Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: Y9oHMvMM8qNtCq5mSVpdjWqWOXwsKN4eC/FDFuRBzfI=
Subject key identifier: 3B:E2:15:A8:79:CB:A7:F1:E4:47:22:EE:98:D4:74:44:A1:0D:DE:DA
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 01A0D1925863FD3EDB65B88F490D9CAF33D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 04:00:23 +0000
Manifest this update: Thu 24 Sep 2026 04:00:23 +0000
Manifest next update: Fri 25 Sep 2026 04:00:23 +0000
Files and hashes: 1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: YBcH79mAXKgoE2sv9TYwW8SmXjpLw1RmvMsityAbVDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:58:63:fd:3e:db:65:b8:8f:49:0d:9c:af:33:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Sep 24 04:00:23 2026 GMT
Not After : Sep 25 04:00:23 2026 GMT
Subject: CN=3be215a879cba7f1e44722ee98d47444a10ddeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:bb:ad:31:fd:80:04:96:67:e3:d1:64:97:
25:d7:77:74:64:c8:ce:61:40:ef:82:d1:19:0d:32:
6c:1f:7e:c7:49:24:be:d6:0d:a8:a9:f8:63:80:08:
a1:9a:16:9e:91:8e:83:79:17:2b:d0:80:96:41:69:
11:ea:be:6f:ae:0e:0c:83:58:22:6a:0d:37:fe:9a:
49:ee:af:2c:82:15:89:b9:33:42:9a:47:39:d5:a9:
ac:6c:24:0d:93:8c:b0:2a:29:44:db:0b:0d:ea:b3:
93:0d:cb:b7:a9:4f:a3:a8:18:6a:0b:61:c9:9b:ba:
32:6f:82:91:37:07:ac:d9:89:c1:b0:ac:37:86:f7:
13:1f:9f:61:50:54:5f:a9:56:db:29:e2:1b:6f:2a:
4b:ad:90:34:47:92:8e:05:64:4e:d0:27:00:04:bd:
41:69:96:11:74:0a:3b:ef:50:f0:a8:0e:36:61:a4:
c2:a5:c6:b6:21:25:56:bc:a5:0c:ef:94:78:92:6d:
0c:51:d3:e9:6e:ca:d8:fb:0d:8c:29:e9:9b:b6:05:
cb:aa:f8:58:3f:af:c8:e9:d0:8c:31:31:3f:bd:1f:
74:f0:c3:b5:5d:34:72:f1:f2:7c:c8:a7:ab:ec:e2:
9f:42:f0:49:93:30:41:57:1e:10:e7:ad:90:aa:0e:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E2:15:A8:79:CB:A7:F1:E4:47:22:EE:98:D4:74:44:A1:0D:DE:DA
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ba:9e:88:1b:f1:e0:7f:b3:52:f7:1e:96:37:05:72:da:b1:
33:ba:0f:97:af:62:ec:52:9f:60:6e:b2:ac:3c:29:78:1d:07:
b3:7e:cd:97:a8:bb:b9:d3:37:22:de:e6:74:5b:03:cf:c1:d8:
0e:51:e9:f4:ff:3e:75:9c:43:92:32:38:ae:1a:d6:02:bd:58:
cf:88:a8:70:9f:ca:79:35:73:63:a2:31:1e:8d:b8:de:6a:e4:
07:f3:60:61:03:3f:8c:91:62:6e:60:98:15:fd:3e:16:1a:d5:
74:fd:db:24:3a:4e:94:49:9a:57:2b:2e:a8:4d:37:90:81:39:
2f:e4:8b:c0:ad:54:8b:07:bb:1b:9c:19:e0:31:63:b8:28:66:
37:4c:9d:f6:91:ad:ae:19:2d:ee:c8:43:87:21:37:89:80:bd:
9c:96:91:f5:e7:0b:4f:63:32:63:5d:c3:0d:f4:39:71:77:7f:
85:22:04:64:da:8e:92:24:5c:21:b4:0b:63:56:d5:75:99:5e:
f5:92:3c:f8:a9:d2:67:8d:42:95:a3:a5:6d:da:7a:a2:93:fd:
e8:0f:31:58:fc:97:20:d9:f8:4a:48:74:c5:39:6d:ee:fa:2e:
8a:02:bd:fe:58:53:d5:d2:d6:1b:15:d8:1c:f6:0c:6c:0e:c4:
6c:36:84:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRklhj/T7bZbiPSQ2crzPTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj
ZjMyZmUwHhcNMjYwOTI0MDQwMDIzWhcNMjYwOTI1MDQwMDIzWjAzMTEwLwYDVQQD
EygzYmUyMTVhODc5Y2JhN2YxZTQ0NzIyZWU5OGQ0NzQ0NGExMGRkZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0W7rTH9gASWZ+PRZJcl13d0ZMjO
YUDvgtEZDTJsH37HSSS+1g2oqfhjgAihmhaekY6DeRcr0ICWQWkR6r5vrg4Mg1gi
ag03/ppJ7q8sghWJuTNCmkc51amsbCQNk4ywKilE2wsN6rOTDcu3qU+jqBhqC2HJ
m7oyb4KRNwes2YnBsKw3hvcTH59hUFRfqVbbKeIbbypLrZA0R5KOBWRO0CcABL1B
aZYRdAo771DwqA42YaTCpca2ISVWvKUM75R4km0MUdPpbsrY+w2MKembtgXLqvhY
P6/I6dCMMTE/vR908MO1XTRy8fJ8yKer7OKfQvBJkzBBVx4Q562Qqg6kKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDviFah5y6fx5Eci7pjUdEShDd7aMB8GA1UdIwQY
MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt
NmNmOGU1NjdmZjFjLzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj
LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbqeiBvx
4H+zUvceljcFctqxM7oPl69i7FKfYG6yrDwpeB0Hs37Nl6i7udM3It7mdFsDz8HY
DlHp9P8+dZxDkjI4rhrWAr1Yz4iocJ/KeTVzY6IxHo243mrkB/NgYQM/jJFibmCY
Ff0+FhrVdP3bJDpOlEmaVysuqE03kIE5L+SLwK1Uiwe7G5wZ4DFjuChmN0yd9pGt
rhkt7shDhyE3iYC9nJaR9ecLT2MyY13DDfQ5cXd/hSIEZNqOkiRcIbQLY1bVdZle
9ZI8+KnSZ41ClaOlbdp6opP96A8xWPyXINn4Skh0xTlt7vouigK9/lhT1dLWGxXY
HPYMbA7EbDaEsw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:39:31 2026 by rpki-client