Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: gesBgYn9Uj33mClebm7U4XsxKOzMB3htj3Rzze5ye3U=
Subject key identifier: DD:87:96:AF:0F:FF:EF:08:12:CD:A0:95:9A:5D:29:EC:43:53:B2:53
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 01A0D5A6C7C82629C586ADF50CD7D15F110A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 23:01:12 +0000
Manifest this update: Thu 24 Sep 2026 23:01:12 +0000
Manifest next update: Fri 25 Sep 2026 23:01:12 +0000
Files and hashes: 1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: tDcErNeECV2peBd0V9tjabegEfP3jRPmqgC7wF0eAN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:c7:c8:26:29:c5:86:ad:f5:0c:d7:d1:5f:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Sep 24 23:01:12 2026 GMT
Not After : Sep 25 23:01:12 2026 GMT
Subject: CN=dd8796af0fffef0812cda0959a5d29ec4353b253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:85:71:49:23:9b:83:cf:a3:67:9d:29:5c:d2:
8c:ab:29:96:14:a4:11:57:bd:56:45:26:bd:85:f7:
d5:8a:6c:f4:ee:7f:f2:d1:5a:9f:64:14:72:c9:fb:
81:fe:32:6e:b0:54:fb:81:54:d3:e5:d1:f4:4c:60:
38:ef:9f:a6:82:ef:10:24:5f:c1:77:9b:b2:ce:7a:
46:eb:30:c4:a5:5e:bf:c5:8d:78:62:77:10:76:ed:
f8:67:37:76:e8:ea:bf:b6:d8:80:66:bd:c4:7a:35:
9b:af:bd:d3:c7:33:97:c8:e4:20:e7:ef:40:a8:fe:
a8:d3:94:73:30:e8:ff:2a:49:1a:30:e0:23:d3:37:
3a:ea:91:74:37:23:1c:79:3b:0f:30:4d:96:6f:e2:
5a:d4:0d:c0:70:2d:28:90:ba:19:b9:29:6a:fe:33:
ec:80:96:53:8e:45:9a:10:52:36:5c:74:ed:82:b9:
2c:f9:5a:1d:23:d3:38:2c:a3:25:35:b1:b0:40:b5:
a3:f3:df:9c:ed:80:2a:c5:44:3b:1f:d2:b4:f7:92:
e9:a5:5c:cf:91:2d:c4:a0:1a:e0:cf:0a:9f:f1:13:
60:a7:d7:46:47:11:4c:30:c6:51:15:4b:4d:ac:64:
d5:7a:cb:f7:9f:be:0b:85:9d:ac:33:ff:92:ff:16:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:96:AF:0F:FF:EF:08:12:CD:A0:95:9A:5D:29:EC:43:53:B2:53
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dd:b4:f9:a5:5f:1b:31:77:9d:be:1e:89:08:e0:03:2a:f0:
6c:fe:cc:4d:b3:a7:80:35:4c:1b:74:aa:e5:69:4b:f2:f4:e3:
e2:f6:8a:1b:06:e6:4d:00:fa:36:1a:55:c9:48:6e:2b:e6:47:
bf:3f:2f:c7:55:89:97:4e:e3:d9:17:2e:e5:30:6d:34:cf:f7:
f6:d6:65:34:6b:fe:e3:81:92:a0:2b:e9:0d:a3:05:f9:20:aa:
e8:c0:29:23:d7:fd:39:c0:e3:c1:cd:4b:c7:79:28:07:3c:b8:
4a:1d:6b:91:a3:7a:32:ae:f6:f3:9b:49:f8:f2:96:90:bc:34:
c0:80:0f:13:cd:28:59:cc:68:af:b8:47:28:2b:7b:f7:2c:02:
25:36:1c:d2:aa:1e:a9:5d:ab:b1:15:8f:cc:6d:97:8f:0a:31:
58:d0:83:72:a7:ff:ed:a9:ba:7c:f6:1d:a6:1e:47:6a:45:8d:
42:4d:93:79:58:54:ed:04:8a:c6:73:d8:5b:a3:2b:8e:e6:29:
4e:e3:29:b6:c9:9f:fd:00:aa:c6:a9:be:a9:e1:27:e5:40:33:
4f:f9:df:73:20:2f:2d:24:15:81:41:4e:c5:e1:51:bf:88:df:
e6:e7:bd:55:32:6a:bc:4e:9f:d5:b7:d4:c1:6c:4c:92:67:49:
76:24:68:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpsfIJinFhq31DNfRXxEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZWQ0Yzc4Njc0MjllZTAyZjVjZGMxYWZiZWFhNWJhNzEz
MzYwMDgwHhcNMjYwOTI0MjMwMTEyWhcNMjYwOTI1MjMwMTEyWjAzMTEwLwYDVQQD
EyhkZDg3OTZhZjBmZmZlZjA4MTJjZGEwOTU5YTVkMjllYzQzNTNiMjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44VxSSObg8+jZ50pXNKMqymWFKQR
V71WRSa9hffVimz07n/y0VqfZBRyyfuB/jJusFT7gVTT5dH0TGA475+mgu8QJF/B
d5uyznpG6zDEpV6/xY14YncQdu34Zzd26Oq/ttiAZr3EejWbr73TxzOXyOQg5+9A
qP6o05RzMOj/KkkaMOAj0zc66pF0NyMceTsPME2Wb+Ja1A3AcC0okLoZuSlq/jPs
gJZTjkWaEFI2XHTtgrks+VodI9M4LKMlNbGwQLWj89+c7YAqxUQ7H9K095LppVzP
kS3EoBrgzwqf8RNgp9dGRxFMMMZRFUtNrGTVesv3n74LhZ2sM/+S/xblRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2Hlq8P/+8IEs2glZpdKexDU7JTMB8GA1UdIwQY
MBaAFEztTHhnQp7gL1zcGvvqpbpxM2AIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAt
MTYwY2RlODhlZDNmLzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83NmQ2ZjEtN2ZmYi00MzAxLTkzMTAtMTYwY2RlODhlZDNm
LzEvVE8xTWVHZENudUF2WE53YS0tcWx1bkV6WUFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf920+aVf
GzF3nb4eiQjgAyrwbP7MTbOngDVMG3Sq5WlL8vTj4vaKGwbmTQD6NhpVyUhuK+ZH
vz8vx1WJl07j2Rcu5TBtNM/39tZlNGv+44GSoCvpDaMF+SCq6MApI9f9OcDjwc1L
x3koBzy4Sh1rkaN6Mq7285tJ+PKWkLw0wIAPE80oWcxor7hHKCt79ywCJTYc0qoe
qV2rsRWPzG2XjwoxWNCDcqf/7am6fPYdph5HakWNQk2TeVhU7QSKxnPYW6MrjuYp
TuMptsmf/QCqxqm+qeEn5UAzT/nfcyAvLSQVgUFOxeFRv4jf5ue9VTJqvE6f1bfU
wWxMkmdJdiRoAA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:27:18 2026 by rpki-client