Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
File: 1-TmwPxKU69NaOxXWldfpH4y0H6A.mft (raw, json)
Hash identifier: gSoC8TVU4VTarTuzfOkrgM0QRKEluEdAGAnQoJ2GZWU=
Subject key identifier: 02:D8:A3:35:DB:CA:05:66:A9:1D:3D:F0:90:61:82:F7:DE:D2:B9:45
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 01A0D315644D56B4AFF6556CF2C3D1D270E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
Manifest number: 16B9
Signing time: Thu 24 Sep 2026 11:03:09 +0000
Manifest this update: Thu 24 Sep 2026 11:03:09 +0000
Manifest next update: Fri 25 Sep 2026 11:03:09 +0000
Files and hashes: 1: 1-TmwPxKU69NaOxXWldfpH4y0H6A.crl (hash: 3d1D/BA3HXXbJ4yikOOFtvoTxr81IsfFxoruJeJWsug=)
2: fBLAHwUkRrn6HYBRnTV7FYQGNDQ.roa (hash: 2J5IIevOI4AOjVlKsCvjgqwg6VuZoErPwilBziOfEkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:64:4d:56:b4:af:f6:55:6c:f2:c3:d1:d2:70:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Sep 24 11:03:09 2026 GMT
Not After : Sep 25 11:03:09 2026 GMT
Subject: CN=02d8a335dbca0566a91d3df0906182f7ded2b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:c2:1a:78:34:b1:f5:fd:ad:d0:a6:c7:a0:
d6:b1:21:62:c6:91:e5:e3:65:91:f5:fd:50:3d:2d:
72:3a:66:5e:db:85:71:1c:07:bd:3b:7a:f7:c3:d0:
2e:c9:43:3d:35:2f:e3:2a:ea:17:d3:93:ca:59:90:
dc:73:78:3b:96:2d:6b:c3:18:e0:09:e1:99:0a:a5:
a5:9d:f5:91:dc:07:2a:fb:b9:71:66:d1:e0:a9:d7:
7b:45:9f:d9:90:dd:dd:27:d7:e9:66:ca:71:2b:24:
d2:69:bd:25:bd:71:06:68:45:4e:3b:76:8f:1e:3d:
6f:5a:c0:e2:ee:9a:4e:ad:80:c6:72:59:b0:c9:6e:
f0:eb:99:42:c1:65:ae:c9:6b:10:9e:d6:3a:ed:8e:
c4:0a:18:9e:42:fd:42:35:10:79:89:36:cb:c7:a2:
e6:04:77:14:01:bd:75:d5:c0:fa:4b:ca:0b:b3:3a:
ab:16:fa:ee:fe:cc:90:e7:bb:4f:db:81:c0:81:74:
d8:4c:45:9b:50:ad:15:f9:84:32:e6:4c:72:10:6a:
d5:d9:22:39:87:b9:a8:29:c5:27:56:06:e0:53:cc:
d8:b7:42:ff:d3:99:af:54:fb:86:83:88:c7:c1:5d:
fe:b4:3a:70:df:5d:1d:72:af:74:c7:6d:2c:1d:f8:
8f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:A3:35:DB:CA:05:66:A9:1D:3D:F0:90:61:82:F7:DE:D2:B9:45
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:52:61:9d:f7:bd:71:f9:cd:67:f9:82:c2:ae:b2:5a:b3:9a:
ff:5a:e7:40:23:b3:1e:0e:10:53:3d:62:a9:27:38:b3:da:00:
a6:dd:15:6f:4f:cd:0b:5d:03:b3:c6:26:42:2c:c2:83:b3:6c:
a9:1c:9e:b8:88:ba:d1:76:02:f8:c1:af:28:1e:b8:fc:dd:e7:
39:ae:18:97:f2:19:8e:b3:2b:1a:2a:94:84:f6:2b:4a:0a:09:
fb:cb:30:bf:90:8a:2e:53:59:27:55:92:e2:0c:42:72:02:24:
83:2f:71:a5:80:d8:22:12:ee:30:f6:4d:38:63:a4:71:1f:2f:
87:e5:7a:7c:d1:3a:5e:96:04:6e:97:2c:19:cf:9a:e2:19:85:
d5:bf:60:71:0e:b2:7b:78:90:0e:0a:b8:a6:3a:a0:f1:dc:a0:
86:8e:09:0e:4b:29:58:0d:d3:ff:9a:67:b9:0e:f0:e5:0f:53:
89:7b:46:6d:69:06:d1:de:08:a3:74:00:ca:03:87:3d:b1:49:
f5:c2:65:e0:a7:3f:09:8e:41:00:53:68:52:2d:66:32:56:5f:
2f:4d:2c:3b:8c:58:05:85:3f:8e:a6:42:88:5e:be:90:01:c9:
a0:ce:9b:96:8b:3a:58:e5:ce:2f:eb:4a:06:2f:c8:cc:cc:9c:
d3:35:94:fc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDTFWRNVrSv9lVs8sPR0nDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MzliMDNmMTI5NGViZDM1YTNiMTVkNjk1ZDdlOTFmOGNi
NDFmYTAwHhcNMjYwOTI0MTEwMzA5WhcNMjYwOTI1MTEwMzA5WjAzMTEwLwYDVQQD
EygwMmQ4YTMzNWRiY2EwNTY2YTkxZDNkZjA5MDYxODJmN2RlZDJiOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DzCGng0sfX9rdCmx6DWsSFixpHl
42WR9f1QPS1yOmZe24VxHAe9O3r3w9AuyUM9NS/jKuoX05PKWZDcc3g7li1rwxjg
CeGZCqWlnfWR3Acq+7lxZtHgqdd7RZ/ZkN3dJ9fpZspxKyTSab0lvXEGaEVOO3aP
Hj1vWsDi7ppOrYDGclmwyW7w65lCwWWuyWsQntY67Y7EChieQv1CNRB5iTbLx6Lm
BHcUAb111cD6S8oLszqrFvru/syQ57tP24HAgXTYTEWbUK0V+YQy5kxyEGrV2SI5
h7moKcUnVgbgU8zYt0L/05mvVPuGg4jHwV3+tDpw310dcq90x20sHfiPYwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFALYozXbygVmqR098JBhgvfe0rlFMB8GA1UdIwQY
MBaAFPk5sD8SlOvTWjsV1pXX6R+MtB+gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1UbXdQeEtVNjlOYU94WFdsZGZwSDR5MEg2QS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTcvMGM5ZGU4LWNlZjItNGQ4ZC1hOTIw
LTc2NTk0YTE5MTc3Yy8xLzEtVG13UHhLVTY5TmFPeFhXbGRmcEg0eTBINkEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E3LzBjOWRlOC1jZWYyLTRkOGQtYTkyMC03NjU5NGExOTE3
N2MvMS8xLVRtd1B4S1U2OU5hT3hYV2xkZnBINHkwSDZBLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlJh
nfe9cfnNZ/mCwq6yWrOa/1rnQCOzHg4QUz1iqSc4s9oApt0Vb0/NC10Ds8YmQizC
g7NsqRyeuIi60XYC+MGvKB64/N3nOa4Yl/IZjrMrGiqUhPYrSgoJ+8swv5CKLlNZ
J1WS4gxCcgIkgy9xpYDYIhLuMPZNOGOkcR8vh+V6fNE6XpYEbpcsGc+a4hmF1b9g
cQ6ye3iQDgq4pjqg8dygho4JDkspWA3T/5pnuQ7w5Q9TiXtGbWkG0d4Io3QAygOH
PbFJ9cJl4Kc/CY5BAFNoUi1mMlZfL00sO4xYBYU/jqZCiF6+kAHJoM6blos6WOXO
L+tKBi/IzMyc0zWU/A==
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:10:10 2026 by rpki-client