Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
File: roP3h5wsdKEWUrXgivZKrJCACwQ.mft (raw, json)
Hash identifier: GDyQ64qJ2FjYXGSpeuX8hmWN6/TfMILsuf/WaQtaWuk=
Subject key identifier: 3F:2D:9C:14:76:D5:1F:EA:E3:A8:94:27:84:8F:42:88:A4:98:85:58
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Certificate issuer: /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial: 01A08B68A711E148EA109CD100830842BF2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 13:01:26 +0000
Manifest this update: Thu 10 Sep 2026 13:01:26 +0000
Manifest next update: Fri 11 Sep 2026 13:01:26 +0000
Files and hashes: 1: FbBfmY8BU8VigyDn7YgxLgSnlUs.roa (hash: tHVNex4gUdJAzQ5EQ6S1mMwVxpmtkwTF/khuntIVx8c=)
2: _8o003HukJtANidMUuNfF8h2iro.roa (hash: RD6ivkH2YAIVnq+oPiaSNKTUKGIT1SfwklfHbiuRs50=)
3: roP3h5wsdKEWUrXgivZKrJCACwQ.crl (hash: pb/c9dKKASlm2es6acqs6LTvR6JozxfBeb7QD9V/BPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:a7:11:e1:48:ea:10:9c:d1:00:83:08:42:bf:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Validity
Not Before: Sep 10 13:01:26 2026 GMT
Not After : Sep 11 13:01:26 2026 GMT
Subject: CN=3f2d9c1476d51feae3a89427848f4288a4988558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9f:5d:d3:22:81:05:e0:e0:9c:8a:b9:bd:a0:
cf:ea:8c:2c:40:0e:ff:ef:29:da:e2:1d:24:ec:8d:
d8:9e:4e:49:ca:4f:23:eb:b8:e6:0c:8c:5e:ab:3c:
bd:b0:fd:ec:50:3f:3c:98:8d:7e:f0:0f:da:f9:32:
88:46:f5:2f:96:b0:52:19:e7:49:85:8c:71:94:82:
5f:88:e4:22:22:b4:6a:39:b8:2d:f6:63:49:f0:0e:
da:0b:9d:cd:04:cd:f8:54:66:ed:dc:77:e5:b3:d4:
0c:63:2e:63:d8:bf:02:64:a0:ea:23:4d:b4:43:bc:
ef:23:0f:5e:4d:00:48:94:23:09:d4:9e:30:12:77:
de:ae:dc:ff:ed:6e:5c:94:ae:b2:a9:6b:aa:33:2f:
68:28:69:bc:2b:f7:bd:8e:84:4e:6d:ca:06:5f:ae:
28:3b:e6:b2:b8:46:22:5e:09:c7:ac:37:73:bd:62:
0a:a6:90:80:a6:89:4d:ea:76:8d:a2:54:6b:e8:a8:
c4:16:72:27:d6:24:e2:d1:2d:72:21:c0:fd:06:54:
d9:3c:eb:ea:97:0f:be:8f:53:2e:98:66:f8:fa:c4:
f9:8a:61:95:58:49:81:39:83:00:29:f0:13:58:1b:
20:04:0e:f3:b1:64:03:58:cd:5a:5b:b5:90:e9:9e:
57:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2D:9C:14:76:D5:1F:EA:E3:A8:94:27:84:8F:42:88:A4:98:85:58
X509v3 Authority Key Identifier:
keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6c:b8:be:38:b8:07:37:51:e5:6c:5a:db:7e:5b:5e:d9:b1:
5a:65:bc:b3:6f:89:6f:85:6d:74:dc:bf:20:0d:9b:01:40:20:
a4:19:36:44:f9:d0:7f:3c:0d:cb:41:42:6d:d5:a0:66:c9:11:
1a:5a:87:43:07:b0:ee:ed:0e:64:64:e4:7d:0a:19:c4:06:92:
4c:22:e9:2d:87:b9:38:92:2c:d0:ea:74:af:af:20:56:e9:7b:
e7:a4:60:34:c0:f4:c7:2e:cc:b3:66:f7:38:9b:62:09:c4:54:
5d:b7:b7:61:be:aa:1a:e1:a8:c9:4f:7c:e2:a0:99:33:d7:01:
fc:e5:6b:c4:4c:9e:92:9d:c3:b8:6a:a1:8e:48:9f:b5:44:65:
ca:ca:ed:b9:44:33:9d:6f:6d:ac:60:0c:9e:3f:8a:88:20:9a:
27:9f:77:10:f3:09:e2:c9:0a:65:9b:a9:1f:c0:f4:5e:c4:7e:
ca:f7:5c:20:de:32:17:cc:43:16:59:cb:fd:51:c8:11:45:c0:
8d:90:42:d1:91:60:e9:91:ec:28:1c:c5:12:ff:06:90:ed:83:
00:e6:e6:37:4f:25:75:f1:dc:d4:d4:a4:11:20:2d:a9:5d:f7:
ff:e5:27:9f:ec:c9:9c:b8:65:dc:8f:1f:56:35:a2:c7:9b:2f:
86:b4:f2:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaKcR4UjqEJzRAIMIQr8tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlODNmNzg3OWMyYzc0YTExNjUyYjVlMDhhZjY0YWFjOTA4
MDBiMDQwHhcNMjYwOTEwMTMwMTI2WhcNMjYwOTExMTMwMTI2WjAzMTEwLwYDVQQD
EygzZjJkOWMxNDc2ZDUxZmVhZTNhODk0Mjc4NDhmNDI4OGE0OTg4NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ9d0yKBBeDgnIq5vaDP6owsQA7/
7yna4h0k7I3Ynk5Jyk8j67jmDIxeqzy9sP3sUD88mI1+8A/a+TKIRvUvlrBSGedJ
hYxxlIJfiOQiIrRqObgt9mNJ8A7aC53NBM34VGbt3Hfls9QMYy5j2L8CZKDqI020
Q7zvIw9eTQBIlCMJ1J4wEnfertz/7W5clK6yqWuqMy9oKGm8K/e9joRObcoGX64o
O+ayuEYiXgnHrDdzvWIKppCApolN6naNolRr6KjEFnIn1iTi0S1yIcD9BlTZPOvq
lw++j1MumGb4+sT5imGVWEmBOYMAKfATWBsgBA7zsWQDWM1aW7WQ6Z5XawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8tnBR21R/q46iUJ4SPQoikmIVYMB8GA1UdIwQY
MBaAFK6D94ecLHShFlK14Ir2SqyQgAsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0Mzkt
NDczZDc0YTVlMjBmLzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84NGQwMjYtMTdlNC00Nzg3LWE0MzktNDczZDc0YTVlMjBm
LzEvcm9QM2g1d3NkS0VXVXJYZ2l2WktySkNBQ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmy4vji4
BzdR5Wxa235bXtmxWmW8s2+Jb4VtdNy/IA2bAUAgpBk2RPnQfzwNy0FCbdWgZskR
GlqHQwew7u0OZGTkfQoZxAaSTCLpLYe5OJIs0Op0r68gVul756RgNMD0xy7Ms2b3
OJtiCcRUXbe3Yb6qGuGoyU984qCZM9cB/OVrxEyekp3DuGqhjkiftURlysrtuUQz
nW9trGAMnj+KiCCaJ593EPMJ4skKZZupH8D0XsR+yvdcIN4yF8xDFlnL/VHIEUXA
jZBC0ZFg6ZHsKBzFEv8GkO2DAObmN08ldfHc1NSkESAtqV33/+Unn+zJnLhl3I8f
VjWix5svhrTyeg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:52:54 2026 by rpki-client