Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
File: Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json)
Hash identifier: tfy8oApVPUCX2MllzcmVTPye9xjNCQ8TSvb9DHw9Nds=
Subject key identifier: CB:A8:D8:DF:F2:43:38:89:35:73:DE:16:7C:5F:C1:6E:78:8E:9E:70
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial: 019FFD935AF628DC3BD0477A9FE8B3FBFC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 00:02:00 +0000
Manifest this update: Fri 14 Aug 2026 00:02:00 +0000
Manifest next update: Sat 15 Aug 2026 00:02:00 +0000
Files and hashes: 1: 82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa (hash: vPPab/KGHpKzLrTGlISXYHb0sr+wSckNgKD9qG+MfNw=)
2: 91Petc5RKlCy-MU2C9Yy6lq65ZE.roa (hash: 7hccwNO3UaWQ0JhtP5+TQ+OksNzm3EM6wDMxIQgrpWs=)
3: Ef3KoOE8fR3lwQrxiuPwLc-iq2A.roa (hash: OdcRK/goVMIA15OAEFTVRxq9FJ0mb0HCbom4lfXuy2g=)
4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: j5dvlX0DuV3CHTmnF/RGZCtshG5+GeOAFj8/JNZtDJ0=)
5: eFYkjuueS374d8jpHQ-eRsXYtoI.roa (hash: gwcFI/s7qhCO6ggsOku9CNe7VDcyLuX60cmBFUEOOW0=)
6: eMnVSFyA0FcmLp27QsfFm-htCa8.roa (hash: ahn930ULQdRk7bLieW7xo5TzMTWeAfDz6m9yfZyj0gU=)
7: fp1sLUeIRXFqhsdIFZLdl0__7pM.roa (hash: zYsrMGDZPKYtnkQ+At/0eP5XyC5n7qFFGT9wnz8DZQg=)
8: hgQSUnJubAL4-EZRnXtz-EERDh8.roa (hash: /WEvukiM8zuCEI80FycN6ubUk7Q1iYXiN7WF7p6NooQ=)
9: qLbWT3bB3iBT0TukjMBJAvhaDQM.roa (hash: 8q/NtwWEs+6Q/29xk+gdVzq969Ht7BEuC13rSHEA0yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:93:5a:f6:28:dc:3b:d0:47:7a:9f:e8:b3:fb:fc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
Validity
Not Before: Aug 14 00:02:00 2026 GMT
Not After : Aug 15 00:02:00 2026 GMT
Subject: CN=cba8d8dff24338893573de167c5fc16e788e9e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:1e:d6:90:3d:73:b0:53:7b:59:18:99:d7:
04:67:59:98:ba:9a:63:4e:30:a3:dc:d7:ee:72:2d:
4f:a4:9b:d5:5b:ca:4b:01:f2:14:2b:65:5f:1f:9a:
f6:0b:32:18:97:94:c9:42:7f:5f:94:37:d2:90:92:
2c:37:f7:13:90:9f:9a:5b:49:86:79:c2:93:43:50:
39:04:6b:9f:aa:64:33:b4:a4:21:ff:af:2e:27:71:
10:7b:3b:cd:ae:f2:5c:63:c5:59:44:76:6c:dc:73:
11:f5:30:4a:d8:bb:f9:b3:59:ef:61:20:97:5b:46:
c7:52:42:46:9d:0f:bd:62:1c:46:e8:89:c3:71:ad:
4c:0e:dc:0b:4e:f5:6f:78:85:62:ce:30:03:19:12:
f3:49:9e:da:a3:34:43:28:9f:73:c2:5a:d9:e8:3a:
bb:6c:f2:fa:8b:32:e5:a7:55:a8:ad:d7:7a:42:19:
f5:51:4a:37:9c:54:75:95:64:7c:9c:b5:d6:3b:3c:
e8:0b:60:29:4d:ed:3d:05:55:9d:25:b4:fa:39:2b:
34:7a:e5:92:c4:15:3b:3b:88:7c:7b:56:ae:53:3e:
