Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
File: 20bM9fil_kT0v9m6ZrpRJG2osYQ.mft (raw, json)
Hash identifier: g7SLqe1jzPvwbm4xQca5L0UtKGE7M1u+OhdjF1fW9v4=
Subject key identifier: 20:40:F9:10:ED:52:36:F2:E9:91:8D:0D:80:4C:4A:09:0B:2B:C4:D5
Authority key identifier: DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
Certificate issuer: /CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Certificate serial: 01A0D3F070E5FC36E32DB38CC64307B863F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
Manifest number: 1832
Signing time: Thu 24 Sep 2026 15:02:25 +0000
Manifest this update: Thu 24 Sep 2026 15:02:25 +0000
Manifest next update: Fri 25 Sep 2026 15:02:25 +0000
Files and hashes: 1: 20bM9fil_kT0v9m6ZrpRJG2osYQ.crl (hash: el4Fwa7LMykO/pjHZ8DtZkdXAc9u70dgPW2zQHUvQq4=)
2: 7kzK7-E42Pa8w63nDviF_cLjzRw.roa (hash: UZPrhRmZER1+q3579qQlJmn/mR5/oV526WWY7+wNVgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:70:e5:fc:36:e3:2d:b3:8c:c6:43:07:b8:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db46ccf5f8a5fe44f4bfd9ba66ba51246da8b184
Validity
Not Before: Sep 24 15:02:25 2026 GMT
Not After : Sep 25 15:02:25 2026 GMT
Subject: CN=2040f910ed5236f2e9918d0d804c4a090b2bc4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:93:0b:08:89:ae:92:e7:49:f8:1a:72:c7:
90:07:38:18:d5:a4:ab:cb:9c:b0:3f:ba:f8:11:0a:
62:5d:af:27:8d:4c:b5:aa:ab:99:09:7a:4a:88:ee:
11:f9:97:d1:6e:7c:c7:f5:da:e9:86:26:20:98:86:
a6:69:02:27:78:ea:69:1c:16:92:70:1c:ca:d4:07:
b1:5d:c9:45:27:0b:34:61:4e:91:c7:cb:3c:c2:e5:
7a:9a:1b:92:c1:1c:f4:63:3c:75:a0:14:e6:5a:9f:
3a:23:f5:22:54:65:11:8b:c5:3d:b9:95:0d:9f:e8:
e3:f2:0a:7e:f7:19:2f:c6:ab:d9:ee:6f:3b:a7:7c:
a7:81:53:62:2c:d3:cc:a4:87:c5:50:20:49:d7:70:
b7:3b:83:a1:5c:e6:25:8c:b0:b2:3d:7e:f1:f0:29:
cd:e0:6e:b1:e7:9e:83:9a:ab:56:a9:ac:3b:dc:33:
9b:8d:e5:07:00:38:07:1b:cd:04:59:78:22:54:0b:
e0:30:87:bc:0b:08:af:ce:3a:b1:e6:20:90:03:ae:
8a:28:73:d3:05:2f:26:95:de:82:b6:01:15:ab:ee:
17:af:32:20:09:f3:0f:45:a7:b9:75:d5:5a:d0:fe:
79:a3:c1:16:23:5e:e2:29:91:2d:fd:0b:f8:a6:b5:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:40:F9:10:ED:52:36:F2:E9:91:8D:0D:80:4C:4A:09:0B:2B:C4:D5
X509v3 Authority Key Identifier:
keyid:DB:46:CC:F5:F8:A5:FE:44:F4:BF:D9:BA:66:BA:51:24:6D:A8:B1:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20bM9fil_kT0v9m6ZrpRJG2osYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f72a1e-6adb-4302-a0e8-d42a81b81e23/1/20bM9fil_kT0v9m6ZrpRJG2osYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:aa:d8:68:0a:b4:12:49:a8:ae:b5:df:59:a1:cb:5e:64:0e:
