Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
File: tFBkwayGkOLHepWaUCVG6YvNNyc.mft (raw, json)
Hash identifier: Cn3MUR6RQv6zIApNeZTHXSTTQ76bDZ/e7AVy7pNCnoQ=
Subject key identifier: 89:B0:63:C6:12:7F:36:58:BE:A9:4D:03:68:EB:51:DE:B3:4B:77:97
Authority key identifier: B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
Certificate issuer: /CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Certificate serial: 01A1822BB1D8F3284E145143C6AB2CA320F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
Manifest number: 1148
Signing time: Wed 28 Oct 2026 11:01:03 +0000
Manifest this update: Wed 28 Oct 2026 11:01:03 +0000
Manifest next update: Thu 29 Oct 2026 11:01:03 +0000
Files and hashes: 1: tFBkwayGkOLHepWaUCVG6YvNNyc.crl (hash: bYELNk06kepfwz9Lm1sFfIFbqbR/IKuNYr7dALlodp4=)
2: wFIxH6rmc0pTO3lHbm1q54JXQUw.roa (hash: LdJ/iIkB/Qkjc76ikiZz0rGCtU2IPzIjdQ2qezYDSK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:b1:d8:f3:28:4e:14:51:43:c6:ab:2c:a3:20:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45064c1ac8690e2c77a959a502546e98bcd3727
Validity
Not Before: Oct 28 11:01:03 2026 GMT
Not After : Oct 29 11:01:03 2026 GMT
Subject: CN=89b063c6127f3658bea94d0368eb51deb34b7797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:25:5e:9b:37:9b:32:90:5b:f2:d6:30:62:
34:2b:b8:87:0c:85:df:d4:b7:af:4c:1f:d8:c4:44:
80:f2:01:c0:f5:2e:09:da:3d:78:33:a7:7a:cc:7a:
c4:54:14:89:46:39:f9:43:4c:82:1d:cf:08:80:3e:
2c:0e:5a:af:3b:8b:8e:c3:6d:94:58:1f:b4:d7:70:
94:20:ea:e7:0d:ce:ac:23:f9:eb:c9:3f:c4:76:7b:
6d:ac:f8:a8:63:ba:b4:ff:32:87:35:fe:28:56:15:
ce:85:d9:8e:33:1b:99:ec:96:71:31:41:7b:9f:20:
8a:0d:5a:49:73:c1:7b:fc:e6:94:1c:69:c2:9c:cb:
0d:7e:09:04:fc:99:49:ef:7a:a9:c7:d1:5c:77:6e:
e6:9c:62:6c:66:14:76:6e:47:6b:9a:a6:c1:a9:0b:
79:ee:45:6f:3b:89:fc:84:dc:5d:da:79:69:29:cc:
e6:b6:85:29:da:9e:ca:f3:8d:20:25:ff:1e:64:3d:
0f:b9:82:50:38:2a:b3:ee:65:90:78:87:49:9b:61:
97:39:12:28:d4:b1:82:ea:f0:ee:b7:10:33:5b:48:
6f:c7:c1:c6:b3:f4:7b:e8:fb:b1:55:8c:67:ad:6a:
71:e7:a1:b1:03:6c:5b:b3:92:e9:71:95:5b:4a:78:
52:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B0:63:C6:12:7F:36:58:BE:A9:4D:03:68:EB:51:DE:B3:4B:77:97
X509v3 Authority Key Identifier:
keyid:B4:50:64:C1:AC:86:90:E2:C7:7A:95:9A:50:25:46:E9:8B:CD:37:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBkwayGkOLHepWaUCVG6YvNNyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/359179-4ac2-431c-9531-0b7a33dd5b56/1/tFBkwayGkOLHepWaUCVG6YvNNyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:94:ca:06:5a:72:9d:07:dc:ad:b4:6a:de:78:4c:93:22:b3:
a9:63:a5:b4:8a:ba:b6:5c:a9:22:2b:98:23:df:5d:e7:c1:90:
93:fd:20:42:08:8e:b9:7a:f5:25:46:71:34:69:7c:db:b0:a1:
62:a1:44:40:ab:5f:dd:50:12:d1:27:f1:45:11:2d:40:63:71:
46:49:35:eb:62:72:22:f7:2b:fc:f8:92:6b:e2:a4:1f:b2:46:
3a:13:15:58:3b:7b:5a:88:d1:2d:36:b5:6f:8e:81:b9:42:36:
71:9e:5a:ca:12:73:8a:36:bc:8c:c7:a0:e3:3f:f4:bd:c3:e3:
02:f2:b8:89:de:7b:5f:02:a3:f0:45:ed:00:33:49:4e:2c:ea:
a3:55:d2:49:27:03:83:4b:d6:7e:0a:ef:bc:8f:c0:6d:90:b0:
dd:98:22:59:b8:b3:87:25:71:1b:37:3e:75:d3:5b:1d:7c:70:
3f:f1:eb:1a:d4:63:2b:f8:35:48:59:e3:7f:52:cb:41:89:4e:
b8:0b:d3:a0:f2:d2:ea:ed:6c:1b:2f:41:64:fd:12:49:6f:49:
fa:1a:8e:56:45:8e:db:e5:35:7a:e3:14:30:29:79:ef:26:c6:
ad:1b:b6:c5:bc:4c:c8:32:db:64:da:2b:a6:66:62:9f:93:f0:
5a:59:ff:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK7HY8yhOFFFDxqssoyD0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTA2NGMxYWM4NjkwZTJjNzdhOTU5YTUwMjU0NmU5OGJj
ZDM3MjcwHhcNMjYxMDI4MTEwMTAzWhcNMjYxMDI5MTEwMTAzWjAzMTEwLwYDVQQD
Eyg4OWIwNjNjNjEyN2YzNjU4YmVhOTRkMDM2OGViNTFkZWIzNGI3Nzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnUlXps3mzKQW/LWMGI0K7iHDIXf
1LevTB/YxESA8gHA9S4J2j14M6d6zHrEVBSJRjn5Q0yCHc8IgD4sDlqvO4uOw22U
WB+013CUIOrnDc6sI/nryT/EdnttrPioY7q0/zKHNf4oVhXOhdmOMxuZ7JZxMUF7
nyCKDVpJc8F7/OaUHGnCnMsNfgkE/JlJ73qpx9Fcd27mnGJsZhR2bkdrmqbBqQt5
7kVvO4n8hNxd2nlpKczmtoUp2p7K840gJf8eZD0PuYJQOCqz7mWQeIdJm2GXORIo
1LGC6vDutxAzW0hvx8HGs/R76PuxVYxnrWpx56GxA2xbs5LpcZVbSnhSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImwY8YSfzZYvqlNA2jrUd6zS3eXMB8GA1UdIwQY
MBaAFLRQZMGshpDix3qVmlAlRumLzTcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEt
MGI3YTMzZGQ1YjU2LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zNTkxNzktNGFjMi00MzFjLTk1MzEtMGI3YTMzZGQ1YjU2
LzEvdEZCa3dheUdrT0xIZXBXYVVDVkc2WXZOTnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5TKBlpy
nQfcrbRq3nhMkyKzqWOltIq6tlypIiuYI99d58GQk/0gQgiOuXr1JUZxNGl827Ch
YqFEQKtf3VAS0SfxRREtQGNxRkk162JyIvcr/PiSa+KkH7JGOhMVWDt7WojRLTa1
b46BuUI2cZ5ayhJzija8jMeg4z/0vcPjAvK4id57XwKj8EXtADNJTizqo1XSSScD
g0vWfgrvvI/AbZCw3ZgiWbizhyVxGzc+ddNbHXxwP/HrGtRjK/g1SFnjf1LLQYlO
uAvToPLS6u1sGy9BZP0SSW9J+hqOVkWO2+U1euMUMCl57ybGrRu2xbxMyDLbZNor
pmZin5PwWln/aw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:13:00 2026 by rpki-client