Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
File: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft (raw, json)
Hash identifier: Sd4YQCJImP9CpoDzvDus+9GctsgLQ97zEN8fHEfdnb0=
Subject key identifier: 5E:DE:CB:BE:DC:5D:A4:0F:31:BA:08:39:12:89:18:B9:DC:53:C8:30
Authority key identifier: B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
Certificate issuer: /CN=b549ef86feb429b607bb2373f916fa54d2799752
Certificate serial: 01A09020EDDBB9561875D789F518FE8CABC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
Manifest number: 01CD
Signing time: Fri 11 Sep 2026 11:01:12 +0000
Manifest this update: Fri 11 Sep 2026 11:01:12 +0000
Manifest next update: Sat 12 Sep 2026 11:01:12 +0000
Files and hashes: 1: B_M_pSDYnQq_v2dspjpisJOp3eI.roa (hash: fnEBYCIgV363yh16vBQAS+8SDA4YNK4W+uJelnRAVc4=)
2: tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl (hash: 8/j9BPayVh/BG3WPtQpXyEyW/cJ/IGBXP2l85ithoWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:ed:db:b9:56:18:75:d7:89:f5:18:fe:8c:ab:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b549ef86feb429b607bb2373f916fa54d2799752
Validity
Not Before: Sep 11 11:01:12 2026 GMT
Not After : Sep 12 11:01:12 2026 GMT
Subject: CN=5edecbbedc5da40f31ba0839128918b9dc53c830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:d4:41:7d:74:4a:12:7c:16:a8:7f:19:77:
de:7c:60:72:2c:c1:a0:29:81:35:04:1c:c2:66:7e:
e2:8c:0b:70:d2:cf:44:8e:ae:f2:77:b1:ef:6f:6a:
72:95:9f:80:e1:2a:18:85:00:34:b5:17:b3:29:69:
fc:82:aa:71:c4:eb:17:15:be:7d:74:63:1f:c9:6d:
f0:b6:fd:3f:f2:bd:43:c1:cc:2f:a4:89:76:d5:47:
d2:a1:15:61:87:6a:f6:a5:74:31:61:80:db:d6:e8:
3e:4d:e8:cf:9a:5a:f6:04:66:01:59:54:1e:cf:b1:
1d:ec:7e:ea:49:7d:56:1b:bb:cf:5a:1a:b0:83:c7:
9b:71:ed:7d:d8:e2:b5:00:8e:d7:d2:16:e5:27:85:
a1:6b:89:ac:44:f9:5f:bf:2e:7b:06:79:8e:cc:d6:
c4:97:41:d9:2c:d6:93:3c:20:05:0a:35:99:f3:e7:
61:53:a2:c8:87:51:ea:9e:a1:68:4f:2e:28:58:0f:
68:51:e5:4f:a8:5c:6b:13:b0:0a:51:c5:2d:24:fd:
d3:9c:d4:71:0c:91:01:3b:91:b7:ab:1a:45:b9:68:
0d:d8:32:28:37:d8:1e:99:9e:11:12:8e:ca:8c:d2:
c4:68:eb:f2:83:ac:af:91:99:f3:7d:51:7a:88:26:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DE:CB:BE:DC:5D:A4:0F:31:BA:08:39:12:89:18:B9:DC:53:C8:30
X509v3 Authority Key Identifier:
keyid:B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:98:ba:5f:6e:df:7d:7d:b2:95:b5:26:f8:1a:f5:cc:99:c0:
55:be:ad:38:71:d7:47:96:80:d4:8d:77:84:f1:d9:5c:e1:fe:
