Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: SJ8k8strWlkTHCsYaqv/uc6PFft1KQDtIJQHaWsQzm4=
Subject key identifier: 67:89:59:9D:D4:03:06:7F:62:FC:19:E3:26:A9:BF:D2:94:4B:19:04
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 01A0CF6D70A5D4EC35A333E7BF0B9914D45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 12D3
Signing time: Wed 23 Sep 2026 18:00:50 +0000
Manifest this update: Wed 23 Sep 2026 18:00:50 +0000
Manifest next update: Thu 24 Sep 2026 18:00:50 +0000
Files and hashes: 1: 0NQU1ASarAJo1UIvicGr69EoQz8.roa (hash: WdkEuOIrig9vUDyn2CAOyE+4Fo/rEVr4Pv+Aia51hm8=)
2: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: ulcQ+E2IQiOgdGtkPJFoZzLrCJmuUs3TcLAj0KC3YPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:70:a5:d4:ec:35:a3:33:e7:bf:0b:99:14:d4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Sep 23 18:00:50 2026 GMT
Not After : Sep 24 18:00:50 2026 GMT
Subject: CN=6789599dd403067f62fc19e326a9bfd2944b1904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4c:fb:3c:67:66:46:b2:2d:d1:33:89:bb:7c:
21:a2:e2:62:48:0d:29:fd:2a:d8:11:11:83:da:d7:
3f:ed:c0:08:ab:73:0e:9d:f5:01:52:a7:63:df:d2:
f6:b9:a2:98:d3:f5:fc:6a:46:18:db:19:aa:3a:e4:
d5:35:ca:cf:e8:20:67:91:c2:17:46:4e:b6:7d:29:
b0:94:61:d0:8b:c0:3b:cc:af:2c:9d:a2:0d:f0:4e:
3a:4f:fb:32:b4:47:70:da:50:22:b0:29:81:8b:e4:
a7:0c:6f:bb:88:b9:7b:6c:37:46:4e:7b:74:77:43:
21:ed:60:5e:69:16:44:12:4a:93:36:28:b8:ab:61:
74:a0:35:a4:cf:a3:18:ed:9e:84:c3:8d:5f:d3:38:
38:0f:90:86:7f:14:f2:93:7f:e7:35:64:9f:38:94:
46:45:4e:be:5f:d3:13:5e:55:a3:14:23:16:5e:55:
03:94:e6:4b:8d:cc:af:69:68:35:d8:2a:98:ea:f2:
18:98:e1:3c:b9:e4:6b:40:9f:45:1d:59:29:59:fa:
54:38:42:e1:6e:b2:90:53:dc:f3:11:12:eb:c2:3a:
ac:5d:64:15:01:b1:c4:ad:6e:73:6f:a3:12:d5:c9:
ee:09:80:95:c7:1d:ca:28:e9:fb:ab:26:55:8a:3e:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:89:59:9D:D4:03:06:7F:62:FC:19:E3:26:A9:BF:D2:94:4B:19:04
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9a:7d:b5:f1:a0:ae:94:18:10:d4:21:44:7d:2e:21:b6:b7:
13:8e:71:01:76:9b:cc:8c:c0:7b:d2:d7:43:7d:6e:ad:c4:a3:
1e:9c:96:83:0e:e2:7a:a1:16:52:ac:ab:01:e0:db:f6:04:e4:
65:e5:16:64:28:62:9d:0e:dd:d6:6d:d9:f1:33:e1:2b:fe:96:
7f:80:7f:80:f2:94:9b:ed:9c:6b:8d:ee:93:8c:c7:97:be:05:
17:1b:7a:dd:ae:06:a5:3b:69:22:09:12:a2:bf:6d:d5:7e:c0:
ff:fa:13:c3:6a:b0:83:c5:15:f6:65:30:cd:d8:33:32:a6:b5:
9f:79:85:64:c5:b6:0e:f5:d1:f1:30:a5:ba:91:ff:32:db:35:
44:33:32:6d:56:77:b8:c2:41:e9:ab:a6:e3:9e:04:c5:9e:81:
1f:6d:ea:12:b0:07:26:ba:21:aa:af:02:b5:51:3f:ab:f6:8f:
fa:ca:f7:48:2b:7e:1d:cd:35:56:bb:58:23:34:b0:6d:40:06:
5b:bd:df:f5:a7:38:ad:cc:8c:49:04:8c:01:5d:0e:ed:6f:d7:
5c:35:34:35:57:1a:66:dc:54:4d:7c:0c:0f:5d:07:2e:70:7d:
64:7d:9a:d3:60:a2:4a:ed:f5:37:80:a4:03:60:6b:89:fb:64:
6d:1e:a7:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbXCl1Ow1ozPnvwuZFNRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5
YThkNGIwHhcNMjYwOTIzMTgwMDUwWhcNMjYwOTI0MTgwMDUwWjAzMTEwLwYDVQQD
Eyg2Nzg5NTk5ZGQ0MDMwNjdmNjJmYzE5ZTMyNmE5YmZkMjk0NGIxOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Uz7PGdmRrIt0TOJu3whouJiSA0p
/SrYERGD2tc/7cAIq3MOnfUBUqdj39L2uaKY0/X8akYY2xmqOuTVNcrP6CBnkcIX
Rk62fSmwlGHQi8A7zK8snaIN8E46T/sytEdw2lAisCmBi+SnDG+7iLl7bDdGTnt0
d0Mh7WBeaRZEEkqTNii4q2F0oDWkz6MY7Z6Ew41f0zg4D5CGfxTyk3/nNWSfOJRG
RU6+X9MTXlWjFCMWXlUDlOZLjcyvaWg12CqY6vIYmOE8ueRrQJ9FHVkpWfpUOELh
brKQU9zzERLrwjqsXWQVAbHErW5zb6MS1cnuCYCVxx3KKOn7qyZVij6LBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGeJWZ3UAwZ/YvwZ4yapv9KUSxkEMB8GA1UdIwQY
MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt
YjZiNzZlMjJmZmFjLzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj
LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpp9tfGg
rpQYENQhRH0uIba3E45xAXabzIzAe9LXQ31urcSjHpyWgw7ieqEWUqyrAeDb9gTk
ZeUWZChinQ7d1m3Z8TPhK/6Wf4B/gPKUm+2ca43uk4zHl74FFxt63a4GpTtpIgkS
or9t1X7A//oTw2qwg8UV9mUwzdgzMqa1n3mFZMW2DvXR8TClupH/Mts1RDMybVZ3
uMJB6aum454ExZ6BH23qErAHJrohqq8CtVE/q/aP+sr3SCt+Hc01VrtYIzSwbUAG
W73f9ac4rcyMSQSMAV0O7W/XXDU0NVcaZtxUTXwMD10HLnB9ZH2a02CiSu31N4Ck
A2BriftkbR6nWA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:24:31 2026 by rpki-client