtjBB7NSXT/aaulRZ6Sz6ZBiO6LHgIXek/hSv+INe
r3vAVMl+K3z/+QQxs6Z2qZIwpkNz4bxBbIMGXQJA26rTghxVbThRLoDMNJ8wZ2eJ
+vKgD4eg4EVFPRqsVbLKlIBRy0QMmBfI4Dtteni80b/Kw1VtQfaJmsMm5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3+D0ARdbfT1Mtoag/SkaThv7chMB8GA1UdIwQY
MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt
ODlhY2UzODIyMGZiLzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi
LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3KjcYLg
5uIE16HNSoWgcbY3u2d+YzgoaSGAbbNxG3QH65qCm5csWTuNgh++lB5XKQmkQbr7
rgOvad2bvo0tHt80rrF69vNWiT/AKG0UlBzN0XhzIrd4GTW+ASktE9qW613Su8Bd
mfx6KFqR9thIIuJCLCqjiuJ6Ok/eR87OUXev8OdIRegZErEa7wpDpWQBYiI9yTCP
Q05sU8N1f2t9/KLDckx9P3XzJ1PxBP2ZQs946jh1lvnhqeD8nHOLpIj5CnyitfUh
TtAURDKZDiO3WFa5xuCbcgsGzxB1NHfkwhxZa4nsg91380pCY8xBeVNPqz8PjRvA
zLPvh3rWMimvWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:14:46 2026 by rpki-client