40:20:a1:6c:70:b4:84:90:a7:3a:6a:3a:f3:13:47:ff:8e:60:
36:89:22:9d:cf:20:75:4e:b9:e2:60:88:46:39:56:ca:b8:cb:
11:9e:e3:19:75:78:17:7e:4d:bc:2b:72:90:ac:44:07:7b:1f:
1b:75:62:c8:22:52:52:eb:dc:1c:51:82:d4:a3:8b:c3:d4:93:
a6:66:d9:46:ef:a2:e6:42:82:93:ed:69:51:41:4f:ca:05:d2:
ea:80:56:5c:0e:64:93:b7:b1:1e:e7:4e:b6:8a:99:79:00:10:
e2:52:7b:f2:9a:94:f1:7f:97:aa:17:c9:6b:d1:bc:53:38:77:
2e:68:68:8b:3e:6a:7e:0f:37:e4:42:4a:2e:88:2f:84:9a:c3:
4c:fe:6c:f8:77:89:ba:b7:07:28:b7:ce:fa:28:99:9c:c0:95:
07:1b:96:82:3f:a4:77:f6:48:11:51:d0:1a:28:e8:f6:a6:13:
4e:84:a3:67:cd:9e:07:68:40:f2:7b:3c:9a:5d:c8:74:1e:96:
ee:99:30:9a:b7:a2:25:91:47:25:f5:b9:0c:d2:8f:d8:5e:91:
f8:b4:f0:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQIO3buVYYddeJ9Rj+jKvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDllZjg2ZmViNDI5YjYwN2JiMjM3M2Y5MTZmYTU0ZDI3
OTk3NTIwHhcNMjYwOTExMTEwMTEyWhcNMjYwOTEyMTEwMTEyWjAzMTEwLwYDVQQD
Eyg1ZWRlY2JiZWRjNWRhNDBmMzFiYTA4MzkxMjg5MThiOWRjNTNjODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfrUQX10ShJ8Fqh/GXfefGByLMGg
KYE1BBzCZn7ijAtw0s9Ejq7yd7Hvb2pylZ+A4SoYhQA0tRezKWn8gqpxxOsXFb59
dGMfyW3wtv0/8r1DwcwvpIl21UfSoRVhh2r2pXQxYYDb1ug+TejPmlr2BGYBWVQe
z7Ed7H7qSX1WG7vPWhqwg8ebce192OK1AI7X0hblJ4Wha4msRPlfvy57BnmOzNbE
l0HZLNaTPCAFCjWZ8+dhU6LIh1HqnqFoTy4oWA9oUeVPqFxrE7AKUcUtJP3TnNRx
DJEBO5G3qxpFuWgN2DIoN9gemZ4REo7KjNLEaOvyg6yvkZnzfVF6iCbvywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7ey77cXaQPMboIORKJGLncU8gwMB8GA1UdIwQY
MBaAFLVJ74b+tCm2B7sjc/kW+lTSeZdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVudmh2NjBLYllIdXlOei1SYjZWTko1bDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84MTNhNDQtYmNiMi00ODJjLWFiM2It
MDZjODQ3MDA2Yzg2LzEvdFVudmh2NjBLYllIdXlOei1SYjZWTko1bDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84MTNhNDQtYmNiMi00ODJjLWFiM2ItMDZjODQ3MDA2Yzg2
LzEvdFVudmh2NjBLYllIdXlOei1SYjZWTko1bDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr5i6X27f
fX2ylbUm+Br1zJnAVb6tOHHXR5aA1I13hPHZXOH+QCChbHC0hJCnOmo68xNH/45g
Nokinc8gdU654mCIRjlWyrjLEZ7jGXV4F35NvCtykKxEB3sfG3ViyCJSUuvcHFGC
1KOLw9STpmbZRu+i5kKCk+1pUUFPygXS6oBWXA5kk7exHudOtoqZeQAQ4lJ78pqU
8X+XqhfJa9G8Uzh3Lmhoiz5qfg835EJKLogvhJrDTP5s+HeJurcHKLfO+iiZnMCV
BxuWgj+kd/ZIEVHQGijo9qYTToSjZ82eB2hA8ns8ml3IdB6W7pkwmreiJZFHJfW5
DNKP2F6R+LTw9g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:59:14 2026 by rpki-client