Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
File: tEORSkjl2uWnVrHjuPvkN-4Niww.mft (raw, json)
Hash identifier: 7CrNZ0mfYnbfxFYDcaCw2/CAX2HE1PuPhHJPjns2CBs=
Subject key identifier: 3F:27:98:C3:3B:0E:15:BA:02:92:A8:69:96:95:6B:36:4C:3E:A3:B2
Authority key identifier: B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
Certificate issuer: /CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Certificate serial: 01A0FF47D310136AB9418B9761CC4888BA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 01:01:32 +0000
Manifest this update: Sat 03 Oct 2026 01:01:32 +0000
Manifest next update: Sun 04 Oct 2026 01:01:32 +0000
Files and hashes: 1: 49d3lo0t_8Ax5cbwJrY_Tha0ERQ.roa (hash: qoFvjnjBe3Z9lf3XdiqiaeG3oM6pWV6dcIPmH4VpFRw=)
2: 7ufFK9wMYQIlfPF5mBmnlqE81ZE.roa (hash: byv9bKYSFyW281U6XJiGXV1al8HvRRvhSL2jHGqxWtU=)
3: gdZbcfQhj6CVyMJsPQMT1BZmtdM.roa (hash: X/T0yNnwui4YvzGKyxtkJ10/UIQIZbvCIKZsavRhgn8=)
4: hckySekDjcPjJjmCb8xV-0niibA.roa (hash: rABvuPwZ4k/dR/LQvlCJNpnmkfZ6RaaAKF1LFAoY6XM=)
5: tEORSkjl2uWnVrHjuPvkN-4Niww.crl (hash: UfcTS1dq/bWAHeGXbqcJg63rSkezJH0tFLTSSA+IzHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:d3:10:13:6a:b9:41:8b:97:61:cc:48:88:ba:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b443914a48e5dae5a756b1e3b8fbe437ee0d8b0c
Validity
Not Before: Oct 3 01:01:32 2026 GMT
Not After : Oct 4 01:01:32 2026 GMT
Subject: CN=3f2798c33b0e15ba0292a86996956b364c3ea3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:bc:8c:72:12:15:3c:80:ee:48:d9:c5:d4:
00:83:ca:77:5b:b0:84:c8:87:5b:27:2a:9f:99:d9:
23:88:86:27:4d:20:1e:72:b0:6a:27:96:05:88:05:
ec:67:98:33:dc:bb:53:5d:41:71:a9:0f:98:71:68:
21:02:4c:d3:5b:5b:d7:1a:fd:b1:98:60:23:cf:8d:
23:d2:41:3f:3c:41:8e:aa:5c:7f:d7:3f:fe:1b:50:
20:5b:b4:ee:a2:a0:a2:2e:a0:4e:b9:af:87:d3:0b:
3a:f8:57:3e:74:e0:d6:c4:c3:9f:e7:dd:ce:d1:a2:
a0:e2:f9:5c:0b:07:cb:45:d6:94:ee:08:24:a4:8c:
54:39:03:95:be:8c:a2:14:f6:aa:47:ab:49:6d:98:
95:a3:93:53:30:ae:df:39:02:ae:d1:31:f3:a6:58:
41:4b:be:8d:06:5e:26:3f:6b:de:ee:f7:ba:9a:b9:
64:e3:86:89:3a:4e:1c:30:ef:8d:b0:60:de:9a:5d:
a4:6f:88:16:0b:54:3a:01:54:25:ad:12:06:2c:8d:
ca:27:60:e9:52:00:10:72:15:87:d3:05:b5:7a:09:
c2:8d:91:f3:eb:19:8a:e8:9a:2f:6a:49:9b:ad:aa:
53:18:f2:6c:dc:68:1b:54:0d:06:56:aa:87:76:54:
24:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:27:98:C3:3B:0E:15:BA:02:92:A8:69:96:95:6B:36:4C:3E:A3:B2
X509v3 Authority Key Identifier:
