Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
File: tT9AiUhnv7TtUYEBfagOor3tKuQ.mft (raw, json)
Hash identifier: 6np1QcbG7yoI32r3lBu+gWCiJ7DZBww9w75oJ6Vf6Jo=
Subject key identifier: BC:01:A0:EF:5D:7E:68:DD:10:2A:DD:29:02:1B:8F:EA:EE:4F:FC:1D
Authority key identifier: B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
Certificate issuer: /CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Certificate serial: 019FAC76A21B4EF01F76A92B6EB91A1BDA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:23 +0000
Manifest this update: Wed 29 Jul 2026 06:01:23 +0000
Manifest next update: Thu 30 Jul 2026 06:01:23 +0000
Files and hashes: 1: UbZ2SPbY4okiTXM5AfdEnS10_Es.roa (hash: PXQQVoIm69bnLgyq/S5RdMXgtOcrtVDgQ2+xqsOy19A=)
2: tT9AiUhnv7TtUYEBfagOor3tKuQ.crl (hash: HiqxZ/0AKApSfjdlyLEVLJRE9CWalQ/RnN0b64caZ4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:a2:1b:4e:f0:1f:76:a9:2b:6e:b9:1a:1b:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Validity
Not Before: Jul 29 06:01:23 2026 GMT
Not After : Jul 30 06:01:23 2026 GMT
Subject: CN=bc01a0ef5d7e68dd102add29021b8feaee4ffc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:a8:a4:eb:00:68:82:db:4f:26:f8:dc:65:
be:d8:9a:81:9d:83:64:c0:a6:6a:69:21:8b:9c:23:
84:85:50:94:52:4f:c5:1b:53:91:b0:bb:81:94:6f:
79:ff:0e:e1:ec:79:87:b6:c7:79:58:9c:c1:0c:f7:
4f:42:1c:f3:d2:6e:2d:a6:b3:24:5c:28:dc:1f:85:
f3:62:12:36:10:c8:00:78:2e:2d:3a:f7:fa:e6:9b:
91:0d:96:5d:3b:10:5c:a6:69:c3:4f:76:a4:47:34:
0d:c2:48:8f:88:cb:8a:ef:b1:67:d1:ce:f7:01:65:
4b:f3:68:b0:ee:67:4f:00:2f:b0:2a:01:50:b6:2b:
b9:8d:b5:61:a7:2a:f8:9e:a6:a0:a9:35:dc:40:74:
3b:4a:67:33:33:64:3b:ff:17:f6:d4:84:99:9d:35:
af:c6:91:c3:db:77:90:c4:c2:5b:b1:35:6e:0d:ab:
a7:75:cc:ae:1a:f8:d3:7b:e4:5c:ca:d0:e4:61:f9:
ef:ab:05:9a:a2:db:41:8a:30:1c:bc:ca:22:f7:79:
3e:78:de:e4:86:e9:72:2d:b1:db:79:c9:64:f6:ef:
eb:0a:8f:eb:fa:e7:af:cd:e5:96:e5:43:cf:de:d6:
f1:c3:41:84:04:ec:6b:1b:9c:c5:c0:5b:87:65:02:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:01:A0:EF:5D:7E:68:DD:10:2A:DD:29:02:1B:8F:EA:EE:4F:FC:1D
X509v3 Authority Key Identifier:
keyid:B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bd:47:15:51:6a:5f:9d:ad:3f:4a:af:bd:27:70:80:aa:a5:
98:8e:9f:f1:6b:7c:6a:7d:30:75:1a:99:82:88:26:e7:3d:cd:
95:85:dd:3a:b5:4d:fc:91:b1:bb:61:f1:62:33:3c:58:af:cd:
