Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File: tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier: uYK5xcSnqirE8m/P0W2vg2a6qDHxCfYuvKxxqNoNW9E=
Subject key identifier: DE:1E:CB:39:F5:0F:13:88:BF:3A:DE:C7:73:25:03:56:5B:5D:00:9A
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 01A18074A18E429C290CC89BCB0EC79C877A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number: 08F3
Signing time: Wed 28 Oct 2026 03:01:29 +0000
Manifest this update: Wed 28 Oct 2026 03:01:29 +0000
Manifest next update: Thu 29 Oct 2026 03:01:29 +0000
Files and hashes: 1: FAR1JGDRfBlwTrXiCrjWu-9KPYY.roa (hash: ubnjQ9mTdiJtNsVEHvSHl8U6qYQGX98XEG0kwEFpsdo=)
2: K7oY9P0OfWkHD6GX0g5pIBjAf_Y.roa (hash: yKmgSoE9rg2APN1oH0dQLOoKGASWMZwho6luI43ZQ7U=)
3: LG1ojJBrL-is7jHDUY_yDrks3fo.roa (hash: EtYSJzsIuCwlPxFXPE10satuYqBBIprVHzKYznzYCYs=)
4: OteesfxlXNW_6oy-uZPA0RjwQqs.roa (hash: BVMKBS9it+saptlczy0sxrdp/hGNaoRQGuAEe0tEzJQ=)
5: hbo0pySSCroIegSOSs5RlRjwFvg.roa (hash: rU41ZGReAnZrPd0NAsMdD2ONr+HjXb57K3ZbIW856j0=)
6: jJqmq7ctfCRljbEe-rA7H6MPeAI.roa (hash: O+1YuOF5X9Aph1d+IEQe3EcREqu8Qs7VAkwaJPtR+U0=)
7: lXgeO6sL-ZIGs1Qbu6r6hhOZ8pQ.roa (hash: M0V4xWc5XxTvzmYTKrejIX4n2xNZ52yU26YzaFysbjM=)
8: o-WKTQa_X-7__zCzj6J6YkZ_raw.roa (hash: 1ouUgQsFwXp8X5fRClo+nxWAfb/FxjwTOeZILI6XYaY=)
9: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: RuICabg+UVTfKdDadm4NVrUUxRgfOjawcDJcou/qIWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:a1:8e:42:9c:29:0c:c8:9b:cb:0e:c7:9c:87:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Oct 28 03:01:29 2026 GMT
Not After : Oct 29 03:01:29 2026 GMT
Subject: CN=de1ecb39f50f1388bf3adec7732503565b5d009a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:0d:25:3d:7c:a2:12:5b:db:38:49:64:b4:
8a:92:1a:10:6d:1a:65:41:1a:82:7c:d4:72:8b:83:
5e:dd:04:91:69:fe:0a:ce:f3:7c:68:ad:a7:44:02:
00:a5:23:e8:56:8b:64:22:5b:18:de:61:75:ce:b3:
ae:0a:5f:d2:29:1a:70:ba:ed:fa:c4:50:e4:b2:a9:
2d:52:cb:27:e9:f2:0e:7f:ba:cd:1b:fd:7c:60:0d:
83:01:03:a4:09:29:50:d0:0e:a1:c5:4b:8f:da:5b:
79:4d:61:3a:54:e6:27:9f:87:93:d7:73:f4:2f:e6:
54:3c:61:9d:57:f4:2c:51:7d:c6:0c:1e:ea:e2:35:
b2:7f:24:f3:da:c2:8e:96:87:7f:a4:43:98:f2:c3:
6d:16:1a:d5:b7:04:53:72:9a:e3:b9:ea:79:64:21:
e5:d9:92:c9:67:65:48:8b:c8:88:9e:6b:2b:fe:22:
1e:27:ce:e2:f1:ca:f6:e2:8d:09:56:b6:2e:72:45:
d8:70:ea:1e:0f:49:32:31:a0:c8:23:c2:c7:b2:22:
93:2c:80:08:29:84:75:92:2e:18:af:44:bb:28:7b:
43:71:98:be:13:45:2c:71:d3:18:d1:7f:b0:a1:6b:
5b:a5:83:86:26:7e:13:57:d2:00:0c:b4:15:bb:9a:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1E:CB:39:F5:0F:13:88:BF:3A:DE:C7:73:25:03:56:5B:5D:00:9A
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a1:70:d5:12:4a:f0:cc:ad:f6:50:a8:35:40:da:14:c3:94:
9c:fc:c8:73:18:1c:32:95:87:41:d8:04:3a:92:a4:8c:df:15:
dd:64:03:c1:53:f2:82:9e:70:66:b9:e7:ca:03:06:ca:da:8f:
2e:0c:a0:c6:e2:0b:30:f9:03:2d:74:2b:5e:04:5f:bf:74:4f:
27:a8:80:24:44:09:37:00:fa:04:8a:77:ef:d8:e9:c5:2b:52:
03:3a:9c:23:41:6b:ef:19:77:81:a8:70:91:b5:68:6e:4d:74:
06:15:ab:33:bd:1e:6d:d1:36:97:76:2b:df:14:df:fc:f7:f5:
aa:4c:fb:bb:0f:bf:18:95:1b:cd:67:78:2e:ee:10:74:98:e2:
bc:ff:4e:b6:62:f1:b6:3e:9c:c4:bd:4b:a9:a8:f5:c7:a1:33:
50:ac:04:0e:72:44:45:a9:6c:7e:21:fa:45:75:4f:ae:6f:77:
dc:0d:7f:e2:03:de:0b:0f:43:18:ab:7d:15:04:a1:08:bc:97:
cf:ff:1e:21:ce:8c:25:13:14:7a:fb:e1:a1:a2:8e:27:81:4e:
ea:5b:33:73:3c:1b:9b:34:19:81:a3:80:e2:33:84:f2:45:cd:
35:9f:af:19:6f:a7:6f:3a:6a:c2:a8:6a:92:da:e2:ae:a6:e5:
2d:05:3e:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdKGOQpwpDMibyw7HnId6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDE1NTgxODFmNzg2MzExOWJmNGExNTU0Yzc1ZGFiMWY2
YzUyOTIwHhcNMjYxMDI4MDMwMTI5WhcNMjYxMDI5MDMwMTI5WjAzMTEwLwYDVQQD
EyhkZTFlY2IzOWY1MGYxMzg4YmYzYWRlYzc3MzI1MDM1NjViNWQwMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rkNJT18ohJb2zhJZLSKkhoQbRpl
QRqCfNRyi4Ne3QSRaf4KzvN8aK2nRAIApSPoVotkIlsY3mF1zrOuCl/SKRpwuu36
xFDksqktUssn6fIOf7rNG/18YA2DAQOkCSlQ0A6hxUuP2lt5TWE6VOYnn4eT13P0
L+ZUPGGdV/QsUX3GDB7q4jWyfyTz2sKOlod/pEOY8sNtFhrVtwRTcprjuep5ZCHl
2ZLJZ2VIi8iInmsr/iIeJ87i8cr24o0JVrYuckXYcOoeD0kyMaDII8LHsiKTLIAI
KYR1ki4Yr0S7KHtDcZi+E0UscdMY0X+woWtbpYOGJn4TV9IADLQVu5rDZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4eyzn1DxOIvzrex3MlA1ZbXQCaMB8GA1UdIwQY
MBaAFLVBVYGB94YxGb9KFVTHXasfbFKSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMt
NTcxYjZjNjEyYmVjLzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZGQxNjktOGRjYi00NjUzLThhMDMtNTcxYjZjNjEyYmVj
LzEvdFVGVmdZSDNoakVadjBvVlZNZGRxeDlzVXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKFw1RJK
8Myt9lCoNUDaFMOUnPzIcxgcMpWHQdgEOpKkjN8V3WQDwVPygp5wZrnnygMGytqP
LgygxuILMPkDLXQrXgRfv3RPJ6iAJEQJNwD6BIp379jpxStSAzqcI0Fr7xl3gahw
kbVobk10BhWrM70ebdE2l3Yr3xTf/Pf1qkz7uw+/GJUbzWd4Lu4QdJjivP9OtmLx
tj6cxL1Lqaj1x6EzUKwEDnJERalsfiH6RXVPrm933A1/4gPeCw9DGKt9FQShCLyX
z/8eIc6MJRMUevvhoaKOJ4FO6lszczwbmzQZgaOA4jOE8kXNNZ+vGW+nbzpqwqhq
ktrirqblLQU+9w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:15 2026 by rpki-client