
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
File: a4T0opa84U1t7tJRFqpwtgvM5KQ.mft (raw, json)
Hash identifier: 70nqhZivguJ3eeLnXs6woP+ez8jjHF4Z1cWyvwWlZYY=
Subject key identifier: C4:53:F9:FF:08:1A:3E:8C:D4:5F:3F:13:EF:4D:2D:E8:7D:72:DC:9F
Authority key identifier: 6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
Certificate issuer: /CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Certificate serial: 01A0DFBD09569E8F769BD3BA6F636F167B36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 22:01:42 +0000
Manifest this update: Sat 26 Sep 2026 22:01:42 +0000
Manifest next update: Sun 27 Sep 2026 22:01:42 +0000
Files and hashes: 1: 2RbeqdMiyrwCVLR5chpWY1wVXBs.roa (hash: FV2Q/IEBTvjzgG5NIpgTYEVedEVCT2bxukDMuyGlG3g=)
2: Lijwv8ed8pOLySWZZGE9d68r6MQ.roa (hash: 9P+vvVo2WGEbeXwE6ljHBigsAywfbwq49GCsuySXDx4=)
3: a4T0opa84U1t7tJRFqpwtgvM5KQ.crl (hash: AR6+9wrGro/ONfmtaE/q2PFRZYM2iregh/mOqJ8EiXo=)
4: g5j5FZkvMABlDgQ1VxUj3-qHrIQ.roa (hash: GDgyOidVPTAYf13W4o/hjNWE5JEbUK7OcD6kn+Y2gxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bd:09:56:9e:8f:76:9b:d3:ba:6f:63:6f:16:7b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84f4a296bce14d6deed25116aa70b60bcce4a4
Validity
Not Before: Sep 26 22:01:42 2026 GMT
Not After : Sep 27 22:01:42 2026 GMT
Subject: CN=c453f9ff081a3e8cd45f3f13ef4d2de87d72dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:33:cc:bf:7d:51:49:36:80:c6:35:62:ed:
93:a6:24:12:28:60:68:1f:92:82:ab:27:1f:29:18:
3f:5c:f1:61:60:f0:c5:a0:50:ae:32:8c:85:90:c7:
16:a3:36:aa:af:6e:28:f5:13:92:a5:0c:68:f5:2a:
20:29:d2:9f:49:51:ad:10:7a:64:3a:d7:38:35:d3:
21:8e:ad:dc:73:5a:3f:43:88:e3:cc:bf:2e:e2:a9:
30:cd:7f:14:26:c4:42:9b:3f:5f:a9:68:f3:99:80:
17:03:f9:dd:aa:90:0c:68:b1:c2:e6:36:cc:e9:82:
84:20:4e:70:d9:25:3f:84:6f:39:38:f0:01:f4:67:
ad:fe:77:16:76:fd:f0:28:06:b8:89:d3:94:c1:7d:
6a:d8:97:ab:dc:0a:4e:3f:c9:a7:f0:80:58:7b:1b:
58:7b:23:de:96:57:de:04:69:53:f3:0f:05:4b:93:
e1:f1:46:0e:24:c4:2f:84:0e:f8:e5:1c:c1:ba:67:
0d:9e:10:1a:2f:67:f7:fa:b7:7f:cc:14:67:e9:03:
7c:12:c4:15:f7:67:06:c3:8a:d6:a2:72:b7:ce:70:
82:28:04:ab:58:43:d1:18:42:ad:a8:dd:5a:7a:c5:
cb:40:7b:fa:3c:63:16:88:29:45:bf:d6:24:eb:eb:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:53:F9:FF:08:1A:3E:8C:D4:5F:3F:13:EF:4D:2D:E8:7D:72:DC:9F
X509v3 Authority Key Identifier:
keyid:6B:84:F4:A2:96:BC:E1:4D:6D:EE:D2:51:16:AA:70:B6:0B:CC:E4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T0opa84U1t7tJRFqpwtgvM5KQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/844fd9-fef1-44d9-a6c9-14fab0244948/1/a4T0opa84U1t7tJRFqpwtgvM5KQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e2:05:ef:cb:85:16:db:eb:95:e6:87:b1:49:cc:3f:56:0c:
f6:e7:97:80:09:5a:04:bf:5f:8f:68:4c:e4:4d:71:67:38:ff:
db:aa:ea:ec:2d:a0:f3:dd:1c:31:f8:6a:47:c1:d9:ff:53:99:
c4:ab:2a:1f:dd:5d:af:c5:87:c1:d6:4f:a2:4d:8f:ae:95:97:
57:bb:35:d2:a3:1e:15:69:9a:31:55:25:14:68:01:33:49:58:
1c:36:e7:de:4f:32:4c:eb:df:d2:7c:a2:88:3e:52:08:86:eb:
d6:9c:bf:32:3e:18:99:b8:00:d4:25:59:da:7f:80:1e:43:cd:
e7:1d:f1:f1:dc:6c:05:a9:ea:ae:2d:8a:e3:1d:5f:bd:9a:57:
ce:16:e3:63:a3:95:fd:1e:00:5e:11:48:67:c8:1b:db:4a:60:
8b:e4:57:1e:c8:cb:4f:c0:37:c6:8e:26:d6:42:f4:3f:6b:64:
98:85:4f:e5:a3:dc:e5:bc:a6:8e:1d:b7:c3:cb:a1:c9:1b:6f:
32:a1:6d:e9:59:9f:61:94:ed:67:dd:6a:92:e7:b1:17:b7:19:
9f:50:65:75:55:68:d9:94:65:9d:33:2f:4e:de:66:85:ad:8a:
cc:13:1a:69:eb:77:56:d9:a5:36:7d:59:76:8c:3a:bc:98:ee:
30:32:35:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvQlWno92m9O6b2NvFns2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiODRmNGEyOTZiY2UxNGQ2ZGVlZDI1MTE2YWE3MGI2MGJj
Y2U0YTQwHhcNMjYwOTI2MjIwMTQyWhcNMjYwOTI3MjIwMTQyWjAzMTEwLwYDVQQD
EyhjNDUzZjlmZjA4MWEzZThjZDQ1ZjNmMTNlZjRkMmRlODdkNzJkYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiozzL99UUk2gMY1Yu2TpiQSKGBo
H5KCqycfKRg/XPFhYPDFoFCuMoyFkMcWozaqr24o9ROSpQxo9SogKdKfSVGtEHpk
Otc4NdMhjq3cc1o/Q4jjzL8u4qkwzX8UJsRCmz9fqWjzmYAXA/ndqpAMaLHC5jbM
6YKEIE5w2SU/hG85OPAB9Get/ncWdv3wKAa4idOUwX1q2Jer3ApOP8mn8IBYextY
eyPellfeBGlT8w8FS5Ph8UYOJMQvhA745RzBumcNnhAaL2f3+rd/zBRn6QN8EsQV
92cGw4rWonK3znCCKASrWEPRGEKtqN1aesXLQHv6PGMWiClFv9Yk6+tmzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRT+f8IGj6M1F8/E+9NLeh9ctyfMB8GA1UdIwQY
MBaAFGuE9KKWvOFNbe7SURaqcLYLzOSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2Yzkt
MTRmYWIwMjQ0OTQ4LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84NDRmZDktZmVmMS00NGQ5LWE2YzktMTRmYWIwMjQ0OTQ4
LzEvYTRUMG9wYTg0VTF0N3RKUkZxcHd0Z3ZNNUtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduIF78uF
FtvrleaHsUnMP1YM9ueXgAlaBL9fj2hM5E1xZzj/26rq7C2g890cMfhqR8HZ/1OZ
xKsqH91dr8WHwdZPok2PrpWXV7s10qMeFWmaMVUlFGgBM0lYHDbn3k8yTOvf0nyi
iD5SCIbr1py/Mj4YmbgA1CVZ2n+AHkPN5x3x8dxsBanqri2K4x1fvZpXzhbjY6OV
/R4AXhFIZ8gb20pgi+RXHsjLT8A3xo4m1kL0P2tkmIVP5aPc5bymjh23w8uhyRtv
MqFt6VmfYZTtZ91qkuexF7cZn1BldVVo2ZRlnTMvTt5mha2KzBMaaet3VtmlNn1Z
dow6vJjuMDI1nA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:30:41 2026 by rpki-client