Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: UvHx+/qosWcThaYYoTSFckil9YFigGp89RbodFzp4eQ=
Subject key identifier: E2:57:EF:21:7C:2E:2C:F5:EE:82:4C:0B:F0:F4:3B:F8:85:5E:CA:E6
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 01A0EDE69D10D6732A9A815DB90A109A9B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1688
Signing time: Tue 29 Sep 2026 16:01:48 +0000
Manifest this update: Tue 29 Sep 2026 16:01:48 +0000
Manifest next update: Wed 30 Sep 2026 16:01:48 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: 5X2xdQzfElgF3zafO63cD95jMFc.roa (hash: t+WketR4iod+dxOduLUjbSJaUEp6hc0nti9zqFInWO4=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: rrYkZCBQX3ahOCh1IP8siO8ze9q/TKepDV2m1YLsisE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:e6:9d:10:d6:73:2a:9a:81:5d:b9:0a:10:9a:9b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Sep 29 16:01:48 2026 GMT
Not After : Sep 30 16:01:48 2026 GMT
Subject: CN=e257ef217c2e2cf5ee824c0bf0f43bf8855ecae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:de:4d:72:d0:2b:a0:84:74:52:de:e0:0c:
59:96:f2:6e:d7:a3:c3:15:11:51:da:ce:de:f8:d8:
0b:df:0f:8f:16:9c:98:fb:c8:7e:ae:2f:9c:b0:0e:
62:e6:41:8d:d0:88:7d:34:0b:f5:cf:5e:df:27:18:
cf:1e:d0:25:f3:79:b6:84:13:f3:10:f8:e5:96:b6:
ca:28:aa:77:0e:cd:fe:87:08:71:00:20:ff:06:ca:
9f:9c:66:00:0c:64:64:b6:21:1f:67:ff:83:e5:13:
56:e5:92:95:e7:62:c6:22:5d:3c:91:03:f2:ee:a3:
c0:34:a3:8b:66:3e:fb:ce:8f:0f:01:43:ee:6d:43:
16:49:a9:ed:a2:28:6c:9d:54:50:29:e2:21:1e:20:
6d:78:e9:32:87:e7:40:32:74:bd:d9:61:da:eb:7d:
5a:8d:11:de:4e:36:01:08:f3:f9:03:a3:ea:60:31:
9e:ad:78:67:4c:75:10:e2:46:01:cb:b8:3a:56:dc:
d3:ce:fe:38:dd:84:dd:0f:a2:f1:e9:47:09:4e:1a:
f2:64:31:2c:88:eb:f7:63:af:ab:e9:ba:18:a8:f4:
38:54:c5:0e:0d:16:ab:c9:86:2b:25:da:3f:8e:19:
08:11:2a:56:16:7f:b4:49:39:f2:6c:91:e8:28:83:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:EF:21:7C:2E:2C:F5:EE:82:4C:0B:F0:F4:3B:F8:85:5E:CA:E6
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ea:6e:f5:22:7f:bf:b9:3e:af:37:4a:ce:9d:e3:12:c3:75:
4e:00:7a:37:7b:9e:5b:98:c2:de:6d:50:ab:42:77:bb:da:85:
1b:09:32:50:29:5d:9e:a0:f7:b0:ef:45:68:ea:fa:71:20:72:
b6:2a:9f:51:9b:7f:9d:cb:78:c8:f0:4d:7b:fa:3c:1a:e1:bf:
39:a2:00:e4:f7:a0:49:8f:80:78:b6:f9:24:63:8b:1b:38:e0:
f7:f6:9e:29:09:b8:e5:d4:e6:4d:a9:56:50:fc:77:29:c5:f2:
8c:ab:b7:8b:b3:18:96:f4:e0:49:8c:16:ca:dc:4d:69:4f:9d:
86:b2:9d:90:f8:64:ca:cd:91:54:e2:63:c0:31:db:d5:8a:21:
6f:7f:e8:60:d2:14:8d:c5:e3:6d:33:06:3f:47:7a:fd:6d:9b:
82:24:a0:4f:e6:0b:0e:ca:e8:07:5e:f5:bf:ec:60:58:fb:d4:
4a:38:1f:0b:05:71:0c:e7:52:66:90:3f:23:1c:29:c5:47:0d:
f2:c1:a6:62:8c:25:12:2e:89:3d:f9:b9:69:72:41:b6:0d:0c:
ce:3b:f0:5c:76:83:26:e9:0b:2c:ac:b4:c5:ca:ce:80:4c:53:
fb:4e:37:81:e2:f1:2f:64:f3:41:72:17:e5:2f:18:d8:72:bb:
ab:1c:99:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDt5p0Q1nMqmoFduQoQmptmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDI1Y2Y1NTAxMzQ0YWM1YWNjMzA3YWJkMGFmMDEzZmFj
NjcwNzMwHhcNMjYwOTI5MTYwMTQ4WhcNMjYwOTMwMTYwMTQ4WjAzMTEwLwYDVQQD
EyhlMjU3ZWYyMTdjMmUyY2Y1ZWU4MjRjMGJmMGY0M2JmODg1NWVjYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGzeTXLQK6CEdFLe4AxZlvJu16PD
FRFR2s7e+NgL3w+PFpyY+8h+ri+csA5i5kGN0Ih9NAv1z17fJxjPHtAl83m2hBPz
EPjllrbKKKp3Ds3+hwhxACD/BsqfnGYADGRktiEfZ/+D5RNW5ZKV52LGIl08kQPy
7qPANKOLZj77zo8PAUPubUMWSantoihsnVRQKeIhHiBteOkyh+dAMnS92WHa631a
jRHeTjYBCPP5A6PqYDGerXhnTHUQ4kYBy7g6VtzTzv443YTdD6Lx6UcJThryZDEs
iOv3Y6+r6boYqPQ4VMUODRaryYYrJdo/jhkIESpWFn+0STnybJHoKINl3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOJX7yF8Liz17oJMC/D0O/iFXsrmMB8GA1UdIwQY
MBaAFLRCXPVQE0SsWswwer0K8BP6xnBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQt
Y2ViOGFiNmQxMTJlLzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YWMwYTItNWM2Yy00MzU3LTk3ZTQtY2ViOGFiNmQxMTJl
LzEvdEVKYzlWQVRSS3hhekRCNnZRcndFX3JHY0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+pu9SJ/
v7k+rzdKzp3jEsN1TgB6N3ueW5jC3m1Qq0J3u9qFGwkyUCldnqD3sO9FaOr6cSBy
tiqfUZt/nct4yPBNe/o8GuG/OaIA5PegSY+AeLb5JGOLGzjg9/aeKQm45dTmTalW
UPx3KcXyjKu3i7MYlvTgSYwWytxNaU+dhrKdkPhkys2RVOJjwDHb1Yohb3/oYNIU
jcXjbTMGP0d6/W2bgiSgT+YLDsroB171v+xgWPvUSjgfCwVxDOdSZpA/IxwpxUcN
8sGmYowlEi6JPfm5aXJBtg0MzjvwXHaDJukLLKy0xcrOgExT+043geLxL2TzQXIX
5S8Y2HK7qxyZ/w==
-----END CERTIFICATE-----
Generated at Wed Sep 30 02:56:29 2026 by rpki-client