Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: SHjBhn+QgACFNbHPXBD7Pdt9XQ4Z9G4svhlJteOFBPg=
Subject key identifier: DC:B3:C8:48:EE:23:DC:10:5B:FB:F1:5B:28:3B:69:0C:24:AA:55:5B
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 01A14EABAA27860E7997E1922575495EC0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 11:00:35 +0000
Manifest this update: Sun 18 Oct 2026 11:00:35 +0000
Manifest next update: Mon 19 Oct 2026 11:00:35 +0000
Files and hashes: 1: 2_vE_2Yv66AoGDtat3Y89P5hOyI.roa (hash: d3nG5S5TQuOOQymp5E7knbnTq0vEJnN1w6JhmrN4V90=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: H4ODMq9Cki1KUhPTGfOEEABkXK4YWRnLWXf28sCDc1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:ab:aa:27:86:0e:79:97:e1:92:25:75:49:5e:c0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Oct 18 11:00:35 2026 GMT
Not After : Oct 19 11:00:35 2026 GMT
Subject: CN=dcb3c848ee23dc105bfbf15b283b690c24aa555b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:5b:29:e7:8d:a4:39:aa:47:b7:3a:16:12:
3a:af:52:ae:90:20:65:7f:15:9f:a4:d1:60:d9:d7:
9b:77:bd:a3:f3:a9:e1:6d:ad:61:86:11:96:82:49:
0e:7b:08:44:93:08:60:e2:3b:c9:d5:fa:14:73:f0:
c9:7f:15:d0:d8:5a:35:2f:4f:c3:da:98:34:5f:84:
2e:86:f7:9c:e9:19:e7:d6:22:b0:e2:7f:34:8a:81:
8c:72:78:2d:b5:2a:3c:a8:0d:d8:e3:bb:98:b2:dc:
49:0d:de:b6:d1:4d:f1:40:7b:84:b8:ce:2a:3c:9c:
37:6d:15:c2:5b:53:b4:9b:0b:a4:e9:11:d0:18:7e:
58:5b:9a:1d:02:d2:8a:1e:1e:c9:fe:07:71:19:93:
24:a0:90:7a:7a:ed:42:f6:62:6b:8b:ff:cc:e2:7d:
e9:5f:00:18:9e:9b:bc:15:c3:ad:d8:db:9b:41:15:
35:c7:e7:3c:81:62:40:d8:85:09:91:bd:4e:fa:a8:
a6:e5:44:76:35:d5:a6:de:77:66:80:e2:72:d6:6d:
4a:a4:d3:08:c1:2c:a5:61:69:fe:62:16:cc:0c:ef:
a8:dd:40:db:da:ec:fa:24:fc:a5:13:23:c6:aa:7a:
9d:34:53:e2:38:73:78:2c:29:c0:68:96:5b:ca:17:
2d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:B3:C8:48:EE:23:DC:10:5B:FB:F1:5B:28:3B:69:0C:24:AA:55:5B
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:b5:fb:da:5a:9d:6e:8a:3e:e4:a9:2e:78:0c:8d:b4:85:61:
20:42:87:2e:19:72:51:37:ee:2a:c5:ec:e9:01:da:29:db:18:
42:0d:88:e6:b3:26:8d:68:48:a0:22:82:01:28:d5:76:dd:6e:
73:b8:1e:73:43:aa:5b:4d:1b:99:7a:2a:cb:93:f1:b4:44:82:
88:9d:6b:b2:2f:99:f0:24:4b:d6:2c:b1:85:5b:81:21:6f:fc:
89:f0:03:e5:e6:85:b3:17:d4:68:59:43:0c:b2:82:80:c3:f6:
5a:d6:28:47:32:4a:35:fc:b7:d0:42:ec:a1:bf:d5:4e:db:d7:
8f:c9:54:cc:6b:82:d0:dd:ee:80:b1:a5:83:0c:ef:18:0f:b2:
38:91:3f:17:55:cb:47:08:15:5f:62:4e:a8:75:1c:82:08:82:
5e:80:ad:90:74:c2:fc:06:ec:3e:25:91:66:9c:22:4d:ab:3d:
b5:20:45:0e:84:92:c7:be:5b:89:17:7b:94:9a:8e:8b:0c:ec:
53:a0:25:db:11:ff:57:46:0a:bf:d8:75:7b:07:d4:84:90:98:
d6:e8:7f:84:f7:99:92:08:6d:ea:a5:cc:19:74:de:2a:1f:59:
d6:65:b4:29:05:3c:28:5c:9b:d1:a5:51:c6:90:80:95:ed:00:
25:47:c6:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFOq6onhg55l+GSJXVJXsDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OWQyOGI3ZDAyOGNhYmI5Njg0YTgwZTE0YmFhZjE1Y2E2
ZmQyZjYwHhcNMjYxMDE4MTEwMDM1WhcNMjYxMDE5MTEwMDM1WjAzMTEwLwYDVQQD
EyhkY2IzYzg0OGVlMjNkYzEwNWJmYmYxNWIyODNiNjkwYzI0YWE1NTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJtbKeeNpDmqR7c6FhI6r1KukCBl
fxWfpNFg2debd72j86nhba1hhhGWgkkOewhEkwhg4jvJ1foUc/DJfxXQ2Fo1L0/D
2pg0X4Quhvec6Rnn1iKw4n80ioGMcngttSo8qA3Y47uYstxJDd620U3xQHuEuM4q
PJw3bRXCW1O0mwuk6RHQGH5YW5odAtKKHh7J/gdxGZMkoJB6eu1C9mJri//M4n3p
XwAYnpu8FcOt2NubQRU1x+c8gWJA2IUJkb1O+qim5UR2NdWm3ndmgOJy1m1KpNMI
wSylYWn+YhbMDO+o3UDb2uz6JPylEyPGqnqdNFPiOHN4LCnAaJZbyhctswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyzyEjuI9wQW/vxWyg7aQwkqlVbMB8GA1UdIwQY
MBaAFLadKLfQKMq7loSoDhS6rxXKb9L2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTIt
NWM5MzIzOWU1ZTJlLzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9iMjJjMWUtY2E0Yy00ODFlLTkxYTItNWM5MzIzOWU1ZTJl
LzEvdHAwb3Q5QW95cnVXaEtnT0ZMcXZGY3B2MHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULX72lqd
boo+5KkueAyNtIVhIEKHLhlyUTfuKsXs6QHaKdsYQg2I5rMmjWhIoCKCASjVdt1u
c7gec0OqW00bmXoqy5PxtESCiJ1rsi+Z8CRL1iyxhVuBIW/8ifAD5eaFsxfUaFlD
DLKCgMP2WtYoRzJKNfy30ELsob/VTtvXj8lUzGuC0N3ugLGlgwzvGA+yOJE/F1XL
RwgVX2JOqHUcggiCXoCtkHTC/AbsPiWRZpwiTas9tSBFDoSSx75biRd7lJqOiwzs
U6Al2xH/V0YKv9h1ewfUhJCY1uh/hPeZkght6qXMGXTeKh9Z1mW0KQU8KFyb0aVR
xpCAle0AJUfGiQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:01:36 2026 by rpki-client