Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: 2pUKLziLr1Is9lPKpvzc+TbLYX20ols/w6mLOk/xqZk=
Subject key identifier: F4:16:09:3E:54:1F:CF:27:30:34:6A:D3:B0:AF:4C:D3:03:AE:19:7B
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01A0ECD36CB87FD2464A7A4C819F3351F928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1A7E
Signing time: Tue 29 Sep 2026 11:01:13 +0000
Manifest this update: Tue 29 Sep 2026 11:01:13 +0000
Manifest next update: Wed 30 Sep 2026 11:01:13 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: nQa0OmdJDovmDBTO9JynrYZ9NCGbZuo9ic8PyGROOI8=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:6c:b8:7f:d2:46:4a:7a:4c:81:9f:33:51:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Sep 29 11:01:13 2026 GMT
Not After : Sep 30 11:01:13 2026 GMT
Subject: CN=f416093e541fcf2730346ad3b0af4cd303ae197b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:f2:94:45:3b:76:64:38:24:e2:5d:eb:89:
62:8a:c0:79:78:a4:8d:ac:22:69:19:c6:9a:31:57:
37:51:4f:d5:62:6f:51:67:fe:e4:7e:2b:c3:83:a6:
7b:9d:be:0a:9c:97:84:de:a4:46:78:99:78:c5:d5:
d9:52:70:e4:f1:b2:05:8e:10:96:b7:aa:ea:4b:35:
32:24:04:27:b0:b7:bc:2d:c0:92:c7:84:c6:fc:e8:
bb:5f:89:8d:92:ef:93:cf:7e:80:1d:e9:9c:f1:30:
91:59:2a:e0:f9:25:88:7c:c1:61:68:6a:59:5d:58:
9c:6f:0f:9c:e8:25:cc:e2:b4:ff:cb:d0:9e:d3:46:
f4:9e:af:2b:24:54:c6:6d:d6:56:86:5a:59:e2:0a:
5c:42:8b:07:65:48:1a:81:05:b7:e6:0a:2b:ea:77:
e1:f8:ca:c1:11:3c:87:47:f9:1a:77:a5:22:f9:f5:
e2:fd:ba:fe:1e:4a:d9:f1:4d:a4:84:de:22:8b:87:
9f:33:ec:f3:49:da:b5:54:e5:ab:9c:b2:51:82:18:
f7:cb:55:cb:bf:d9:ac:15:21:00:a0:e9:a7:13:55:
5a:48:8d:d5:14:a9:14:bb:c5:fe:dc:95:de:6f:5b:
f3:70:be:d4:e9:81:5d:0f:2d:7d:be:d8:95:f2:5d:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:16:09:3E:54:1F:CF:27:30:34:6A:D3:B0:AF:4C:D3:03:AE:19:7B
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:28:ad:a6:f4:d3:06:49:67:a2:19:15:0c:28:22:65:c9:
c7:e6:03:e7:ae:4c:64:46:44:0d:a4:b7:11:ca:3f:25:48:a4:
39:86:db:6b:d8:54:3d:b2:7f:43:7d:ec:e7:34:86:49:27:14:
cd:38:18:61:76:5d:f1:dd:1d:51:b5:a4:2d:b0:0c:25:16:f0:
62:a7:16:17:fb:8a:e8:de:85:4a:44:f3:e4:f2:3e:55:3d:f0:
96:da:d9:1a:83:18:90:1a:0a:1f:35:d8:61:64:c7:fe:89:ad:
d5:95:89:ed:e8:14:81:06:35:ce:c8:07:dc:d9:46:2a:b8:77:
6d:7d:0e:3c:e8:c7:8e:a8:eb:76:60:10:c5:52:90:eb:88:ea:
da:eb:a7:a6:1b:6f:d9:c6:b3:00:07:93:44:12:c4:43:eb:a5:
78:44:65:70:7c:17:36:e3:79:91:ee:59:1c:51:f5:02:f4:da:
db:b2:85:74:37:09:7f:cb:50:2e:09:80:52:e6:45:04:22:31:
05:c3:9d:f0:ec:1a:90:67:5d:4c:0c:ed:13:5e:71:4e:5e:83:
c3:0b:d5:2b:6f:4a:9e:6f:04:5d:39:15:35:b6:77:10:f1:91:
12:25:af:ee:ac:c1:44:dc:5e:04:cf:4f:7a:3a:78:22:c4:ae:
cd:9f:4d:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDs02y4f9JGSnpMgZ8zUfkoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZWM2YzBhNWViZWM1ODE3ZDkxYjkxZTc5YTZiYzYxMzJl
YjlkMmMwHhcNMjYwOTI5MTEwMTEzWhcNMjYwOTMwMTEwMTEzWjAzMTEwLwYDVQQD
EyhmNDE2MDkzZTU0MWZjZjI3MzAzNDZhZDNiMGFmNGNkMzAzYWUxOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn/ylEU7dmQ4JOJd64liisB5eKSN
rCJpGcaaMVc3UU/VYm9RZ/7kfivDg6Z7nb4KnJeE3qRGeJl4xdXZUnDk8bIFjhCW
t6rqSzUyJAQnsLe8LcCSx4TG/Oi7X4mNku+Tz36AHemc8TCRWSrg+SWIfMFhaGpZ
XVicbw+c6CXM4rT/y9Ce00b0nq8rJFTGbdZWhlpZ4gpcQosHZUgagQW35gor6nfh
+MrBETyHR/kad6Ui+fXi/br+HkrZ8U2khN4ii4efM+zzSdq1VOWrnLJRghj3y1XL
v9msFSEAoOmnE1VaSI3VFKkUu8X+3JXeb1vzcL7U6YFdDy19vtiV8l21NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQWCT5UH88nMDRq07CvTNMDrhl7MB8GA1UdIwQY
MBaAFLTsbApevsWBfZG5HnmmvGEy650sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWIt
MTNmYjdhNTEzMGNhLzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8yMDk3NGQtNjQwMy00MTA3LWE3NWItMTNmYjdhNTEzMGNh
LzEvdE94c0NsNi14WUY5a2JrZWVhYThZVExyblN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi4orab0
0wZJZ6IZFQwoImXJx+YD565MZEZEDaS3Eco/JUikOYbba9hUPbJ/Q33s5zSGSScU
zTgYYXZd8d0dUbWkLbAMJRbwYqcWF/uK6N6FSkTz5PI+VT3wltrZGoMYkBoKHzXY
YWTH/omt1ZWJ7egUgQY1zsgH3NlGKrh3bX0OPOjHjqjrdmAQxVKQ64jq2uunphtv
2cazAAeTRBLEQ+uleERlcHwXNuN5ke5ZHFH1AvTa27KFdDcJf8tQLgmAUuZFBCIx
BcOd8OwakGddTAztE15xTl6DwwvVK29Knm8EXTkVNbZ3EPGREiWv7qzBRNxeBM9P
ejp4IsSuzZ9NLA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:44:17 2026 by rpki-client