Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json)
Hash identifier: 70UuV15HgxkVI5wv3Oeswae/zcmGoqoEwrGbKCGvQdo=
Subject key identifier: 36:C3:A5:44:42:70:53:45:06:39:69:DD:4C:E6:BD:C7:01:EB:6F:D5
Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a
Certificate serial: 01A0E098DCE23377ED4F16F9C7DDD202435B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
Manifest number: 14D6
Signing time: Sun 27 Sep 2026 02:01:49 +0000
Manifest this update: Sun 27 Sep 2026 02:01:49 +0000
Manifest next update: Mon 28 Sep 2026 02:01:49 +0000
Files and hashes: 1: GuWBmwhJapEp_BmmuNbZSMGsF-Y.roa (hash: XKoJ/kEd+7q2jht4EhlLR7+g4VG6e/EP//UCSF6Kcuw=)
2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: JI1hzLMJ2b3Rz5sK2CYFiRqnBMS2Dz5Q6zmx5REKJVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:dc:e2:33:77:ed:4f:16:f9:c7:dd:d2:02:43:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a
Validity
Not Before: Sep 27 02:01:49 2026 GMT
Not After : Sep 28 02:01:49 2026 GMT
Subject: CN=36c3a54442705345063969dd4ce6bdc701eb6fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:e3:d5:6e:b5:8a:a4:58:fc:95:f3:4a:a1:
ae:b1:76:71:26:9d:34:c8:27:8a:c0:0e:59:65:79:
39:d8:00:69:37:c8:8c:58:24:2d:b8:96:98:e3:0a:
28:69:ce:9d:e5:79:0e:c0:2d:10:a1:c8:a3:f7:36:
71:74:28:b5:e2:8d:60:e3:4c:42:50:2b:10:79:60:
7c:fb:07:6f:ae:22:69:b2:ff:6d:86:d0:06:c7:b1:
b2:3e:dd:69:e2:e8:fa:cd:01:e9:30:07:7e:09:c1:
ef:57:40:b1:b0:70:4d:f7:d5:21:5f:f5:d9:09:7e:
55:dc:37:72:ef:18:51:f3:98:60:59:df:92:7a:df:
96:05:c0:96:1d:a5:b1:4d:cc:91:f3:16:66:d1:34:
c1:c7:97:1c:fe:1c:e8:6f:36:9d:e5:5d:55:ef:1f:
97:43:e4:fe:84:7b:6a:58:4c:91:11:91:8c:48:b2:
f9:b9:05:7a:ed:6c:05:fa:61:68:10:da:94:76:d7:
19:0c:e1:76:cf:f9:14:67:52:fb:b6:e4:75:75:4e:
0b:80:c9:97:fd:21:c8:3e:8d:43:fc:65:b6:5c:5e:
6d:26:25:3e:a8:e4:d5:65:6c:0e:fc:f1:06:10:8e:
a6:4c:ef:6f:f4:f2:d7:b2:b8:55:c7:72:0d:fc:c3:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C3:A5:44:42:70:53:45:06:39:69:DD:4C:E6:BD:C7:01:EB:6F:D5
X509v3 Authority Key Identifier:
keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:6c:bf:66:4b:b5:4a:84:4d:6c:06:67:20:02:09:11:b4:
12:bd:a7:fb:ec:04:cf:a0:64:7d:ed:72:ff:c8:fb:f4:7e:e0:
e1:16:0e:04:db:74:95:5d:14:29:fd:6d:c3:93:8f:ab:91:8e:
45:7f:d5:23:77:10:5a:81:ab:57:d7:e5:c4:80:c6:d4:84:ff:
be:2f:ea:48:48:90:5d:d9:09:40:2f:2b:44:37:97:af:0b:25:
db:0a:e7:73:25:bd:a3:7d:a3:2b:f3:e1:1c:76:bd:90:e4:b7:
9b:b7:24:58:0b:c2:43:2d:c4:ad:0a:7b:8a:03:c7:f3:3f:56:
52:f9:0f:ad:a7:ef:e5:f2:f1:88:f9:64:36:15:99:05:1d:dd:
c8:96:6d:fd:bd:e6:28:5d:a1:67:51:a3:16:84:78:37:f5:ae:
a4:44:83:ec:e3:be:68:42:6c:4a:0b:40:1c:17:33:3a:26:dc:
b5:a6:c5:4d:81:47:8c:4f:0a:94:f5:75:91:b1:7c:be:51:6e:
b5:85:46:e0:1c:1e:bb:64:2b:7e:03:34:a2:7b:8f:8a:eb:b4:
70:b3:dd:b4:0f:2d:fb:65:6b:ab:11:a5:f0:a9:59:0c:1f:1b:
95:3a:c8:ef:74:a0:cb:6e:ba:cd:2a:6e:ab:2a:b6:2e:68:32:
85:23:31:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgmNziM3ftTxb5x93SAkNbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTQ1OTVjNTBjMzUxOTIxYjBkZTlhNTc1NDBhMTVlNWMx
YzYxOGEwHhcNMjYwOTI3MDIwMTQ5WhcNMjYwOTI4MDIwMTQ5WjAzMTEwLwYDVQQD
EygzNmMzYTU0NDQyNzA1MzQ1MDYzOTY5ZGQ0Y2U2YmRjNzAxZWI2ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV7j1W61iqRY/JXzSqGusXZxJp00
yCeKwA5ZZXk52ABpN8iMWCQtuJaY4wooac6d5XkOwC0Qocij9zZxdCi14o1g40xC
UCsQeWB8+wdvriJpsv9thtAGx7GyPt1p4uj6zQHpMAd+CcHvV0CxsHBN99UhX/XZ
CX5V3Ddy7xhR85hgWd+Set+WBcCWHaWxTcyR8xZm0TTBx5cc/hzobzad5V1V7x+X
Q+T+hHtqWEyREZGMSLL5uQV67WwF+mFoENqUdtcZDOF2z/kUZ1L7tuR1dU4LgMmX
/SHIPo1D/GW2XF5tJiU+qOTVZWwO/PEGEI6mTO9v9PLXsrhVx3IN/MOgzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbDpURCcFNFBjlp3UzmvccB62/VMB8GA1UdIwQY
MBaAFLcUWVxQw1GSGw3ppXVAoV5cHGGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMt
ZjUzZDllMzZlOTVhLzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMtZjUzZDllMzZlOTVh
LzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+hsv2ZL
tUqETWwGZyACCRG0Er2n++wEz6Bkfe1y/8j79H7g4RYOBNt0lV0UKf1tw5OPq5GO
RX/VI3cQWoGrV9flxIDG1IT/vi/qSEiQXdkJQC8rRDeXrwsl2wrncyW9o32jK/Ph
HHa9kOS3m7ckWAvCQy3ErQp7igPH8z9WUvkPrafv5fLxiPlkNhWZBR3dyJZt/b3m
KF2hZ1GjFoR4N/WupESD7OO+aEJsSgtAHBczOibctabFTYFHjE8KlPV1kbF8vlFu
tYVG4Bweu2QrfgM0onuPiuu0cLPdtA8t+2VrqxGl8KlZDB8blTrI73Sgy266zSpu
qyq2LmgyhSMxnA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:07:08 2026 by rpki-client