Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
File: T_hs8z4V6kCJ2inip4gddG34Ju8.mft (raw, json)
Hash identifier: v/WcxkWBU9rx4OqK6+Gz0WkD9C+MeU1925YTrhGtvIY=
Subject key identifier: 18:5F:B0:B8:7E:4B:09:45:E5:73:DE:71:2A:9D:6B:EC:53:CB:05:51
Authority key identifier: 4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
Certificate issuer: /CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Certificate serial: 01A0D6B96DE6AAFCEF025AAA4EF00B4075BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
Manifest number: 13D1
Signing time: Fri 25 Sep 2026 04:01:11 +0000
Manifest this update: Fri 25 Sep 2026 04:01:11 +0000
Manifest next update: Sat 26 Sep 2026 04:01:11 +0000
Files and hashes: 1: 1v3IPl8M1eJPBhCAK7u4vq4rUaI.roa (hash: fKYCNJCehScelohhLM2BpKiOwF7K+yob2FjJd+Ycr6M=)
2: T_hs8z4V6kCJ2inip4gddG34Ju8.crl (hash: VaFdv7jZw9ZY92iClktVkAcA37XnmLWvzogJlLCzyCQ=)
3: pxD_Y88xrQvnAVjSRtOa0jsr7OQ.roa (hash: +SNLZHSRdVfvPSo1qQ3dQv0AK0ZdBnAQ1eRjccxs6zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:6d:e6:aa:fc:ef:02:5a:aa:4e:f0:0b:40:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ff86cf33e15ea4089da29e2a7881d746df826ef
Validity
Not Before: Sep 25 04:01:11 2026 GMT
Not After : Sep 26 04:01:11 2026 GMT
Subject: CN=185fb0b87e4b0945e573de712a9d6bec53cb0551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:70:90:ba:05:89:8a:5e:00:7d:c0:93:e7:39:
61:d2:76:2a:b2:e9:54:6e:b4:26:29:87:53:61:d6:
ea:9c:31:c5:e8:6f:ea:6b:95:25:f5:6b:4a:e2:86:
89:98:5f:17:64:f4:49:64:fb:95:82:80:4e:16:37:
ff:ca:6f:46:c7:77:9e:17:f0:38:fc:ae:45:60:eb:
70:09:97:bd:a3:e7:62:1e:a3:2b:4c:d0:77:ee:a6:
b5:35:38:8a:35:79:13:08:02:02:0a:38:74:6a:c0:
b4:44:87:92:a1:bb:49:33:92:c0:f3:2b:1e:ce:52:
6c:6a:34:df:6e:58:12:30:1e:50:b2:e6:c7:af:43:
f8:b9:00:f1:09:ff:24:c2:27:79:69:9f:9b:9d:df:
ec:0d:b2:46:3d:92:70:96:ea:1c:07:ca:04:af:bf:
84:5a:d0:d6:37:e7:e0:a1:dd:f1:22:cc:9d:f4:c9:
4a:25:32:cc:9d:b7:9b:64:b6:e0:05:33:58:8f:b5:
40:07:e7:f5:88:6f:bf:04:cf:b2:7e:52:04:b9:b2:
45:70:03:a0:90:8b:33:fc:13:27:94:c9:0a:c2:ab:
ed:a7:6e:04:8e:ed:13:27:39:e2:83:f9:06:13:a1:
1a:a8:97:8c:34:fd:ff:7c:7f:8f:ab:4b:51:23:e1:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5F:B0:B8:7E:4B:09:45:E5:73:DE:71:2A:9D:6B:EC:53:CB:05:51
X509v3 Authority Key Identifier:
keyid:4F:F8:6C:F3:3E:15:EA:40:89:DA:29:E2:A7:88:1D:74:6D:F8:26:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_hs8z4V6kCJ2inip4gddG34Ju8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/c991ee-bd41-4ad1-b88d-6fc5fca09629/1/T_hs8z4V6kCJ2inip4gddG34Ju8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a4:f8:02:b9:40:35:53:31:07:4c:88:0e:3a:33:1a:a7:fb:
1e:f6:48:54:b2:60:b5:4c:c3:2e:a8:e5:53:97:16:09:44:a1:
1c:9d:21:eb:57:57:a8:b3:cb:c1:9f:9d:54:67:3e:e2:61:45:
bc:db:1c:a8:88:03:ea:fa:65:77:ef:6a:17:4a:04:9a:0f:34:
84:bb:e8:08:c4:1f:64:99:7b:4d:72:e8:f9:47:89:d1:e5:23:
f6:7b:e8:da:d0:1a:65:27:47:5c:ca:4b:bd:32:9e:d3:a9:d7:
1a:2c:80:b9:cf:34:6d:63:b9:c2:a4:e4:7d:19:44:86:49:51:
2c:23:4c:bd:77:8a:6f:c6:3c:1c:4b:c4:43:9a:d4:33:0e:60:
56:d2:31:34:18:99:14:46:df:2f:fe:54:08:25:01:30:af:73:
e3:33:91:d4:12:b4:77:4f:86:26:7a:69:bd:61:e9:66:56:06:
47:91:c7:55:26:a3:b2:31:61:bb:d7:49:9c:96:6a:3a:82:c7:
02:b8:e3:27:f9:2d:a6:bf:82:22:15:f2:38:a9:5e:1f:8d:cb:
56:72:e3:b8:f4:b2:21:68:cc:bb:d8:79:37:24:21:88:37:04:
52:12:78:7d:d2:1f:77:d5:18:78:00:f0:c5:43:b8:b3:26:ea:
da:ca:49:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWuW3mqvzvAlqqTvALQHW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZjg2Y2YzM2UxNWVhNDA4OWRhMjllMmE3ODgxZDc0NmRm
ODI2ZWYwHhcNMjYwOTI1MDQwMTExWhcNMjYwOTI2MDQwMTExWjAzMTEwLwYDVQQD
EygxODVmYjBiODdlNGIwOTQ1ZTU3M2RlNzEyYTlkNmJlYzUzY2IwNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3CQugWJil4AfcCT5zlh0nYqsulU
brQmKYdTYdbqnDHF6G/qa5Ul9WtK4oaJmF8XZPRJZPuVgoBOFjf/ym9Gx3eeF/A4
/K5FYOtwCZe9o+diHqMrTNB37qa1NTiKNXkTCAICCjh0asC0RIeSobtJM5LA8yse
zlJsajTfblgSMB5QsubHr0P4uQDxCf8kwid5aZ+bnd/sDbJGPZJwluocB8oEr7+E
WtDWN+fgod3xIsyd9MlKJTLMnbebZLbgBTNYj7VAB+f1iG+/BM+yflIEubJFcAOg
kIsz/BMnlMkKwqvtp24Eju0TJznig/kGE6EaqJeMNP3/fH+Pq0tRI+GBawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhfsLh+SwlF5XPecSqda+xTywVRMB8GA1UdIwQY
MBaAFE/4bPM+FepAidop4qeIHXRt+CbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQt
NmZjNWZjYTA5NjI5LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jOTkxZWUtYmQ0MS00YWQxLWI4OGQtNmZjNWZjYTA5NjI5
LzEvVF9oczh6NFY2a0NKMmluaXA0Z2RkRzM0SnU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaT4ArlA
NVMxB0yIDjozGqf7HvZIVLJgtUzDLqjlU5cWCUShHJ0h61dXqLPLwZ+dVGc+4mFF
vNscqIgD6vpld+9qF0oEmg80hLvoCMQfZJl7TXLo+UeJ0eUj9nvo2tAaZSdHXMpL
vTKe06nXGiyAuc80bWO5wqTkfRlEhklRLCNMvXeKb8Y8HEvEQ5rUMw5gVtIxNBiZ
FEbfL/5UCCUBMK9z4zOR1BK0d0+GJnppvWHpZlYGR5HHVSajsjFhu9dJnJZqOoLH
ArjjJ/ktpr+CIhXyOKleH43LVnLjuPSyIWjMu9h5NyQhiDcEUhJ4fdIfd9UYeADw
xUO4sybq2spJXA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:10:12 2026 by rpki-client