Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File: T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier: Ch5cEohbT+ciKgA7YxVri36gBlzeEfRSygFjxcYmUUs=
Subject key identifier: 24:D5:D4:E7:B5:34:EB:BD:57:AF:91:3B:51:98:88:4B:A4:01:05:C3
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer: /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial: 01A0CAEBB0DFA13B3CE34579B303AE30C3A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number: 0A0C
Signing time: Tue 22 Sep 2026 21:00:38 +0000
Manifest this update: Tue 22 Sep 2026 21:00:38 +0000
Manifest next update: Wed 23 Sep 2026 21:00:38 +0000
Files and hashes: 1: MOJaIJywd4otTZyKbZejB0v6ay4.roa (hash: rNI1pa9edpkFYBr17tGN9Tys1Z0tTlj1MmWq7ZO4iao=)
2: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: p2mHJAF0orgOt8Qr7hfiGq4RKpKU5yojzwFx/jXq4qI=)
3: mfXbQXByPJPp7zX33-P_nEyA7pw.asa (hash: vbrHO7MLkLBiT3RBDfJV+Hh6ozoURTvz1tPkV6hsSa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:b0:df:a1:3b:3c:e3:45:79:b3:03:ae:30:c3:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Validity
Not Before: Sep 22 21:00:38 2026 GMT
Not After : Sep 23 21:00:38 2026 GMT
Subject: CN=24d5d4e7b534ebbd57af913b5198884ba40105c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:ed:55:e4:88:c1:23:5b:b4:3e:6c:48:1a:
d3:e9:2f:a9:9a:8e:4f:14:00:6b:6f:e3:d6:9d:c9:
26:ee:a8:03:de:a9:4e:4b:ee:bc:ee:2e:69:e0:22:
72:98:7b:b5:51:fd:01:f8:29:e6:32:52:75:33:c3:
5c:d3:a2:55:fc:62:2a:21:8c:15:1d:cd:f9:ef:c5:
08:73:ec:de:ea:10:37:c2:54:3f:65:b4:fb:81:12:
22:9d:f0:cd:8b:f2:5c:fa:3a:30:df:0c:57:f8:6d:
57:98:2c:a6:9e:17:7f:e2:9b:76:6d:f3:45:59:08:
a7:4d:ef:11:14:07:0a:8c:1a:2a:a4:0d:12:76:3a:
b3:8f:6f:65:08:6d:f3:cb:b8:c7:4e:95:df:e7:14:
91:89:25:0f:55:f4:fd:96:f9:37:90:ce:aa:fc:57:
3c:e8:f2:c7:fd:1a:8a:77:00:3c:6c:60:a7:fc:a4:
bb:ea:7e:d5:95:cb:06:43:65:9f:44:c1:75:9d:37:
8f:05:00:0f:fb:7d:5d:f7:63:cf:c6:59:d2:e2:83:
c0:5f:51:a6:7c:e7:e1:45:a5:d0:e1:82:bd:6b:74:
dc:88:26:b8:76:87:27:3c:39:dd:b7:ef:51:69:42:
92:9e:54:24:43:ff:b6:77:b6:06:56:f3:71:5a:8e:
bd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:D4:E7:B5:34:EB:BD:57:AF:91:3B:51:98:88:4B:A4:01:05:C3
X509v3 Authority Key Identifier:
keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:69:df:76:88:ae:df:29:3f:d9:22:4c:36:b3:9e:63:e0:8f:
db:7d:24:b6:13:c7:86:6e:73:6b:75:97:08:62:95:42:f2:88:
c1:93:57:c8:5f:da:3b:38:77:0c:0f:ca:c5:4a:6d:25:b6:de:
c1:28:bf:44:36:01:15:58:cb:30:f7:10:5c:5e:4f:8d:a0:44:
bc:73:2c:84:56:cb:a8:f3:bb:f0:69:7b:a5:b8:dd:8c:b5:79:
70:66:cf:1e:72:61:e5:80:3e:00:19:f2:c6:af:4e:a3:fe:ae:
62:69:23:f0:73:d2:a5:f8:5f:3d:e6:e6:01:9e:c9:1a:c4:be:
61:18:28:ba:09:9e:a7:ff:71:12:aa:a8:b0:bf:6a:80:bf:5e:
d0:d0:f3:1e:27:4f:b7:28:72:7c:ca:e7:60:22:31:fd:5c:42:
ec:04:25:cc:70:98:6e:6f:fe:97:aa:77:94:9d:1a:17:cd:be:
58:41:3b:6a:16:97:24:06:89:e9:b4:42:81:a6:30:5e:c0:2f:
7e:9e:dd:9d:df:00:9a:94:87:ad:22:52:48:17:7c:e1:ff:6f:
2d:7d:4f:be:09:72:d8:3b:dc:08:05:06:fd:c8:d0:bd:53:b9:
9b:41:87:c7:a2:3b:4c:f6:d6:b7:0d:31:0e:1a:dc:8a:6c:31:
42:81:96:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDK67DfoTs840V5swOuMMOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYjY1NzZlY2RhMjUyNDZkZjcwZDdhNzJlMWNmZmZhZDg4
OGVhM2IwHhcNMjYwOTIyMjEwMDM4WhcNMjYwOTIzMjEwMDM4WjAzMTEwLwYDVQQD
EygyNGQ1ZDRlN2I1MzRlYmJkNTdhZjkxM2I1MTk4ODg0YmE0MDEwNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi7tVeSIwSNbtD5sSBrT6S+pmo5P
FABrb+PWnckm7qgD3qlOS+687i5p4CJymHu1Uf0B+CnmMlJ1M8Nc06JV/GIqIYwV
Hc3578UIc+ze6hA3wlQ/ZbT7gRIinfDNi/Jc+jow3wxX+G1XmCymnhd/4pt2bfNF
WQinTe8RFAcKjBoqpA0Sdjqzj29lCG3zy7jHTpXf5xSRiSUPVfT9lvk3kM6q/Fc8
6PLH/RqKdwA8bGCn/KS76n7VlcsGQ2WfRMF1nTePBQAP+31d92PPxlnS4oPAX1Gm
fOfhRaXQ4YK9a3TciCa4docnPDndt+9RaUKSnlQkQ/+2d7YGVvNxWo693QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTV1Oe1NOu9V6+RO1GYiEukAQXDMB8GA1UdIwQY
MBaAFE+2V27NolJG33DXpy4c//rYiOo7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81MDFlYmYtNWZmZC00Y2RhLWE2NmQt
MDYyZDcwZTNhYTIzLzEvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81MDFlYmYtNWZmZC00Y2RhLWE2NmQtMDYyZDcwZTNhYTIz
LzEvVDdaWGJzMmlVa2JmY05lbkxoel8tdGlJNmpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGnfdoiu
3yk/2SJMNrOeY+CP230kthPHhm5za3WXCGKVQvKIwZNXyF/aOzh3DA/KxUptJbbe
wSi/RDYBFVjLMPcQXF5PjaBEvHMshFbLqPO78Gl7pbjdjLV5cGbPHnJh5YA+ABny
xq9Oo/6uYmkj8HPSpfhfPebmAZ7JGsS+YRgougmep/9xEqqosL9qgL9e0NDzHidP
tyhyfMrnYCIx/VxC7AQlzHCYbm/+l6p3lJ0aF82+WEE7ahaXJAaJ6bRCgaYwXsAv
fp7dnd8AmpSHrSJSSBd84f9vLX1Pvgly2DvcCAUG/cjQvVO5m0GHx6I7TPbWtw0x
DhrcimwxQoGWlw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:52:32 2026 by rpki-client