f2:49:78:df:04:77:59:d5:87:c2:e7:ab:a8:c2:48:
76:95:07:9e:6d:89:0a:81:1e:6f:5a:64:aa:e4:a5:
30:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A8:D8:DF:F2:43:38:89:35:73:DE:16:7C:5F:C1:6E:78:8E:9E:70
X509v3 Authority Key Identifier:
keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9f:0b:31:c3:e8:99:f7:da:65:74:a7:c7:4d:10:fb:4d:af:
c3:23:e5:88:63:3c:d7:5c:e7:79:27:19:65:7d:d4:95:20:8b:
75:8c:6a:aa:85:7d:24:ce:68:0a:14:89:56:a2:a4:85:22:7f:
66:b4:31:97:a2:ff:2b:7d:f6:d6:0c:86:60:a8:5d:8e:fb:1b:
ee:b4:11:1c:31:c0:ac:41:28:25:a7:44:b2:9b:4a:25:f0:20:
c6:4b:1f:77:cf:5a:81:4c:fc:20:e5:82:5b:f0:85:3a:e2:1b:
9d:27:54:17:f6:3c:ed:e5:b4:f3:bf:f8:b9:6b:dc:4c:7a:29:
28:a3:81:f5:63:c5:17:63:18:c4:2b:b9:0c:7a:b4:aa:cc:71:
c5:89:70:ca:12:80:d3:76:68:a4:d7:14:fc:ea:36:8c:f9:b7:
e4:44:45:e6:9f:d7:4e:c4:72:f4:e1:e9:62:38:0e:7a:a1:56:
35:39:a9:9b:34:d1:2d:93:9a:0e:89:a3:38:67:15:03:31:5f:
5d:ce:db:63:08:71:9a:f8:0d:95:d3:a1:44:8e:d6:ff:b9:d2:
a4:57:70:a8:12:1f:aa:8d:d4:65:a0:bf:40:19:24:6b:3e:85:
7b:07:2d:f5:4d:05:68:fe:6a:42:42:96:6f:56:83:df:ab:1e:
eb:12:7a:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/9k1r2KNw70Ed6n+iz+/wEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3
OTFkYjQwHhcNMjYwODE0MDAwMjAwWhcNMjYwODE1MDAwMjAwWjAzMTEwLwYDVQQD
EyhjYmE4ZDhkZmYyNDMzODg5MzU3M2RlMTY3YzVmYzE2ZTc4OGU5ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE0e1pA9c7BTe1kYmdcEZ1mYuppj
TjCj3Nfuci1PpJvVW8pLAfIUK2VfH5r2CzIYl5TJQn9flDfSkJIsN/cTkJ+aW0mG
ecKTQ1A5BGufqmQztKQh/68uJ3EQezvNrvJcY8VZRHZs3HMR9TBK2Lv5s1nvYSCX
W0bHUkJGnQ+9YhxG6InDca1MDtwLTvVveIVizjADGRLzSZ7aozRDKJ9zwlrZ6Dq7
bPL6izLlp1Wordd6Qhn1UUo3nFR1lWR8nLXWOzzoC2ApTe09BVWdJbT6OSs0euWS
xBU7O4h8e1auUz7ySXjfBHdZ1YfC56uowkh2lQeebYkKgR5vWmSq5KUwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuo2N/yQziJNXPeFnxfwW54jp5wMB8GA1UdIwQY
MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt
M2E2MTFjMDkzYTJjLzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj
LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPp8LMcPo
mffaZXSnx00Q+02vwyPliGM811zneScZZX3UlSCLdYxqqoV9JM5oChSJVqKkhSJ/
ZrQxl6L/K3321gyGYKhdjvsb7rQRHDHArEEoJadEsptKJfAgxksfd89agUz8IOWC
W/CFOuIbnSdUF/Y87eW087/4uWvcTHopKKOB9WPFF2MYxCu5DHq0qsxxxYlwyhKA
03ZopNcU/Oo2jPm35ERF5p/XTsRy9OHpYjgOeqFWNTmpmzTRLZOaDomjOGcVAzFf
Xc7bYwhxmvgNldOhRI7W/7nSpFdwqBIfqo3UZaC/QBkkaz6Fewct9U0FaP5qQkKW
b1aD36se6xJ6rg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 06:09:57 2026 by rpki-client