Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
File: tLwJuuvLr2P16agsCh2dez6nemU.mft (raw, json)
Hash identifier: S4KCqUeKM/gdAZ+nMKDFf8/1AN0mVg1HhjGs2ZZMWfQ=
Subject key identifier: BC:B0:0D:87:D1:20:4A:BA:95:A2:EF:06:C4:D9:41:41:A3:EF:F8:8F
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 01A0D3EFAAF887C8F3B5D850D1EC0C4116C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:34 +0000
Manifest this update: Thu 24 Sep 2026 15:01:34 +0000
Manifest next update: Fri 25 Sep 2026 15:01:34 +0000
Files and hashes: 1: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (hash: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=)
2: lDFtsbALGfgFN-KrmlEBLtt2u4s.roa (hash: R1VlTwbdHUvOW6pHRBy8Nv0a804k8mQXLaD2CbKg+f4=)
3: tLwJuuvLr2P16agsCh2dez6nemU.crl (hash: 4BUkMYqF5Mtzj1DFcOb9sImKST4FwXad/gmEKUHt0Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:aa:f8:87:c8:f3:b5:d8:50:d1:ec:0c:41:16:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Sep 24 15:01:34 2026 GMT
Not After : Sep 25 15:01:34 2026 GMT
Subject: CN=bcb00d87d1204aba95a2ef06c4d94141a3eff88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:ec:eb:66:8a:51:ff:02:26:00:42:50:b3:
9c:53:0e:6d:0b:54:14:53:10:f5:66:d3:b8:65:68:
7e:88:03:32:a0:04:e6:6b:e9:01:fc:31:b1:16:99:
d7:d9:f6:28:c3:db:3f:31:34:d4:35:e2:59:ae:e3:
39:c5:8c:03:6a:18:25:fe:74:2d:90:10:8a:00:ae:
ee:40:e9:82:27:55:4e:41:4e:ec:fa:3a:aa:02:83:
11:77:58:9d:76:41:9d:5c:22:f9:c0:06:35:6c:e0:
98:33:b6:e1:9b:bd:2e:15:1f:0e:f2:ff:fa:2f:a1:
42:bd:6e:d3:bf:8d:37:08:fe:3c:45:e6:fe:0c:40:
9a:c4:20:b6:3b:10:ad:29:4f:d8:56:b6:ad:83:ba:
f4:4f:0d:47:bd:c0:54:52:1c:a8:98:f1:70:5f:ff:
24:3c:6b:8a:b2:2d:2b:97:6e:6f:42:4b:30:69:94:
45:ac:5d:52:b0:cf:d9:fe:d7:1c:6c:89:a4:98:0f:
e5:21:95:93:45:10:c8:3b:e0:b9:62:60:ee:22:e1:
9e:3b:f8:c0:d3:1c:ee:44:f8:8a:c7:82:49:7e:a4:
40:61:fe:f3:7e:b9:1a:db:e3:82:9b:49:30:3c:b9:
00:47:21:d9:4a:c2:a0:2c:7b:f6:38:8a:b5:2d:d3:
33:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B0:0D:87:D1:20:4A:BA:95:A2:EF:06:C4:D9:41:41:A3:EF:F8:8F
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:56:4d:a1:2f:dd:41:48:57:ac:42:a4:83:47:39:bb:43:98:
1e:b8:14:4d:1d:aa:75:ab:06:26:a8:37:d1:d3:2d:da:d7:55:
c6:99:60:88:d2:4e:a8:6a:3b:54:2d:5b:a8:5b:bc:98:47:a8:
e8:31:29:d2:08:c5:19:40:b6:61:17:f9:5a:d7:37:23:14:e4:
70:8e:f7:40:71:f6:6e:8f:5c:4c:11:20:cf:df:cb:5a:d5:e2:
19:d9:15:fd:27:c2:c4:cb:b8:57:b6:2a:10:ad:bc:60:ce:c2:
a3:68:e7:36:d0:17:5d:39:27:7a:59:75:02:97:4b:26:cd:d1:
3d:c4:8c:78:c5:f8:13:48:10:47:fc:ba:55:fb:24:d0:84:2b:
a6:bb:a0:ed:ba:f3:aa:37:b3:a3:09:61:44:b0:34:11:55:7e:
d1:f9:1a:d1:91:5d:94:a9:03:9b:c2:5b:33:a4:1e:70:33:92:
ec:da:5e:bf:46:4c:c8:90:fe:56:99:7f:a1:a3:bd:1e:75:59:
cd:bb:08:a8:d0:ff:fd:86:08:2d:b7:2b:b2:cf:d6:85:6b:17:
93:6b:84:df:74:fc:4c:4b:5f:b1:f5:9a:26:a9:d6:c8:82:e0:
34:78:d1:e9:0c:d1:95:1f:74:7c:6f:f7:fd:88:f4:59:ea:9d:
34:b5:4e:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT76r4h8jztdhQ0ewMQRbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmMwOWJhZWJjYmFmNjNmNWU5YTgyYzBhMWQ5ZDdiM2Vh
NzdhNjUwHhcNMjYwOTI0MTUwMTM0WhcNMjYwOTI1MTUwMTM0WjAzMTEwLwYDVQQD
EyhiY2IwMGQ4N2QxMjA0YWJhOTVhMmVmMDZjNGQ5NDE0MWEzZWZmODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Bjs62aKUf8CJgBCULOcUw5tC1QU
UxD1ZtO4ZWh+iAMyoATma+kB/DGxFpnX2fYow9s/MTTUNeJZruM5xYwDahgl/nQt
kBCKAK7uQOmCJ1VOQU7s+jqqAoMRd1iddkGdXCL5wAY1bOCYM7bhm70uFR8O8v/6
L6FCvW7Tv403CP48Reb+DECaxCC2OxCtKU/YVratg7r0Tw1HvcBUUhyomPFwX/8k
PGuKsi0rl25vQkswaZRFrF1SsM/Z/tccbImkmA/lIZWTRRDIO+C5YmDuIuGeO/jA
0xzuRPiKx4JJfqRAYf7zfrka2+OCm0kwPLkARyHZSsKgLHv2OIq1LdMzUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLywDYfRIEq6laLvBsTZQUGj7/iPMB8GA1UdIwQY
MBaAFLS8Cbrry69j9emoLAodnXs+p3plMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt
MTFlNWY2ZDEyZWYxLzEvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx
LzEvdEx3SnV1dkxyMlAxNmFnc0NoMmRlejZuZW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1ZNoS/d
QUhXrEKkg0c5u0OYHrgUTR2qdasGJqg30dMt2tdVxplgiNJOqGo7VC1bqFu8mEeo
6DEp0gjFGUC2YRf5Wtc3IxTkcI73QHH2bo9cTBEgz9/LWtXiGdkV/SfCxMu4V7Yq
EK28YM7Co2jnNtAXXTknell1ApdLJs3RPcSMeMX4E0gQR/y6Vfsk0IQrprug7brz
qjezowlhRLA0EVV+0fka0ZFdlKkDm8JbM6QecDOS7Npev0ZMyJD+Vpl/oaO9HnVZ
zbsIqND//YYILbcrss/WhWsXk2uE33T8TEtfsfWaJqnWyILgNHjR6QzRlR90fG/3
/Yj0WeqdNLVOyw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:36:12 2026 by rpki-client