Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier: Ovs4Mv7eMwKy3Sp5CNf/Evu9HCVOWJewcmQGDcJwXIM=
Subject key identifier: 70:B0:76:71:AB:A7:2F:8B:04:6A:F1:4E:01:E3:C1:A4:9B:14:23:7C
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial: 01A0D1932CA0A1AE298F8995385646EDAB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number: 0300
Signing time: Thu 24 Sep 2026 04:01:18 +0000
Manifest this update: Thu 24 Sep 2026 04:01:18 +0000
Manifest next update: Fri 25 Sep 2026 04:01:18 +0000
Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: 8lTcfUd4Nj8haZ7UYEazGEelM+AQUrr8+BD/u3W3F4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:93:2c:a0:a1:ae:29:8f:89:95:38:56:46:ed:ab:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Validity
Not Before: Sep 24 04:01:18 2026 GMT
Not After : Sep 25 04:01:18 2026 GMT
Subject: CN=70b07671aba72f8b046af14e01e3c1a49b14237c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d1:3e:b7:c8:e0:7c:d1:ee:b4:37:eb:1c:f0:
67:f5:64:b4:1d:57:d6:c2:c5:36:0f:e6:10:0b:d2:
40:36:14:0e:64:4e:7e:25:77:f9:71:ca:5d:64:f8:
27:e3:1a:75:07:63:e8:5f:d4:31:58:e3:58:07:5b:
23:4e:81:cb:8b:2e:62:f9:58:aa:7d:94:bf:4d:44:
9c:59:d0:31:41:90:52:18:06:49:92:67:03:2f:14:
e0:7f:73:7a:95:1a:15:b0:0f:33:89:e6:9e:69:5c:
c0:94:08:6f:be:ce:6b:9d:c2:ed:19:93:5d:ad:69:
c5:ad:8e:00:ce:1d:33:9e:ca:5e:b3:0d:b6:ed:f7:
1a:d7:a6:88:28:f7:10:4e:f8:a3:0b:ff:d6:30:d1:
b5:e9:aa:06:2e:0c:92:fa:84:18:04:dd:6d:32:0f:
de:fa:3b:99:4a:7f:f3:2c:91:15:0a:8b:1a:75:ea:
3e:7c:7a:32:40:e4:bd:97:19:7d:73:e1:9b:44:6e:
de:4e:d7:4d:3d:90:1e:01:77:bd:5b:15:5b:7f:7d:
be:8c:ba:33:2e:6c:04:79:03:b3:e5:0d:05:ca:69:
14:e2:7a:f8:9e:3f:43:20:c9:cb:66:54:d6:1f:b5:
50:6c:36:d2:b3:32:6c:08:8a:68:69:8f:60:42:f1:
6a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:76:71:AB:A7:2F:8B:04:6A:F1:4E:01:E3:C1:A4:9B:14:23:7C
X509v3 Authority Key Identifier:
keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ed:cb:30:12:30:a2:ee:15:3a:b0:6b:ea:93:19:3e:d6:ad:
2b:d9:c7:dc:fb:bb:df:4a:7c:5a:54:b4:19:f6:22:e9:82:6a:
c7:a8:28:dc:ad:71:b0:0e:3f:75:64:fe:60:d4:09:cb:74:e9:
fd:3b:15:a1:59:d0:cb:3d:2f:e2:83:b6:6c:12:35:44:30:63:
17:7f:6c:d7:59:f8:85:be:0e:f7:cb:2c:83:57:03:7b:19:bb:
ec:58:45:0a:66:8c:c1:e1:e5:78:fe:93:56:03:90:db:06:b8:
85:19:cf:5f:8a:d4:e9:31:a2:29:04:55:83:0b:09:f5:f1:86:
8f:22:20:f9:1c:94:26:5c:2f:c4:99:be:e7:0e:5c:75:11:b5:
a1:e6:0e:58:bc:02:dd:63:a6:de:a9:a2:5c:38:73:7a:aa:82:
a9:8b:92:23:b7:b8:5a:a2:14:c6:03:be:d6:5b:5e:65:d3:fe:
2b:5f:04:7d:ed:2b:1e:76:b0:f1:63:35:c5:76:1c:94:b7:ab:
f8:18:85:df:e7:f8:c7:f5:8e:3a:7d:30:7c:b5:da:9c:c3:22:
36:18:f4:46:ef:e2:20:e0:45:e2:41:89:de:2d:e4:51:98:fa:
99:22:34:53:9c:d9:d8:8d:87:b2:2f:e8:2f:e2:5b:16:a5:7f:
b7:9b:8a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkyygoa4pj4mVOFZG7asAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1
YWQwMTgwHhcNMjYwOTI0MDQwMTE4WhcNMjYwOTI1MDQwMTE4WjAzMTEwLwYDVQQD
Eyg3MGIwNzY3MWFiYTcyZjhiMDQ2YWYxNGUwMWUzYzFhNDliMTQyMzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49E+t8jgfNHutDfrHPBn9WS0HVfW
wsU2D+YQC9JANhQOZE5+JXf5ccpdZPgn4xp1B2PoX9QxWONYB1sjToHLiy5i+Viq
fZS/TUScWdAxQZBSGAZJkmcDLxTgf3N6lRoVsA8zieaeaVzAlAhvvs5rncLtGZNd
rWnFrY4Azh0znspesw227fca16aIKPcQTvijC//WMNG16aoGLgyS+oQYBN1tMg/e
+juZSn/zLJEVCosadeo+fHoyQOS9lxl9c+GbRG7eTtdNPZAeAXe9WxVbf32+jLoz
LmwEeQOz5Q0FymkU4nr4nj9DIMnLZlTWH7VQbDbSszJsCIpoaY9gQvFqzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCwdnGrpy+LBGrxTgHjwaSbFCN8MB8GA1UdIwQY
MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt
NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz
LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr+3LMBIw
ou4VOrBr6pMZPtatK9nH3Pu730p8WlS0GfYi6YJqx6go3K1xsA4/dWT+YNQJy3Tp
/TsVoVnQyz0v4oO2bBI1RDBjF39s11n4hb4O98ssg1cDexm77FhFCmaMweHleP6T
VgOQ2wa4hRnPX4rU6TGiKQRVgwsJ9fGGjyIg+RyUJlwvxJm+5w5cdRG1oeYOWLwC
3WOm3qmiXDhzeqqCqYuSI7e4WqIUxgO+1lteZdP+K18Efe0rHnaw8WM1xXYclLer
+BiF3+f4x/WOOn0wfLXanMMiNhj0Ru/iIOBF4kGJ3i3kUZj6mSI0U5zZ2I2Hsi/o
L+JbFqV/t5uKDg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:41:47 2026 by rpki-client