keyid:B4:43:91:4A:48:E5:DA:E5:A7:56:B1:E3:B8:FB:E4:37:EE:0D:8B:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEORSkjl2uWnVrHjuPvkN-4Niww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/6920d2-a7a6-41a5-96e0-314ef746d8a6/1/tEORSkjl2uWnVrHjuPvkN-4Niww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:62:40:42:91:ff:76:cb:16:a9:97:2b:77:91:01:bf:1c:8e:
93:cb:ec:b1:5c:1b:2c:e8:74:56:8c:83:08:62:38:85:a5:39:
60:77:04:80:44:29:43:03:e4:d4:82:16:84:9a:b7:0f:5e:40:
5f:2d:c1:bd:9f:8f:1d:41:8f:00:25:99:ff:13:1d:63:04:56:
3a:55:de:e2:9c:ad:e8:51:d6:dd:9d:67:7f:47:8f:f2:6f:88:
13:f5:ce:2a:a6:48:db:bd:35:8e:0f:4a:60:4b:6d:f4:7f:f3:
f3:57:fa:3e:a7:00:30:40:35:6d:c8:b4:90:a7:e2:77:3a:8c:
de:54:00:cd:81:4b:a6:3d:43:c7:6c:44:66:5b:42:d0:68:ec:
63:70:a3:97:a1:f3:dc:22:1f:48:f0:f2:75:f5:6e:d1:8e:d2:
a6:61:af:1c:84:9d:a0:86:ce:49:4a:39:e6:9f:80:13:19:be:
1b:5a:5f:e5:d2:d2:55:00:49:fd:fa:81:b3:b9:68:c7:dc:8a:
7f:5a:fb:75:ff:2e:c2:aa:36:73:73:2b:c5:72:59:87:00:63:
5a:ad:c4:31:12:30:e1:15:8e:70:ec:fa:cf:c1:62:28:4e:ad:
ec:94:fc:c1:f9:a8:fe:03:19:1e:f7:e7:46:a2:37:dc:a6:3f:
65:ad:4e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD/R9MQE2q5QYuXYcxIiLqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NDM5MTRhNDhlNWRhZTVhNzU2YjFlM2I4ZmJlNDM3ZWUw
ZDhiMGMwHhcNMjYxMDAzMDEwMTMyWhcNMjYxMDA0MDEwMTMyWjAzMTEwLwYDVQQD
EygzZjI3OThjMzNiMGUxNWJhMDI5MmE4Njk5Njk1NmIzNjRjM2VhM2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6T68jHISFTyA7kjZxdQAg8p3W7CE
yIdbJyqfmdkjiIYnTSAecrBqJ5YFiAXsZ5gz3LtTXUFxqQ+YcWghAkzTW1vXGv2x
mGAjz40j0kE/PEGOqlx/1z/+G1AgW7TuoqCiLqBOua+H0ws6+Fc+dODWxMOf593O
0aKg4vlcCwfLRdaU7ggkpIxUOQOVvoyiFPaqR6tJbZiVo5NTMK7fOQKu0THzplhB
S76NBl4mP2ve7ve6mrlk44aJOk4cMO+NsGDeml2kb4gWC1Q6AVQlrRIGLI3KJ2Dp
UgAQchWH0wW1egnCjZHz6xmK6JovakmbrapTGPJs3GgbVA0GVqqHdlQkLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8nmMM7DhW6ApKoaZaVazZMPqOyMB8GA1UdIwQY
MBaAFLRDkUpI5drlp1ax47j75DfuDYsMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAt
MzE0ZWY3NDZkOGE2LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC82OTIwZDItYTdhNi00MWE1LTk2ZTAtMzE0ZWY3NDZkOGE2
LzEvdEVPUlNramwydVduVnJIanVQdmtOLTROaXd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamJAQpH/
dssWqZcrd5EBvxyOk8vssVwbLOh0VoyDCGI4haU5YHcEgEQpQwPk1IIWhJq3D15A
Xy3BvZ+PHUGPACWZ/xMdYwRWOlXe4pyt6FHW3Z1nf0eP8m+IE/XOKqZI2701jg9K
YEtt9H/z81f6PqcAMEA1bci0kKfidzqM3lQAzYFLpj1Dx2xEZltC0GjsY3Cjl6Hz
3CIfSPDydfVu0Y7SpmGvHISdoIbOSUo55p+AExm+G1pf5dLSVQBJ/fqBs7lox9yK
f1r7df8uwqo2c3MrxXJZhwBjWq3EMRIw4RWOcOz6z8FiKE6t7JT8wfmo/gMZHvfn
RqI33KY/Za1OFQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 13:04:09 2026 by rpki-client