Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: bjMgwKkAdngEj/juIaov4tljcppR3iH0XL5k33lhH8E=
Subject key identifier: 69:11:2E:CF:C6:1D:83:7C:AC:04:44:DE:60:40:FC:61:34:71:7E:FF
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 01A0D2DDFE6595D374D157F91135BADB442B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 10:02:38 +0000
Manifest this update: Thu 24 Sep 2026 10:02:38 +0000
Manifest next update: Fri 25 Sep 2026 10:02:38 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: b6s5oURO5LZ46AWp0dQ5sm42m/9jOdRlVjyPL7RDwz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:dd:fe:65:95:d3:74:d1:57:f9:11:35:ba:db:44:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Sep 24 10:02:38 2026 GMT
Not After : Sep 25 10:02:38 2026 GMT
Subject: CN=69112ecfc61d837cac0444de6040fc6134717eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:19:25:bf:0e:20:91:c2:fa:8d:d5:05:a4:
d0:d3:fd:46:a8:e5:fc:7f:a4:70:35:17:dc:14:42:
da:9e:75:b1:1c:20:e0:73:da:4a:62:11:a6:24:b9:
74:51:b1:2c:7d:56:d9:6f:e9:29:83:f5:ec:10:72:
79:69:1a:f1:72:a5:8e:b0:32:b0:33:bf:85:78:d5:
57:cc:74:74:74:9c:77:59:d0:59:bf:5a:e0:7e:ac:
7a:dd:60:9c:d2:e6:95:b1:34:89:33:d7:0a:8f:a5:
e9:10:29:5c:5f:dd:b6:ba:29:a5:04:c6:0a:08:8a:
3c:45:b4:04:63:e0:24:d0:57:8e:c3:53:24:91:8d:
80:e7:a7:f0:dd:35:2c:05:b0:be:25:97:e6:4a:5c:
7d:cc:bc:8c:50:04:e3:89:12:72:bf:d9:ab:3a:92:
87:85:55:4d:db:ba:d0:40:54:f1:1b:c3:80:d2:33:
5c:69:7a:32:fd:ca:45:64:6e:eb:d7:60:7a:40:a1:
07:d6:a2:ec:d6:bb:32:a8:49:b7:6d:0b:d0:8a:61:
c7:b4:55:4a:a0:b5:fd:82:97:99:d0:27:50:b6:24:
7a:87:e6:38:5e:65:6a:05:ab:fe:a9:55:4d:45:e5:
f0:eb:11:d1:0d:df:89:39:e3:58:ef:ef:9e:bf:e5:
43:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:11:2E:CF:C6:1D:83:7C:AC:04:44:DE:60:40:FC:61:34:71:7E:FF
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:f8:c1:02:8c:1c:d8:31:ad:1a:75:a8:69:25:a3:ee:26:92:
40:c2:57:dd:d7:f1:fd:9f:c0:33:a4:c0:56:03:6e:e4:b3:0d:
37:20:7b:12:89:14:8e:a0:80:fb:75:a0:db:87:a6:52:7e:3b:
b6:06:62:85:53:a5:cb:6e:1e:86:e6:52:df:66:91:b8:d7:ab:
d9:08:3d:72:be:ab:94:44:1e:ef:23:fc:db:80:19:09:ee:41:
ec:8b:c0:55:ff:7c:99:57:73:82:e7:5a:d4:d0:cd:0b:2b:25:
f3:b9:55:d9:f8:c2:e6:dc:33:8f:4b:7f:ee:ce:f0:92:47:25:
82:1c:48:d8:68:8d:9a:63:51:be:bb:40:45:46:0d:8c:50:d3:
fa:4d:f6:a7:53:21:3a:30:96:36:3b:46:02:2b:75:c3:38:de:
ed:52:18:f1:9c:f9:a1:78:97:19:0c:fb:d6:20:39:1b:16:62:
9b:1c:75:34:ac:4f:47:26:bc:0e:65:93:2e:24:f8:98:7c:c6:
87:28:86:f5:a0:07:48:e7:dc:0b:b3:c6:aa:f4:6d:80:db:11:
9d:61:81:da:28:b8:38:d9:04:70:31:c8:d3:41:e8:0c:df:f2:
72:81:1f:ab:91:90:3b:9a:b9:68:17:18:f8:ab:f2:f4:cb:66:
15:ec:c8:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3f5lldN00Vf5ETW620QrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy
MTk0ZmEwHhcNMjYwOTI0MTAwMjM4WhcNMjYwOTI1MTAwMjM4WjAzMTEwLwYDVQQD
Eyg2OTExMmVjZmM2MWQ4MzdjYWMwNDQ0ZGU2MDQwZmM2MTM0NzE3ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvcZJb8OIJHC+o3VBaTQ0/1GqOX8
f6RwNRfcFELannWxHCDgc9pKYhGmJLl0UbEsfVbZb+kpg/XsEHJ5aRrxcqWOsDKw
M7+FeNVXzHR0dJx3WdBZv1rgfqx63WCc0uaVsTSJM9cKj6XpEClcX922uimlBMYK
CIo8RbQEY+Ak0FeOw1MkkY2A56fw3TUsBbC+JZfmSlx9zLyMUATjiRJyv9mrOpKH
hVVN27rQQFTxG8OA0jNcaXoy/cpFZG7r12B6QKEH1qLs1rsyqEm3bQvQimHHtFVK
oLX9gpeZ0CdQtiR6h+Y4XmVqBav+qVVNReXw6xHRDd+JOeNY7++ev+VD7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkRLs/GHYN8rARE3mBA/GE0cX7/MB8GA1UdIwQY
MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt
NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx
LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefjBAowc
2DGtGnWoaSWj7iaSQMJX3dfx/Z/AM6TAVgNu5LMNNyB7EokUjqCA+3Wg24emUn47
tgZihVOly24ehuZS32aRuNer2Qg9cr6rlEQe7yP824AZCe5B7IvAVf98mVdzguda
1NDNCysl87lV2fjC5twzj0t/7s7wkkclghxI2GiNmmNRvrtARUYNjFDT+k32p1Mh
OjCWNjtGAit1wzje7VIY8Zz5oXiXGQz71iA5GxZimxx1NKxPRya8DmWTLiT4mHzG
hyiG9aAHSOfcC7PGqvRtgNsRnWGB2ii4ONkEcDHI00HoDN/ycoEfq5GQO5q5aBcY
+Kvy9MtmFezIvg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:26 2026 by rpki-client