Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: 2/Vu8o4JpntTbbqaxwHRJjT+7PSkjjsjgZrf8qyQ+vI=
Subject key identifier: 66:E5:9F:F5:6A:B4:1B:37:72:01:19:2A:3A:90:CF:EF:01:25:9E:53
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 01A0CFA48FF19F110236D1EA6CC15B7C6EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 19:01:03 +0000
Manifest this update: Wed 23 Sep 2026 19:01:03 +0000
Manifest next update: Thu 24 Sep 2026 19:01:03 +0000
Files and hashes: 1: QTRMtFoOW3Na9Q55kjNuxm41uuE.roa (hash: pLBNua0p1PO6zDb7MzcwoLxSSVrUFoLKBy/Xu8ILddg=)
2: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: mkE5wI3YajuMD8NUMlirZqrE3VVIPjuJL57ux36DgJQ=)
3: Unh6jdcSJxudNFyv1JxZ0OwDByI.roa (hash: ZP3ianjjsAEeUKwTMzmvqvt0Yzwm5Qrx7Exl6hWMZbI=)
4: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:8f:f1:9f:11:02:36:d1:ea:6c:c1:5b:7c:6e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Sep 23 19:01:03 2026 GMT
Not After : Sep 24 19:01:03 2026 GMT
Subject: CN=66e59ff56ab41b377201192a3a90cfef01259e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:ed:64:70:b5:45:6a:26:27:fc:9a:22:b2:
dd:09:68:39:f7:a7:cf:ba:b5:54:0d:c8:30:e0:79:
32:ae:97:46:5a:dd:c4:3e:de:dc:02:3e:7a:d1:8a:
dc:84:17:df:bc:03:03:30:ad:69:f6:85:f2:5a:dc:
9c:f6:7c:31:64:70:f5:b8:29:c0:03:79:cc:c3:c4:
bc:b3:cc:3e:10:86:96:22:ad:c5:ae:aa:13:ba:99:
25:be:60:c2:01:b8:aa:09:47:69:a5:db:38:32:c0:
5f:c6:a6:7e:40:fc:8f:8f:d5:b4:e1:3a:4d:0c:fe:
0c:50:51:e1:72:16:42:42:85:02:9a:1e:fe:49:e4:
12:77:1e:11:6f:f0:46:e1:de:f8:c3:a0:83:b0:db:
17:3f:10:2d:80:91:45:90:1b:62:3d:f9:9f:fb:0f:
33:db:79:df:9c:33:23:3f:a6:ac:fe:57:1b:b3:a0:
c4:20:ac:8e:bd:23:0c:5c:81:41:e2:dd:25:c3:56:
79:56:2f:e0:7a:5f:b7:a9:61:47:49:dc:75:1f:d2:
c7:2c:4d:7f:7f:4b:cd:08:19:e8:ad:6c:03:59:27:
ad:4a:cd:4b:a8:ac:b9:37:6a:d1:25:20:32:cc:42:
be:14:d6:4d:bf:90:d7:75:36:9a:64:7b:3b:e3:75:
03:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E5:9F:F5:6A:B4:1B:37:72:01:19:2A:3A:90:CF:EF:01:25:9E:53
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:eb:9c:ba:fa:46:26:ac:68:92:02:79:33:89:dc:6d:6b:61:
83:30:48:8a:f3:2a:52:6b:8d:48:a3:6a:df:ea:aa:93:c8:5f:
d3:ed:85:9f:0b:20:8d:66:2a:6e:34:8b:96:f3:78:3b:dd:90:
01:97:b2:b2:1e:87:5e:22:9b:7d:10:88:61:37:83:53:f1:a0:
a1:7c:8f:a6:95:ea:ba:a3:77:6a:2b:c9:fe:87:ae:59:69:d5:
a1:12:c3:cf:f8:30:4a:25:92:9c:41:b0:aa:29:b1:9c:f2:43:
56:b6:c7:f2:7a:05:b2:9c:4b:79:c1:63:80:34:2e:b1:65:f5:
1d:f2:ac:f7:99:9d:b0:5f:4a:ce:d0:92:97:be:37:fe:a0:2d:
57:30:91:ce:9e:db:9b:6c:aa:bc:c6:cc:43:be:8a:7e:4b:4d:
fa:b5:79:9a:a8:cc:df:8c:bc:33:1b:3c:2b:a8:e5:25:70:50:
c6:1a:26:e6:13:4f:18:fc:54:85:54:ad:1d:38:2d:15:94:78:
7b:57:a4:48:61:43:25:3c:f2:0e:06:70:47:a6:dc:a0:14:d1:
a6:a8:7c:d9:37:6f:89:19:b0:d7:2d:a4:c7:f8:8b:a2:e0:42:
18:aa:a9:d7:dc:59:f4:ea:e3:ca:62:fd:a1:99:0b:f7:6d:6d:
fe:84:e7:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpI/xnxECNtHqbMFbfG6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjYwOTIzMTkwMTAzWhcNMjYwOTI0MTkwMTAzWjAzMTEwLwYDVQQD
Eyg2NmU1OWZmNTZhYjQxYjM3NzIwMTE5MmEzYTkwY2ZlZjAxMjU5ZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGHtZHC1RWomJ/yaIrLdCWg596fP
urVUDcgw4HkyrpdGWt3EPt7cAj560YrchBffvAMDMK1p9oXyWtyc9nwxZHD1uCnA
A3nMw8S8s8w+EIaWIq3FrqoTupklvmDCAbiqCUdppds4MsBfxqZ+QPyPj9W04TpN
DP4MUFHhchZCQoUCmh7+SeQSdx4Rb/BG4d74w6CDsNsXPxAtgJFFkBtiPfmf+w8z
23nfnDMjP6as/lcbs6DEIKyOvSMMXIFB4t0lw1Z5Vi/gel+3qWFHSdx1H9LHLE1/
f0vNCBnorWwDWSetSs1LqKy5N2rRJSAyzEK+FNZNv5DXdTaaZHs743UDXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbln/VqtBs3cgEZKjqQz+8BJZ5TMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceucuvpG
JqxokgJ5M4ncbWthgzBIivMqUmuNSKNq3+qqk8hf0+2FnwsgjWYqbjSLlvN4O92Q
AZeysh6HXiKbfRCIYTeDU/GgoXyPppXquqN3aivJ/oeuWWnVoRLDz/gwSiWSnEGw
qimxnPJDVrbH8noFspxLecFjgDQusWX1HfKs95mdsF9KztCSl743/qAtVzCRzp7b
m2yqvMbMQ76KfktN+rV5mqjM34y8Mxs8K6jlJXBQxhom5hNPGPxUhVStHTgtFZR4
e1ekSGFDJTzyDgZwR6bcoBTRpqh82TdviRmw1y2kx/iLouBCGKqp19xZ9OrjymL9
oZkL921t/oTngg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:19:09 2026 by rpki-client