Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
File: RsITtblG3tmAlM5BLCL_-iB-QWY.mft (raw, json)
Hash identifier: K5/MpY2EbjPP1dgiBHSFg5ZFcz+oz44xiVjOmsl/LcU=
Subject key identifier: 9A:48:1A:F8:A5:E1:16:30:20:93:68:1F:6C:8B:28:EB:0B:4C:F0:FB
Authority key identifier: 46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
Certificate issuer: /CN=46c213b5b946ded98094ce412c22fffa207e4166
Certificate serial: 01A0D45D2E7AF3EFA7F7E1BBE26F169526D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
Manifest number: 63
Signing time: Thu 24 Sep 2026 17:01:11 +0000
Manifest this update: Thu 24 Sep 2026 17:01:11 +0000
Manifest next update: Fri 25 Sep 2026 17:01:11 +0000
Files and hashes: 1: CG6YE3diFNDxAY_EfqmIVLlC8zk.roa (hash: mSZY3NosPIP9Kd5rgPCFUb3EI5OnSJu4ig3yx1dZcHc=)
2: QBS0R0WX4CgAouVoy5AWvsIQFiE.roa (hash: E3Diw4Z8AQ6BjMDTeQHhn+VEM0caceCcTyALUIOkuu8=)
3: RsITtblG3tmAlM5BLCL_-iB-QWY.crl (hash: VC8L20W26QN3XvcDxOQ8gb3G9cjKQaUvvgY2QKSj7DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:2e:7a:f3:ef:a7:f7:e1:bb:e2:6f:16:95:26:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c213b5b946ded98094ce412c22fffa207e4166
Validity
Not Before: Sep 24 17:01:11 2026 GMT
Not After : Sep 25 17:01:11 2026 GMT
Subject: CN=9a481af8a5e116302093681f6c8b28eb0b4cf0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:64:06:d1:ad:56:dc:c8:a0:53:95:62:ba:
a6:17:24:3f:8d:2d:32:ac:92:22:61:93:fc:1e:fa:
86:0e:fb:3b:2e:6c:c3:71:68:bc:c5:a2:be:05:a3:
83:96:33:de:17:c6:6e:b9:ce:58:62:24:65:5b:83:
f5:91:85:54:fe:3d:a5:5c:0d:3a:d6:44:e3:9c:09:
df:a5:9a:98:7f:88:ea:cc:ee:21:81:2a:31:3c:53:
1f:e0:76:39:dd:99:21:5e:4d:bf:3f:03:8d:fd:e7:
78:63:f7:c1:f5:b5:65:b0:77:b4:d8:79:73:fa:02:
7b:51:89:60:cc:4b:ec:80:a3:d9:d8:7e:37:35:fd:
50:9a:20:02:37:d5:06:5b:28:2f:d3:ad:b2:8a:ec:
25:59:3b:20:73:73:6a:23:de:4d:99:95:33:06:dc:
85:cd:b1:60:ea:46:67:cd:d1:fb:33:98:79:19:69:
2c:86:74:d3:ba:15:8f:c0:5a:67:83:63:af:c7:e5:
f5:10:63:2e:11:43:c7:23:2d:41:69:d5:4a:77:ad:
08:ab:d2:8a:6e:23:df:42:8a:0c:17:d5:ce:85:38:
12:c7:37:73:cb:26:84:e8:c6:ce:9a:71:f9:44:55:
43:44:36:18:0f:99:ed:59:2c:49:f0:5e:2e:c7:db:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:48:1A:F8:A5:E1:16:30:20:93:68:1F:6C:8B:28:EB:0B:4C:F0:FB
X509v3 Authority Key Identifier:
keyid:46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:2b:99:20:d2:db:54:64:be:4f:e6:ce:31:65:12:a2:85:56:
f7:a6:c8:71:92:49:28:59:56:9f:44:f9:c6:41:3a:d5:df:3d:
24:d8:26:57:4e:2a:04:e5:42:47:4d:2c:a9:90:59:30:c3:9b:
3f:36:ac:a9:cd:c7:7b:d0:32:97:2e:17:bc:e3:7f:92:c2:aa:
f8:54:2e:2f:8d:0b:eb:f1:56:90:e1:be:fd:fe:87:5b:b6:e5:
fe:17:dd:5b:6c:45:cb:18:45:ff:b2:74:2e:db:bd:01:be:73:
58:81:38:a4:5f:73:58:b9:ea:35:7a:87:4b:44:aa:a6:28:5e:
15:48:fa:de:4b:42:f5:b6:ed:e7:1e:f1:3a:2c:4e:37:19:eb:
a0:27:64:45:92:ac:9e:36:a6:3e:e0:28:73:54:9c:52:32:0a:
87:82:00:22:09:96:07:09:7b:67:8d:d2:e0:63:00:25:45:96:
dc:1e:10:f2:61:47:f8:6e:cc:1a:75:67:c2:62:b4:15:17:8b:
de:f3:07:5c:9c:24:b1:2f:e6:9c:97:3b:83:f4:e2:fb:ce:4c:
21:00:53:34:f2:d4:45:9b:c8:05:f8:25:79:bb:72:4a:80:4d:
d6:2d:eb:6d:86:da:ca:c2:0c:2d:5b:cb:65:d2:90:56:38:f7:
54:76:ab:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUXS568++n9+G74m8WlSbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YzIxM2I1Yjk0NmRlZDk4MDk0Y2U0MTJjMjJmZmZhMjA3
ZTQxNjYwHhcNMjYwOTI0MTcwMTExWhcNMjYwOTI1MTcwMTExWjAzMTEwLwYDVQQD
Eyg5YTQ4MWFmOGE1ZTExNjMwMjA5MzY4MWY2YzhiMjhlYjBiNGNmMGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TlkBtGtVtzIoFOVYrqmFyQ/jS0y
rJIiYZP8HvqGDvs7LmzDcWi8xaK+BaODljPeF8Zuuc5YYiRlW4P1kYVU/j2lXA06
1kTjnAnfpZqYf4jqzO4hgSoxPFMf4HY53ZkhXk2/PwON/ed4Y/fB9bVlsHe02Hlz
+gJ7UYlgzEvsgKPZ2H43Nf1QmiACN9UGWygv062yiuwlWTsgc3NqI95NmZUzBtyF
zbFg6kZnzdH7M5h5GWkshnTTuhWPwFpng2Ovx+X1EGMuEUPHIy1BadVKd60Iq9KK
biPfQooMF9XOhTgSxzdzyyaE6MbOmnH5RFVDRDYYD5ntWSxJ8F4ux9uxzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpIGvil4RYwIJNoH2yLKOsLTPD7MB8GA1UdIwQY
MBaAFEbCE7W5Rt7ZgJTOQSwi//ogfkFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNJVHRibEczdG1BbE01QkxDTF8taUItUVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mZWEzMDMtNGYzYS00MjNlLWFmZDUt
MjgxMzliZDk5NDExLzEvUnNJVHRibEczdG1BbE01QkxDTF8taUItUVdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9mZWEzMDMtNGYzYS00MjNlLWFmZDUtMjgxMzliZDk5NDEx
LzEvUnNJVHRibEczdG1BbE01QkxDTF8taUItUVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyuZINLb
VGS+T+bOMWUSooVW96bIcZJJKFlWn0T5xkE61d89JNgmV04qBOVCR00sqZBZMMOb
Pzasqc3He9Ayly4XvON/ksKq+FQuL40L6/FWkOG+/f6HW7bl/hfdW2xFyxhF/7J0
Ltu9Ab5zWIE4pF9zWLnqNXqHS0SqpiheFUj63ktC9bbt5x7xOixONxnroCdkRZKs
njamPuAoc1ScUjIKh4IAIgmWBwl7Z43S4GMAJUWW3B4Q8mFH+G7MGnVnwmK0FReL
3vMHXJwksS/mnJc7g/Ti+85MIQBTNPLURZvIBfglebtySoBN1i3rbYbaysIMLVvL
ZdKQVjj3VHareg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 04:03:46 2026 by rpki-client