Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: 4XGMjMgKKKdnkuKzz+wVLEVfxHA46SyKG7jLNl1LOPs=
Subject key identifier: BE:2E:8B:E8:EF:24:C0:B9:DB:00:F2:4A:A0:EF:77:C8:35:EF:E6:55
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 01A123C18B05FA5E053A19A895C6D48BA06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 03:00:48 +0000
Manifest this update: Sat 10 Oct 2026 03:00:48 +0000
Manifest next update: Sun 11 Oct 2026 03:00:48 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: rcrmslXM2iXrh9p7gfMueGdOHvECs5PkrS+AzxpeEqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:8b:05:fa:5e:05:3a:19:a8:95:c6:d4:8b:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Oct 10 03:00:48 2026 GMT
Not After : Oct 11 03:00:48 2026 GMT
Subject: CN=be2e8be8ef24c0b9db00f24aa0ef77c835efe655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f2:df:75:50:77:08:de:56:90:b9:89:20:be:
2d:2b:d2:2d:fc:86:bb:49:ca:fa:51:68:8c:ac:30:
3c:94:d4:21:fb:4f:7b:4d:a4:3e:76:7d:98:1a:20:
ee:46:7b:a5:f6:a9:58:78:ab:cd:51:ef:ff:9c:2e:
58:ec:fa:70:9b:64:23:75:da:17:db:a5:37:a1:9e:
95:28:1e:68:f3:15:50:15:f2:a3:ab:58:5c:9d:dc:
7a:7e:9d:c1:70:9a:1d:ef:dc:56:3d:89:5f:65:57:
5e:9e:2c:20:92:f7:36:f3:eb:ea:e7:11:03:42:a1:
37:53:6c:65:49:3f:74:4f:d3:68:9a:64:3d:01:4a:
b9:57:f4:c6:2b:e6:18:fe:03:d7:ea:03:8a:2c:ab:
1f:3a:bd:19:48:13:1b:ad:18:bc:f2:9b:0c:28:82:
45:da:31:5c:08:43:e8:c7:35:9e:23:46:20:7c:7e:
e9:23:3b:9c:ff:52:53:f1:78:b5:35:bb:ec:16:a5:
98:84:64:c0:14:7c:49:f8:9f:ef:29:5e:de:09:ce:
fe:58:ff:e3:dd:f9:58:45:8b:21:ff:10:d2:23:f6:
b8:d3:4d:ac:12:47:a3:44:e3:6b:77:15:87:c7:a4:
d4:ae:e3:f4:1b:7a:46:b2:65:13:07:4b:22:36:27:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2E:8B:E8:EF:24:C0:B9:DB:00:F2:4A:A0:EF:77:C8:35:EF:E6:55
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b3:2d:af:38:eb:92:9f:f6:13:9b:bb:65:cc:88:bc:6a:41:
84:43:14:4b:6a:44:fa:d0:44:00:80:f6:fe:7c:55:21:7b:99:
71:ea:7c:fd:cc:c5:26:37:9b:9b:a7:2a:36:c7:5e:3d:9b:bf:
bf:d6:c0:cc:dd:08:65:d2:cd:88:0e:d0:71:db:0a:40:6d:38:
9c:8f:08:2e:7f:f4:10:88:16:b8:1b:f4:63:3a:72:07:02:34:
3a:1b:f2:65:e1:e4:3b:05:66:8d:32:69:b0:2f:c3:7e:62:e0:
bc:7f:8f:f8:dc:a8:99:84:ba:51:a7:cd:a9:3d:a3:a8:43:e8:
60:07:d8:52:94:8f:28:dc:ed:84:14:67:75:63:a2:9c:fb:4a:
5e:af:71:7c:fe:21:f9:c5:b7:50:c0:c4:cc:1d:ab:86:3b:86:
49:ab:ad:a9:10:4e:0b:7a:a5:ce:ed:8c:c9:1a:7a:cd:1b:3a:
0f:48:8e:68:ab:75:50:e9:6d:54:47:a7:16:78:20:6d:b9:ae:
a5:24:ea:7c:77:9d:16:79:cf:9c:c6:c7:14:df:c3:01:e7:ea:
ef:3f:03:5f:b3:2b:fe:55:43:5a:41:26:e3:b8:bf:ae:df:53:
63:37:54:04:07:1c:d8:67:4a:6e:05:c4:2f:a4:3e:de:01:0e:
4a:4a:b4:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjwYsF+l4FOhmolcbUi6BrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjYxMDEwMDMwMDQ4WhcNMjYxMDExMDMwMDQ4WjAzMTEwLwYDVQQD
EyhiZTJlOGJlOGVmMjRjMGI5ZGIwMGYyNGFhMGVmNzdjODM1ZWZlNjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvLfdVB3CN5WkLmJIL4tK9It/Ia7
Scr6UWiMrDA8lNQh+097TaQ+dn2YGiDuRnul9qlYeKvNUe//nC5Y7Ppwm2QjddoX
26U3oZ6VKB5o8xVQFfKjq1hcndx6fp3BcJod79xWPYlfZVdeniwgkvc28+vq5xED
QqE3U2xlST90T9NommQ9AUq5V/TGK+YY/gPX6gOKLKsfOr0ZSBMbrRi88psMKIJF
2jFcCEPoxzWeI0YgfH7pIzuc/1JT8Xi1NbvsFqWYhGTAFHxJ+J/vKV7eCc7+WP/j
3flYRYsh/xDSI/a4002sEkejRONrdxWHx6TUruP0G3pGsmUTB0siNid9iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL4ui+jvJMC52wDySqDvd8g17+ZVMB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrMtrzjr
kp/2E5u7ZcyIvGpBhEMUS2pE+tBEAID2/nxVIXuZcep8/czFJjebm6cqNsdePZu/
v9bAzN0IZdLNiA7QcdsKQG04nI8ILn/0EIgWuBv0YzpyBwI0OhvyZeHkOwVmjTJp
sC/DfmLgvH+P+NyomYS6UafNqT2jqEPoYAfYUpSPKNzthBRndWOinPtKXq9xfP4h
+cW3UMDEzB2rhjuGSautqRBOC3qlzu2MyRp6zRs6D0iOaKt1UOltVEenFnggbbmu
pSTqfHedFnnPnMbHFN/DAefq7z8DX7Mr/lVDWkEm47i/rt9TYzdUBAcc2GdKbgXE
L6Q+3gEOSkq0Mg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:09:20 2026 by rpki-client