Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
File: TtDR6dtwOHtHkQsCFmwVFVR5now.mft (raw, json)
Hash identifier: vsCriKc3y2/YH4iGDG/KthstFugaqnob/Pn7c0Mbs0Y=
Subject key identifier: 9C:4B:91:A9:D1:AC:9A:48:E8:0D:A7:7D:29:F5:A4:94:E1:E3:6E:72
Authority key identifier: 4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
Certificate issuer: /CN=4ed0d1e9db70387b47910b02166c151554799e8c
Certificate serial: 01A0D200DFE18130D1DCAE02A65529D68ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:01:07 +0000
Manifest this update: Thu 24 Sep 2026 06:01:07 +0000
Manifest next update: Fri 25 Sep 2026 06:01:07 +0000
Files and hashes: 1: GarD_CcyC8vH0Ew6FZexXJqsz3o.roa (hash: +xW0rSQLKtAW1Hp3b5Pv8qHOc3WB4PYX3/XibxiP1hA=)
2: TtDR6dtwOHtHkQsCFmwVFVR5now.crl (hash: eqiwSaq42mvtDelIwtt0aDAngvpPRUJejLVuKhEFWPw=)
3: br6axYGXcxv_9-Dchpg7P4DBzJE.roa (hash: 9eR+zwavNrHlgbbzIncH+OZak7hXd7F3p0WzOsUw9aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:df:e1:81:30:d1:dc:ae:02:a6:55:29:d6:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed0d1e9db70387b47910b02166c151554799e8c
Validity
Not Before: Sep 24 06:01:07 2026 GMT
Not After : Sep 25 06:01:07 2026 GMT
Subject: CN=9c4b91a9d1ac9a48e80da77d29f5a494e1e36e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7e:ae:a7:62:84:8c:28:c3:c3:dc:13:58:54:
c3:af:03:0f:ba:67:0a:19:85:46:3a:86:b0:db:54:
91:ce:ee:8a:2c:e1:eb:8d:52:74:56:5e:e1:98:54:
fb:38:02:1f:99:17:ab:77:7d:41:bf:1d:f5:ea:5b:
b1:92:17:61:22:d9:40:19:07:96:8c:6b:8a:97:74:
87:da:8f:e4:68:90:ac:fa:19:c7:57:63:bf:d0:ee:
08:a4:12:dc:d6:6a:b6:28:74:2c:02:cd:46:38:55:
1f:79:a5:4f:b8:03:ba:cd:ad:28:6a:27:1c:bb:7e:
f2:2d:06:b5:71:d6:32:0f:58:01:36:2d:65:f5:07:
51:cd:45:50:91:ac:1f:99:5a:09:48:c1:03:41:9c:
fb:dd:38:8c:d1:d5:11:82:c0:3a:b8:c7:6a:01:bb:
0c:03:85:f5:50:8c:17:5a:f3:ed:f0:dc:30:a4:71:
4a:da:1f:b0:25:ff:63:9e:35:73:4c:65:56:d0:1a:
1b:63:e9:f9:24:59:bb:db:06:cc:14:1e:86:bd:82:
80:69:20:a6:6c:e6:1b:b5:fd:da:04:2a:00:c6:39:
2a:2e:5e:7f:50:05:df:5b:09:c4:a2:20:33:4a:ff:
25:a6:7b:5c:6e:6b:38:89:3f:b3:05:2d:28:84:96:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4B:91:A9:D1:AC:9A:48:E8:0D:A7:7D:29:F5:A4:94:E1:E3:6E:72
X509v3 Authority Key Identifier:
keyid:4E:D0:D1:E9:DB:70:38:7B:47:91:0B:02:16:6C:15:15:54:79:9E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDR6dtwOHtHkQsCFmwVFVR5now.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/TtDR6dtwOHtHkQsCFmwVFVR5now.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5b:5d:cd:77:ec:20:4a:f9:3f:e4:27:7e:7f:18:0f:e2:9a:
d1:40:1e:b1:87:94:37:f7:07:4e:6c:06:bb:d0:af:08:56:91:
35:70:fa:60:73:3f:54:e8:20:9a:44:9b:cd:2e:d8:b9:5a:92:
f7:d6:35:f2:b7:77:e9:b2:f8:94:e8:21:9f:d6:0c:f0:3c:56:
72:38:e6:5b:11:f3:e0:1d:dd:f7:e8:ee:af:30:c5:f9:3b:22:
28:76:3a:34:a7:a1:d2:a1:9d:49:10:79:79:84:66:34:43:e5:
d6:23:93:27:82:02:d2:3a:08:9e:6b:ba:6b:9b:f5:de:d8:08:
d2:79:2b:17:5e:db:a7:1c:c9:ad:88:49:de:51:07:28:d4:a8:
b0:08:ac:8c:07:88:65:d6:73:a6:21:ae:71:31:ed:2e:f6:91:
37:ea:c9:b1:6c:e6:70:85:0b:5f:e5:4e:52:17:ed:1c:3f:bb:
0e:f4:4c:74:47:33:46:ca:66:d2:54:64:9c:42:28:1b:d5:39:
e3:7e:55:cc:ee:26:f0:e7:d7:4b:6b:89:78:d2:e5:6e:93:ad:
bc:d3:23:43:57:3f:96:1d:85:bb:fa:a6:72:56:9a:2a:f4:56:
a4:77:13:1e:1a:67:52:a2:ea:42:07:6d:31:5e:00:62:99:0c:
1c:2f:c8:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAN/hgTDR3K4CplUp1ordMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZDBkMWU5ZGI3MDM4N2I0NzkxMGIwMjE2NmMxNTE1NTQ3
OTllOGMwHhcNMjYwOTI0MDYwMTA3WhcNMjYwOTI1MDYwMTA3WjAzMTEwLwYDVQQD
Eyg5YzRiOTFhOWQxYWM5YTQ4ZTgwZGE3N2QyOWY1YTQ5NGUxZTM2ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H6up2KEjCjDw9wTWFTDrwMPumcK
GYVGOoaw21SRzu6KLOHrjVJ0Vl7hmFT7OAIfmRerd31Bvx316luxkhdhItlAGQeW
jGuKl3SH2o/kaJCs+hnHV2O/0O4IpBLc1mq2KHQsAs1GOFUfeaVPuAO6za0oaicc
u37yLQa1cdYyD1gBNi1l9QdRzUVQkawfmVoJSMEDQZz73TiM0dURgsA6uMdqAbsM
A4X1UIwXWvPt8NwwpHFK2h+wJf9jnjVzTGVW0BobY+n5JFm72wbMFB6GvYKAaSCm
bOYbtf3aBCoAxjkqLl5/UAXfWwnEoiAzSv8lpntcbms4iT+zBS0ohJbHZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxLkanRrJpI6A2nfSn1pJTh425yMB8GA1UdIwQY
MBaAFE7Q0enbcDh7R5ELAhZsFRVUeZ6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt
NGNjNDBmZmQ3OTZkLzEvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk
LzEvVHREUjZkdHdPSHRIa1FzQ0Ztd1ZGVlI1bm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1tdzXfs
IEr5P+Qnfn8YD+Ka0UAesYeUN/cHTmwGu9CvCFaRNXD6YHM/VOggmkSbzS7YuVqS
99Y18rd36bL4lOghn9YM8DxWcjjmWxHz4B3d9+jurzDF+TsiKHY6NKeh0qGdSRB5
eYRmNEPl1iOTJ4IC0joInmu6a5v13tgI0nkrF17bpxzJrYhJ3lEHKNSosAisjAeI
ZdZzpiGucTHtLvaRN+rJsWzmcIULX+VOUhftHD+7DvRMdEczRspm0lRknEIoG9U5
435VzO4m8OfXS2uJeNLlbpOtvNMjQ1c/lh2Fu/qmclaaKvRWpHcTHhpnUqLqQgdt
MV4AYpkMHC/IMA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 15:35:55 2026 by rpki-client