Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier: ILgpLVaBh5bAPJw9wbKWuXa93ZKzLbix/MsgCXG02sU=
Subject key identifier: BA:A5:63:5D:97:2F:BF:1E:FA:DD:10:FF:0F:03:9A:58:D5:AF:46:33
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial: 01A1DFF1741375AFF33119DC536BF7CBFC4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number: 038C
Signing time: Sun 15 Nov 2026 16:01:45 +0000
Manifest this update: Sun 15 Nov 2026 16:01:45 +0000
Manifest next update: Mon 16 Nov 2026 16:01:45 +0000
Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: 3oKUADKkwLKBGxpsmE39dCQ4h0d69sKkRzDdEe8cBn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:f1:74:13:75:af:f3:31:19:dc:53:6b:f7:cb:fc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Validity
Not Before: Nov 15 16:01:45 2026 GMT
Not After : Nov 16 16:01:45 2026 GMT
Subject: CN=baa5635d972fbf1efadd10ff0f039a58d5af4633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:0a:3f:00:d6:86:1c:61:56:1f:d4:f2:b5:
70:cb:66:55:1a:25:68:26:66:71:ca:31:23:52:fa:
48:9b:23:6e:d5:50:f8:d3:fd:6d:01:6f:14:ed:e6:
d4:2f:da:44:d5:2c:77:08:e1:34:6a:53:30:a8:b3:
f0:f1:9a:49:f2:71:0c:d1:93:28:9b:a8:da:b5:34:
0c:ab:74:29:e5:97:97:8f:26:c3:da:e1:3e:aa:af:
d4:a7:7e:4c:b7:4f:c5:99:3e:94:e8:eb:62:26:2b:
d4:13:fe:f1:c5:5c:3c:37:48:2b:33:3b:da:e1:a0:
3f:4b:49:c4:7f:98:b9:95:79:d4:7b:cd:2f:d3:31:
94:bb:7f:31:d2:0e:83:48:20:aa:5c:9b:b5:64:13:
63:38:e2:14:e1:b0:a9:f9:03:50:4f:3e:c0:42:79:
5e:e1:f4:b7:42:33:57:90:dc:07:8b:83:f7:0e:27:
cd:18:1d:e4:c1:1c:e1:8a:ba:e5:5e:55:9c:58:e7:
12:ee:56:14:14:9d:9b:c6:ee:4b:da:7b:68:57:c7:
d3:4c:45:36:b0:f7:c7:de:2f:32:57:7a:10:de:1a:
65:cc:ba:9b:92:f7:07:d0:ed:f5:19:f2:33:92:a7:
05:d8:7b:21:d3:80:d1:ee:bd:a7:50:03:d9:94:88:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A5:63:5D:97:2F:BF:1E:FA:DD:10:FF:0F:03:9A:58:D5:AF:46:33
X509v3 Authority Key Identifier:
keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:52:27:f2:e8:75:da:06:4e:b0:d7:33:be:3e:06:bf:28:
ff:d3:ea:e6:e4:e3:f2:24:51:9d:e8:38:dc:44:82:13:ce:5e:
7d:5a:bf:0e:48:17:40:6a:25:66:49:ed:1d:87:ee:4a:b5:ea:
d2:ff:08:1f:66:b8:b2:72:96:fc:6a:9c:b1:4c:86:18:3c:9c:
33:7e:63:52:a3:2e:38:b0:35:9e:f3:33:3d:99:cf:cf:40:9d:
fc:a4:63:eb:07:13:d7:e9:0d:e6:a0:c3:96:23:ec:6e:1d:cf:
4e:ec:25:af:7d:3c:ec:af:fd:59:8e:ba:0d:23:00:01:c1:2d:
90:ec:7d:af:f4:9e:56:57:9d:aa:38:c9:e3:48:a6:91:7a:ad:
6d:c9:2d:6b:d8:17:42:3e:5d:8d:cd:56:a3:55:f8:29:68:26:
5c:b1:f4:40:0e:0a:65:3e:cf:e7:3c:37:42:4b:11:5d:f6:eb:
67:90:b0:07:fd:5a:9d:d6:57:e8:a0:60:a0:9b:52:30:5e:45:
f5:be:27:f3:34:8b:69:90:18:7c:98:5d:b8:96:40:91:d0:4d:
c6:fc:ae:50:9f:3e:99:ad:28:e8:a6:13:d6:57:bc:24:dc:a1:
7a:ac:f8:84:25:b8:b8:14:20:6e:56:43:d2:41:37:11:ed:37:
43:ff:48:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8XQTda/zMRncU2v3y/xOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1
YWQwMTgwHhcNMjYxMTE1MTYwMTQ1WhcNMjYxMTE2MTYwMTQ1WjAzMTEwLwYDVQQD
EyhiYWE1NjM1ZDk3MmZiZjFlZmFkZDEwZmYwZjAzOWE1OGQ1YWY0NjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtgKPwDWhhxhVh/U8rVwy2ZVGiVo
JmZxyjEjUvpImyNu1VD40/1tAW8U7ebUL9pE1Sx3COE0alMwqLPw8ZpJ8nEM0ZMo
m6jatTQMq3Qp5ZeXjybD2uE+qq/Up35Mt0/FmT6U6OtiJivUE/7xxVw8N0grMzva
4aA/S0nEf5i5lXnUe80v0zGUu38x0g6DSCCqXJu1ZBNjOOIU4bCp+QNQTz7AQnle
4fS3QjNXkNwHi4P3DifNGB3kwRzhirrlXlWcWOcS7lYUFJ2bxu5L2ntoV8fTTEU2
sPfH3i8yV3oQ3hplzLqbkvcH0O31GfIzkqcF2Hsh04DR7r2nUAPZlIjBdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqlY12XL78e+t0Q/w8DmljVr0YzMB8GA1UdIwQY
MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt
NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz
LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1JSJ/Lo
ddoGTrDXM74+Br8o/9Pq5uTj8iRRneg43ESCE85efVq/DkgXQGolZkntHYfuSrXq
0v8IH2a4snKW/GqcsUyGGDycM35jUqMuOLA1nvMzPZnPz0Cd/KRj6wcT1+kN5qDD
liPsbh3PTuwlr3087K/9WY66DSMAAcEtkOx9r/SeVledqjjJ40imkXqtbckta9gX
Qj5djc1Wo1X4KWgmXLH0QA4KZT7P5zw3QksRXfbrZ5CwB/1andZX6KBgoJtSMF5F
9b4n8zSLaZAYfJhduJZAkdBNxvyuUJ8+ma0o6KYT1le8JNyheqz4hCW4uBQgblZD
0kE3Ee03Q/9I/Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:41:55 2026 by rpki-client