Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
File: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft (raw, json)
Hash identifier: MnYk4CBAHTrDUGAlRvp2NYPAruiHo/bsKSU8xt9ERRE=
Subject key identifier: EE:22:80:D6:B0:4E:D5:E2:E2:CC:8D:10:86:CF:1E:0D:20:0E:6E:F8
Authority key identifier: AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
Certificate issuer: /CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Certificate serial: 01A0F1C38FA8F28417DD727E810A4CA18B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
Manifest number: 1313
Signing time: Wed 30 Sep 2026 10:02:00 +0000
Manifest this update: Wed 30 Sep 2026 10:02:00 +0000
Manifest next update: Thu 01 Oct 2026 10:02:00 +0000
Files and hashes: 1: DXKA0kXE0N5ZtPOR2Oy4LAcB_4A.roa (hash: Sj3LYG5kwveQsf1vohBBwmgJI5eBDcD/U3wifQsq2hI=)
2: rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl (hash: Ckvr4Y45S7dgVDjJHchCJWuY/m8yXOcSv4g5aNgAcAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c3:8f:a8:f2:84:17:dd:72:7e:81:0a:4c:a1:8b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad367bc19f066996490a206674c8da8f5ed2cd0e
Validity
Not Before: Sep 30 10:02:00 2026 GMT
Not After : Oct 1 10:02:00 2026 GMT
Subject: CN=ee2280d6b04ed5e2e2cc8d1086cf1e0d200e6ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:35:73:10:ec:49:af:db:18:00:1f:b9:9d:ca:
48:91:f5:9c:33:89:d6:ba:b6:76:12:4e:dd:56:28:
71:7e:ab:95:17:70:e4:b7:3b:ee:3d:68:71:0c:20:
2f:0a:0a:6f:b0:fb:90:f6:ca:6f:5a:e1:65:0a:67:
fc:20:78:56:9b:d4:b6:68:dd:dd:ee:fe:1c:25:86:
7b:bf:91:15:4a:0e:f0:bd:99:0c:ed:e1:cc:04:09:
c2:28:61:15:c7:31:ea:7f:05:47:1d:1d:c0:de:90:
5d:eb:37:ba:84:88:e1:03:0f:ae:b1:ca:60:e7:ad:
73:f3:26:4b:a2:15:31:76:08:eb:b4:95:3f:27:72:
31:d8:57:ce:ce:3a:88:9c:23:29:c5:c3:3b:c2:91:
f0:55:b5:76:c2:5c:bb:30:d7:b6:79:c4:cd:25:57:
c7:12:88:19:aa:22:f5:9d:a5:f3:7c:82:00:c8:96:
67:80:2a:67:9d:ce:39:af:62:02:10:26:78:a7:25:
c7:5a:39:f8:a0:4a:b9:41:30:f9:55:81:65:ff:5b:
c5:df:d9:63:b5:35:fe:6e:d9:1d:5e:a5:4f:0f:40:
ca:c2:01:0c:5f:40:3d:6b:03:ca:16:36:aa:97:de:
5f:5b:91:1f:c4:af:07:b0:80:f5:c9:e7:17:c4:2e:
ea:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:80:D6:B0:4E:D5:E2:E2:CC:8D:10:86:CF:1E:0D:20:0E:6E:F8
X509v3 Authority Key Identifier:
keyid:AD:36:7B:C1:9F:06:69:96:49:0A:20:66:74:C8:DA:8F:5E:D2:CD:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3cc848-7861-4ce1-870d-84b67b470b04/1/rTZ7wZ8GaZZJCiBmdMjaj17SzQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:fb:45:96:4c:4a:f6:55:65:d2:8c:ad:c5:16:db:6d:e6:
dd:32:f6:25:59:fd:d5:d5:bd:ca:14:de:b8:40:f9:44:46:f8:
7d:ee:72:70:7a:3a:b9:b7:fb:63:51:e8:5e:fa:78:19:3d:0f:
ce:09:62:21:f0:b0:e4:0c:09:6f:86:cb:51:41:aa:a0:70:6a:
59:6d:63:3d:87:d5:61:8d:d5:e2:91:76:9b:45:a3:b0:a6:b3:
b3:b5:ab:82:06:8f:71:65:03:be:b5:7c:d1:e1:f3:a5:6c:65:
89:dc:15:3a:98:e7:d9:de:5c:c7:f5:46:65:4c:a2:f4:51:35:
97:4a:49:d1:d4:14:47:56:b0:6d:0e:fc:ec:a9:12:88:7e:98:
5e:28:f6:a5:8d:6d:e2:ef:91:9f:d9:6d:c2:33:f7:cb:12:7c:
98:10:27:c3:60:c4:d5:d2:40:5a:ec:de:0b:e2:75:46:6b:ce:
44:6f:6d:52:87:2d:d9:b3:2f:78:dc:cd:c9:8e:2f:d8:d2:7a:
45:24:72:a2:19:64:54:b2:dd:54:46:65:2d:20:ac:a4:87:af:
b2:4b:34:ed:a3:16:fa:39:a1:d4:e8:fa:f1:f7:84:06:83:3a:
e9:71:c7:c9:6e:60:0a:2b:12:72:89:a9:c1:f5:42:50:07:d9:
87:ec:c1:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxw4+o8oQX3XJ+gQpMoYtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzY3YmMxOWYwNjY5OTY0OTBhMjA2Njc0YzhkYThmNWVk
MmNkMGUwHhcNMjYwOTMwMTAwMjAwWhcNMjYxMDAxMTAwMjAwWjAzMTEwLwYDVQQD
EyhlZTIyODBkNmIwNGVkNWUyZTJjYzhkMTA4NmNmMWUwZDIwMGU2ZWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTVzEOxJr9sYAB+5ncpIkfWcM4nW
urZ2Ek7dVihxfquVF3DktzvuPWhxDCAvCgpvsPuQ9spvWuFlCmf8IHhWm9S2aN3d
7v4cJYZ7v5EVSg7wvZkM7eHMBAnCKGEVxzHqfwVHHR3A3pBd6ze6hIjhAw+uscpg
561z8yZLohUxdgjrtJU/J3Ix2FfOzjqInCMpxcM7wpHwVbV2wly7MNe2ecTNJVfH
EogZqiL1naXzfIIAyJZngCpnnc45r2ICECZ4pyXHWjn4oEq5QTD5VYFl/1vF39lj
tTX+btkdXqVPD0DKwgEMX0A9awPKFjaql95fW5EfxK8HsID1yecXxC7qTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4igNawTtXi4syNEIbPHg0gDm74MB8GA1UdIwQY
MBaAFK02e8GfBmmWSQogZnTI2o9e0s0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQt
ODRiNjdiNDcwYjA0LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zY2M4NDgtNzg2MS00Y2UxLTg3MGQtODRiNjdiNDcwYjA0
LzEvclRaN3daOEdhWlpKQ2lCbWRNamFqMTdTelE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWP7RZZM
SvZVZdKMrcUW223m3TL2JVn91dW9yhTeuED5REb4fe5ycHo6ubf7Y1HoXvp4GT0P
zgliIfCw5AwJb4bLUUGqoHBqWW1jPYfVYY3V4pF2m0WjsKazs7WrggaPcWUDvrV8
0eHzpWxlidwVOpjn2d5cx/VGZUyi9FE1l0pJ0dQUR1awbQ787KkSiH6YXij2pY1t
4u+Rn9ltwjP3yxJ8mBAnw2DE1dJAWuzeC+J1RmvORG9tUoct2bMveNzNyY4v2NJ6
RSRyohlkVLLdVEZlLSCspIevsks07aMW+jmh1Oj68feEBoM66XHHyW5gCisScomp
wfVCUAfZh+zBOQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:26:29 2026 by rpki-client