1a:0f:46:76:d1:05:25:cc:37:96:d9:12:33:d6:91:17:30:7a:
7d:d9:49:55:66:1c:d7:b1:4d:ef:8e:b6:32:00:e7:e8:55:e1:
13:e1:f5:90:7b:00:90:20:63:a0:3c:37:e3:98:b2:30:2d:c7:
41:48:a3:91:d6:9c:78:ae:19:1f:03:95:c6:50:c2:13:9b:97:
0e:d1:19:a6:7b:de:7e:e0:d6:71:fb:1f:0e:8f:ae:ed:66:72:
8f:3d:25:f2:5b:44:9a:58:b3:38:03:e7:a1:0d:00:20:71:76:
ba:d1:78:28:2c:0b:b8:ec:4d:ff:aa:e4:c8:ee:57:f3:2f:98:
d4:8f:84:99:22:a0:c5:e7:16:95:04:cb:71:19:f9:16:0e:e7:
a1:b0:95:a0:37:a7:88:d5:9b:5d:58:48:06:d1:83:1e:98:5d:
ab:98:8e:90:c8:78:fc:21:21:b1:36:1e:20:a4:98:20:84:6d:
91:d8:b2:e9:65:cb:44:70:61:38:61:95:10:cd:c2:ee:b2:92:
5e:fe:de:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdqIbTvAfdqkrbrkaG9oJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Y0MDg5NDg2N2JmYjRlZDUxODEwMTdkYTgwZWEyYmRl
ZDJhZTQwHhcNMjYwNzI5MDYwMTIzWhcNMjYwNzMwMDYwMTIzWjAzMTEwLwYDVQQD
EyhiYzAxYTBlZjVkN2U2OGRkMTAyYWRkMjkwMjFiOGZlYWVlNGZmYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+yopOsAaILbTyb43GW+2JqBnYNk
wKZqaSGLnCOEhVCUUk/FG1ORsLuBlG95/w7h7HmHtsd5WJzBDPdPQhzz0m4tprMk
XCjcH4XzYhI2EMgAeC4tOvf65puRDZZdOxBcpmnDT3akRzQNwkiPiMuK77Fn0c73
AWVL82iw7mdPAC+wKgFQtiu5jbVhpyr4nqagqTXcQHQ7SmczM2Q7/xf21ISZnTWv
xpHD23eQxMJbsTVuDaundcyuGvjTe+RcytDkYfnvqwWaottBijAcvMoi93k+eN7k
hulyLbHbeclk9u/rCo/r+uevzeWW5UPP3tbxw0GEBOxrG5zFwFuHZQIkRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwBoO9dfmjdECrdKQIbj+ruT/wdMB8GA1UdIwQY
MBaAFLU/QIlIZ7+07VGBAX2oDqK97SrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQ5QWlVaG52N1R0VVlFQmZhZ09vcjN0S3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYt
OWM5ZjIwOTAzMjlhLzEvdFQ5QWlVaG52N1R0VVlFQmZhZ09vcjN0S3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OGY2MzctMzEyMS00MGY3LWI3OGYtOWM5ZjIwOTAzMjlh
LzEvdFQ5QWlVaG52N1R0VVlFQmZhZ09vcjN0S3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc71HFVFq
X52tP0qvvSdwgKqlmI6f8Wt8an0wdRqZgogm5z3NlYXdOrVN/JGxu2HxYjM8WK/N
Gg9GdtEFJcw3ltkSM9aRFzB6fdlJVWYc17FN7462MgDn6FXhE+H1kHsAkCBjoDw3
45iyMC3HQUijkdaceK4ZHwOVxlDCE5uXDtEZpnvefuDWcfsfDo+u7WZyjz0l8ltE
mlizOAPnoQ0AIHF2utF4KCwLuOxN/6rkyO5X8y+Y1I+EmSKgxecWlQTLcRn5Fg7n
obCVoDeniNWbXVhIBtGDHphdq5iOkMh4/CEhsTYeIKSYIIRtkdiy6WXLRHBhOGGV
EM3C7rKSXv7eeg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:07:02 2026 by rpki-client