08:45:7d:8a:21:c3:93:ca:04:b9:b9:32:7e:71:92:61:c6:78:
66:3c:e5:7c:41:20:21:57:92:f7:82:01:e7:5b:11:86:2e:2b:
a2:27:1e:05:77:83:5f:b1:d6:f5:b3:66:b6:93:7b:52:6a:96:
d3:bd:b0:c9:63:e2:5d:c0:77:91:bb:17:09:44:aa:96:87:f6:
5a:ab:c0:e5:c5:7e:fb:56:d7:01:2a:45:84:04:5e:2f:37:d7:
0e:6b:77:63:fe:4a:35:64:d0:ba:46:7c:d2:37:7f:d9:5b:c6:
08:31:45:c6:ef:7b:ce:10:01:41:e2:d8:b9:d7:e3:55:e0:54:
32:b4:49:70:a7:11:f4:ad:43:5a:dd:24:e3:00:9c:09:9e:77:
a0:05:93:2e:17:2f:45:41:86:f1:18:b8:29:a6:31:ba:40:65:
3f:f7:58:f0:7e:14:7b:16:10:b9:4e:00:59:36:7e:8f:76:be:
08:7e:bc:ff:b7:06:38:bc:99:e0:bc:37:fb:f2:4c:69:0f:c5:
92:af:61:85:74:67:ee:2e:b4:88:c8:6c:43:5d:6a:71:2d:76:
dc:ad:51:de:1d:bb:40:45:b7:c0:7a:35:09:0a:f5:32:ef:31:
9e:e0:62:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8HDl/DbjLbOMxkMHuGPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNDZjY2Y1ZjhhNWZlNDRmNGJmZDliYTY2YmE1MTI0NmRh
OGIxODQwHhcNMjYwOTI0MTUwMjI1WhcNMjYwOTI1MTUwMjI1WjAzMTEwLwYDVQQD
EygyMDQwZjkxMGVkNTIzNmYyZTk5MThkMGQ4MDRjNGEwOTBiMmJjNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOqTCwiJrpLnSfgacseQBzgY1aSr
y5ywP7r4EQpiXa8njUy1qquZCXpKiO4R+ZfRbnzH9drphiYgmIamaQIneOppHBaS
cBzK1AexXclFJws0YU6Rx8s8wuV6mhuSwRz0Yzx1oBTmWp86I/UiVGURi8U9uZUN
n+jj8gp+9xkvxqvZ7m87p3yngVNiLNPMpIfFUCBJ13C3O4OhXOYljLCyPX7x8CnN
4G6x556DmqtWqaw73DObjeUHADgHG80EWXgiVAvgMIe8Cwivzjqx5iCQA66KKHPT
BS8mld6CtgEVq+4XrzIgCfMPRae5ddVa0P55o8EWI17iKZEt/Qv4prXLSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBA+RDtUjby6ZGNDYBMSgkLK8TVMB8GA1UdIwQY
MBaAFNtGzPX4pf5E9L/Zuma6USRtqLGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgt
ZDQyYTgxYjgxZTIzLzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9mNzJhMWUtNmFkYi00MzAyLWEwZTgtZDQyYTgxYjgxZTIz
LzEvMjBiTTlmaWxfa1QwdjltNlpycFJKRzJvc1lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKrYaAq0
EkmorrXfWaHLXmQOCEV9iiHDk8oEubkyfnGSYcZ4ZjzlfEEgIVeS94IB51sRhi4r
oiceBXeDX7HW9bNmtpN7UmqW072wyWPiXcB3kbsXCUSqlof2WqvA5cV++1bXASpF
hAReLzfXDmt3Y/5KNWTQukZ80jd/2VvGCDFFxu97zhABQeLYudfjVeBUMrRJcKcR
9K1DWt0k4wCcCZ53oAWTLhcvRUGG8Ri4KaYxukBlP/dY8H4UexYQuU4AWTZ+j3a+
CH68/7cGOLyZ4Lw3+/JMaQ/Fkq9hhXRn7i60iMhsQ11qcS123K1R3h27QEW3wHo1
CQr1Mu8xnuBi/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:20:43 2026 by rpki-client