Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: sIzwmzSknIZ2dyoG0uDs59iRQ5Gig/vC4Ldh1eXK+vc=
Subject key identifier: E7:19:DB:6F:FE:58:5F:C2:F1:3B:ED:59:52:FD:43:98:14:2F:74:9C
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 01A0F8D7FE995D262DE73439F64A3CD39911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 14AA
Signing time: Thu 01 Oct 2026 19:01:39 +0000
Manifest this update: Thu 01 Oct 2026 19:01:39 +0000
Manifest next update: Fri 02 Oct 2026 19:01:39 +0000
Files and hashes: 1: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (hash: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ=)
2: 9aSqAQcmoN2g2ZBcTNHTApttx4g.asa (hash: Kb0ToC2/MP2f01Ifkul/qi5eKO/zR/3pP3dFhvYFaR8=)
3: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: 6aqZMvWkei4zwYAz5BL6ccRo8zRYfcgJV/yR5ZHSOYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:d7:fe:99:5d:26:2d:e7:34:39:f6:4a:3c:d3:99:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Oct 1 19:01:39 2026 GMT
Not After : Oct 2 19:01:39 2026 GMT
Subject: CN=e719db6ffe585fc2f13bed5952fd4398142f749c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:7e:a1:04:e7:48:53:5e:c3:85:d5:c3:4a:
07:a9:2e:58:57:ed:d2:01:ab:10:01:3b:b3:b0:29:
ce:e0:46:36:b3:2e:0e:44:7d:57:36:b7:b4:33:85:
dc:cb:2d:60:ae:30:62:26:1e:8a:55:18:fa:ef:12:
ab:61:b1:5d:d4:18:d3:f5:b3:cc:fe:70:2c:e1:7e:
95:2d:d4:82:83:a7:89:0f:5f:b6:75:54:4d:d7:58:
99:1f:46:48:b0:f5:ee:13:87:6d:6f:e5:4a:57:7a:
d1:a6:c6:60:78:e7:51:fe:20:96:5a:6d:b3:47:90:
1f:37:6e:a1:ed:ce:fe:2c:5c:bb:f8:b7:22:37:e5:
6b:ec:75:9c:f2:a6:6c:d3:6d:30:d4:26:49:cc:13:
1b:62:84:3e:2a:17:6d:45:6a:c8:58:40:7d:90:bd:
76:5c:d1:e5:26:7e:bc:b2:df:7d:f7:42:93:f6:de:
98:0b:e3:06:7e:a8:82:4c:46:42:ef:0b:c1:8d:c4:
5d:1d:28:52:38:37:a9:34:e4:23:2d:7f:73:a3:63:
b8:bd:ca:28:be:4c:ce:93:8c:29:2d:de:4b:32:4c:
29:2a:b8:64:a3:90:a9:51:80:0d:48:a1:6c:13:6d:
3b:77:38:93:7a:5a:e9:05:89:a6:fc:63:61:4e:a0:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:DB:6F:FE:58:5F:C2:F1:3B:ED:59:52:FD:43:98:14:2F:74:9C
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:d0:a1:08:87:fa:4e:99:1a:9e:58:ae:e5:df:7d:d7:91:
ea:fd:b9:77:c5:2c:bf:45:76:eb:b1:91:a1:29:8c:53:cf:f1:
7f:93:50:a4:65:f4:44:38:24:41:d1:22:5f:12:82:1e:38:ad:
4f:55:f6:f4:d5:e2:58:10:95:2b:c2:8a:8e:b7:32:f4:be:ff:
33:27:cf:b4:82:78:ad:a8:ba:01:ac:7d:e0:51:1c:f7:cd:3a:
21:b4:57:3f:68:96:93:7f:7a:41:11:23:ba:cc:0e:b4:33:e3:
7b:66:fa:0c:e5:4c:68:20:ba:b3:9c:45:83:fe:e6:c8:eb:22:
0e:0c:e4:4c:5f:41:4b:b3:aa:7f:32:db:ab:74:84:8e:b2:35:
d8:f7:48:10:a2:b7:b7:a1:d0:55:7a:8f:08:52:40:52:9c:26:
53:ae:68:06:6c:d5:89:3b:a1:1d:59:69:f7:dc:8a:af:cf:9b:
fa:4a:be:1a:95:de:ad:05:05:61:31:35:a2:b4:ed:21:b4:bd:
68:b3:17:75:19:e1:70:a7:1e:e0:47:e9:88:2a:0e:89:44:21:
3a:3a:1c:7e:50:77:00:9f:58:de:56:cd:21:bf:51:6d:c1:74:
ac:38:a4:3a:ed:36:b2:92:04:bc:35:b0:97:ef:6a:0a:86:bd:
9d:96:6c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD41/6ZXSYt5zQ59ko805kRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4
NGQ2NjAwHhcNMjYxMDAxMTkwMTM5WhcNMjYxMDAyMTkwMTM5WjAzMTEwLwYDVQQD
EyhlNzE5ZGI2ZmZlNTg1ZmMyZjEzYmVkNTk1MmZkNDM5ODE0MmY3NDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFl+oQTnSFNew4XVw0oHqS5YV+3S
AasQATuzsCnO4EY2sy4ORH1XNre0M4Xcyy1grjBiJh6KVRj67xKrYbFd1BjT9bPM
/nAs4X6VLdSCg6eJD1+2dVRN11iZH0ZIsPXuE4dtb+VKV3rRpsZgeOdR/iCWWm2z
R5AfN26h7c7+LFy7+LciN+Vr7HWc8qZs020w1CZJzBMbYoQ+KhdtRWrIWEB9kL12
XNHlJn68st9990KT9t6YC+MGfqiCTEZC7wvBjcRdHShSODepNOQjLX9zo2O4vcoo
vkzOk4wpLd5LMkwpKrhko5CpUYANSKFsE207dziTelrpBYmm/GNhTqCuawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcZ22/+WF/C8TvtWVL9Q5gUL3ScMB8GA1UdIwQY
MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct
YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0
LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiLQoQiH
+k6ZGp5YruXffdeR6v25d8Usv0V267GRoSmMU8/xf5NQpGX0RDgkQdEiXxKCHjit
T1X29NXiWBCVK8KKjrcy9L7/MyfPtIJ4rai6Aax94FEc9806IbRXP2iWk396QREj
uswOtDPje2b6DOVMaCC6s5xFg/7myOsiDgzkTF9BS7OqfzLbq3SEjrI12PdIEKK3
t6HQVXqPCFJAUpwmU65oBmzViTuhHVlp99yKr8+b+kq+GpXerQUFYTE1orTtIbS9
aLMXdRnhcKce4EfpiCoOiUQhOjocflB3AJ9Y3lbNIb9RbcF0rDikOu02spIEvDWw
l+9qCoa9nZZsWA==
-----END CERTIFICATE-----
Generated at Fri Oct 2 08:34:19 2026 by rpki-client