Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: nEbKuy902UT+JbxMMxqmRA2ZBVpdmFduFBEbXiUSUXQ=
Subject key identifier: 4B:E0:9C:34:77:5E:17:E3:1B:B4:29:E5:46:92:A3:09:E8:28:51:0B
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 01A0CE912C437711CABB8766BB9F8A978CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 14:00:15 +0000
Manifest this update: Wed 23 Sep 2026 14:00:15 +0000
Manifest next update: Thu 24 Sep 2026 14:00:15 +0000
Files and hashes: 1: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (hash: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=)
2: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: QGIODyKjtoEOXl5s0ktKYXtTF4+O2Va0M+GJT43xUlc=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:2c:43:77:11:ca:bb:87:66:bb:9f:8a:97:8c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Sep 23 14:00:15 2026 GMT
Not After : Sep 24 14:00:15 2026 GMT
Subject: CN=4be09c34775e17e31bb429e54692a309e828510b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:3e:b0:96:71:92:b1:b6:2f:c8:35:41:f5:
73:d6:b9:d5:5c:64:44:02:eb:97:9e:ec:94:90:95:
17:73:b4:98:6a:86:85:f0:a1:0d:29:1a:06:c1:21:
17:3e:2b:94:ac:78:d0:c5:d7:18:01:db:c0:86:95:
b4:6a:4d:7c:80:b2:1a:4e:e7:9e:87:35:87:17:0a:
3c:77:70:c6:15:2f:56:c4:87:d0:ee:15:39:ed:34:
72:aa:13:7b:69:d9:e0:65:be:2e:68:58:2c:a9:83:
7e:c5:57:27:c6:b5:35:6f:c8:2e:7c:eb:91:6d:3e:
7e:d9:48:0e:f4:7c:e7:9c:d9:82:4c:51:55:92:ef:
53:f2:03:78:02:6f:77:52:c6:b5:39:bd:05:e8:63:
d4:9d:8b:7e:88:b6:15:cf:09:0b:ff:0d:d3:07:6a:
48:7c:7e:f7:29:16:30:59:a4:7d:49:7f:89:b6:d2:
fb:a3:51:91:0c:57:1f:18:a7:60:6b:eb:2f:cb:4e:
e9:e0:8d:f7:8d:bf:05:72:9d:85:2a:9c:9d:2c:4b:
f4:61:3a:74:00:e3:80:bc:d9:87:32:a0:1b:0c:75:
45:8b:33:f2:60:b7:49:62:c4:76:ef:d7:4f:4c:01:
63:47:7a:dd:d4:79:97:b5:36:ee:8a:05:af:3c:63:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:9C:34:77:5E:17:E3:1B:B4:29:E5:46:92:A3:09:E8:28:51:0B
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:81:c9:af:13:c5:45:68:d4:c5:70:c5:9d:04:f3:fe:4c:04:
7b:fd:c4:87:fe:9f:49:20:89:63:b2:9f:71:ea:c9:ab:b5:6a:
16:db:21:ba:4e:8c:3b:04:76:11:28:45:68:5d:5a:c1:85:e6:
c9:3d:23:6d:bb:23:79:ef:7e:15:43:8c:f0:f9:6e:74:d1:1a:
f9:2f:a1:ab:23:b5:21:ba:45:2b:93:32:87:40:5d:ac:48:f7:
a5:58:77:e8:d8:83:8a:69:19:72:b2:ac:ec:9b:04:4f:8a:d7:
54:0c:f9:62:e9:71:50:c8:56:86:69:be:54:49:ec:ed:76:59:
46:5d:4b:d5:6e:73:ac:7e:39:9c:72:4d:c4:56:94:ee:98:40:
d8:03:99:8d:3a:3d:db:f5:b3:2e:58:eb:af:71:f4:24:5b:20:
71:46:55:eb:3c:f8:31:8e:db:78:80:b9:41:a8:1f:b9:93:e6:
05:8d:3e:f9:56:20:06:36:aa:95:0c:a2:f3:65:93:d3:4a:ee:
a1:0d:ab:0c:a6:76:4e:6e:1d:04:86:93:85:a2:14:42:00:92:
22:4c:9f:1c:a7:22:ab:71:6c:22:f4:d7:97:50:e4:ce:ea:dc:
e0:3b:5b:fd:a1:cc:95:6c:ea:97:54:0a:64:82:8d:9d:f5:d2:
e3:53:3f:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOkSxDdxHKu4dmu5+Kl4zBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy
YmE5NzYwHhcNMjYwOTIzMTQwMDE1WhcNMjYwOTI0MTQwMDE1WjAzMTEwLwYDVQQD
Eyg0YmUwOWMzNDc3NWUxN2UzMWJiNDI5ZTU0NjkyYTMwOWU4Mjg1MTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZM+sJZxkrG2L8g1QfVz1rnVXGRE
AuuXnuyUkJUXc7SYaoaF8KENKRoGwSEXPiuUrHjQxdcYAdvAhpW0ak18gLIaTuee
hzWHFwo8d3DGFS9WxIfQ7hU57TRyqhN7adngZb4uaFgsqYN+xVcnxrU1b8gufOuR
bT5+2UgO9HznnNmCTFFVku9T8gN4Am93Usa1Ob0F6GPUnYt+iLYVzwkL/w3TB2pI
fH73KRYwWaR9SX+JttL7o1GRDFcfGKdga+svy07p4I33jb8Fcp2FKpydLEv0YTp0
AOOAvNmHMqAbDHVFizPyYLdJYsR279dPTAFjR3rd1HmXtTbuigWvPGNPQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvgnDR3XhfjG7Qp5UaSownoKFELMB8GA1UdIwQY
MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct
YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi
LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYHJrxPF
RWjUxXDFnQTz/kwEe/3Eh/6fSSCJY7KfcerJq7VqFtshuk6MOwR2EShFaF1awYXm
yT0jbbsjee9+FUOM8PludNEa+S+hqyO1IbpFK5Myh0BdrEj3pVh36NiDimkZcrKs
7JsET4rXVAz5YulxUMhWhmm+VEns7XZZRl1L1W5zrH45nHJNxFaU7phA2AOZjTo9
2/WzLljrr3H0JFsgcUZV6zz4MY7beIC5QagfuZPmBY0++VYgBjaqlQyi82WT00ru
oQ2rDKZ2Tm4dBIaThaIUQgCSIkyfHKciq3FsIvTXl1Dkzurc4Dtb/aHMlWzql1QK
ZIKNnfXS41M/+g==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:44:43 2026 by rpki-client