Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: 1YadYptYpGXq0QXic/H+R9/gnUxTfOGuvetxHAU/lyE=
Subject key identifier: 74:79:99:68:7F:C1:38:7F:EB:D3:35:97:6B:09:DC:59:B9:3D:03:64
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 01A17C97D80D1E5C62E2F9D57407E664356D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0F0A
Signing time: Tue 27 Oct 2026 09:01:28 +0000
Manifest this update: Tue 27 Oct 2026 09:01:28 +0000
Manifest next update: Wed 28 Oct 2026 09:01:28 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: hWQREC5DDOrwI/pMK/tSZczqGpxnNEkj+zix8ixAdc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:d8:0d:1e:5c:62:e2:f9:d5:74:07:e6:64:35:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Oct 27 09:01:28 2026 GMT
Not After : Oct 28 09:01:28 2026 GMT
Subject: CN=747999687fc1387febd335976b09dc59b93d0364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:4f:f2:e2:2b:4d:3f:62:b0:7c:55:71:71:
ae:cd:ce:83:e2:81:48:14:19:b2:e7:a1:d4:e9:67:
fd:a3:70:61:52:0f:05:83:5b:e0:d4:c0:60:e5:1c:
bc:47:32:db:07:dc:3c:02:b7:31:19:c6:f2:95:2c:
69:42:0b:d4:69:ab:fa:1b:47:53:29:54:9e:98:54:
62:be:1b:e7:94:6c:6f:9a:7c:08:19:c4:97:94:50:
fe:93:5e:32:1d:ea:27:da:d8:6a:35:e8:dd:42:3a:
28:69:49:44:17:f5:e5:86:00:61:2e:f7:c1:e6:73:
87:d1:df:be:22:5d:3f:25:0f:44:9f:f6:da:d9:29:
aa:fa:9d:33:be:48:cb:2b:72:f8:22:7d:0e:ea:69:
f0:ec:12:c7:76:ac:ee:2e:5c:64:50:0c:d5:2c:80:
84:17:3c:e7:56:c0:67:7c:0a:70:9c:2e:b4:b0:97:
3d:2a:91:49:ec:6e:75:3e:d0:63:8d:22:1b:d4:38:
25:95:d4:65:8b:10:3d:5f:da:f9:59:23:66:48:b0:
bd:26:f3:a5:ab:e5:a6:9f:29:1f:0c:cc:85:90:5d:
6d:b4:2e:ab:ed:0a:52:7d:93:93:33:0c:0b:bc:f4:
35:e6:3b:89:15:02:ba:d4:6e:a1:0f:47:c8:60:c5:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:79:99:68:7F:C1:38:7F:EB:D3:35:97:6B:09:DC:59:B9:3D:03:64
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:eb:69:d8:78:d2:70:41:ab:38:78:89:15:fd:d0:a9:e8:0b:
ab:26:54:90:1a:54:67:77:09:ed:73:b2:58:37:76:d6:11:b1:
4e:2d:7d:c5:c3:72:4e:7e:b9:4c:44:72:84:88:0c:be:72:c4:
d3:9d:66:23:62:99:90:2c:95:c3:11:69:f8:b0:9f:da:23:ae:
e7:4c:ca:fa:b2:7c:c0:0b:fd:26:84:c3:f6:6f:04:55:71:b9:
f4:60:30:cf:81:c3:d8:d5:b2:ff:89:fb:c5:94:dc:e2:c0:9c:
23:bf:e6:5d:d7:1c:a9:95:56:b3:4a:fc:57:5a:13:c1:8d:56:
ec:26:19:e1:e9:46:8b:92:14:83:1b:98:1e:e5:68:1a:66:0d:
4e:0d:e0:6e:26:e3:a7:cb:19:92:03:5c:ec:9d:57:fc:0a:28:
0d:0d:94:02:5c:dd:61:a0:35:ac:7e:3c:d3:4c:5a:4a:d6:3e:
47:7e:2d:ab:c3:aa:6c:64:d5:21:c4:58:21:02:95:fc:67:b0:
ac:37:ed:7b:ba:2e:20:0a:09:df:78:a9:06:f9:df:10:5a:17:
03:5e:0c:b8:f1:af:e2:f7:d0:25:f0:b8:3f:11:a3:c7:fb:a9:
57:d0:76:06:23:64:1b:c4:33:6f:cd:6e:25:fe:30:60:22:b7:
0e:89:cd:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l9gNHlxi4vnVdAfmZDVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjYxMDI3MDkwMTI4WhcNMjYxMDI4MDkwMTI4WjAzMTEwLwYDVQQD
Eyg3NDc5OTk2ODdmYzEzODdmZWJkMzM1OTc2YjA5ZGM1OWI5M2QwMzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0BP8uIrTT9isHxVcXGuzc6D4oFI
FBmy56HU6Wf9o3BhUg8Fg1vg1MBg5Ry8RzLbB9w8ArcxGcbylSxpQgvUaav6G0dT
KVSemFRivhvnlGxvmnwIGcSXlFD+k14yHeon2thqNejdQjooaUlEF/XlhgBhLvfB
5nOH0d++Il0/JQ9En/ba2Smq+p0zvkjLK3L4In0O6mnw7BLHdqzuLlxkUAzVLICE
FzznVsBnfApwnC60sJc9KpFJ7G51PtBjjSIb1DglldRlixA9X9r5WSNmSLC9JvOl
q+WmnykfDMyFkF1ttC6r7QpSfZOTMwwLvPQ15juJFQK61G6hD0fIYMXV1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHR5mWh/wTh/69M1l2sJ3Fm5PQNkMB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHutp2HjS
cEGrOHiJFf3QqegLqyZUkBpUZ3cJ7XOyWDd21hGxTi19xcNyTn65TERyhIgMvnLE
051mI2KZkCyVwxFp+LCf2iOu50zK+rJ8wAv9JoTD9m8EVXG59GAwz4HD2NWy/4n7
xZTc4sCcI7/mXdccqZVWs0r8V1oTwY1W7CYZ4elGi5IUgxuYHuVoGmYNTg3gbibj
p8sZkgNc7J1X/AooDQ2UAlzdYaA1rH4800xaStY+R34tq8OqbGTVIcRYIQKV/Gew
rDfte7ouIAoJ33ipBvnfEFoXA14MuPGv4vfQJfC4PxGjx/upV9B2BiNkG8Qzb81u
Jf4wYCK3DonN5w==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:35:24 2026 by rpki-client