Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: qgNluGe65jfUvIczXLbLFLrvdu7D6QZJk/ZuTbZBSxk=
Subject key identifier: 88:9F:4F:FE:46:02:51:2E:1C:DC:2C:66:83:57:4F:C9:71:5F:A5:CA
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 01A0BF1E2001E7A87AA9312E2FAA72D96D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1A6A
Signing time: Sun 20 Sep 2026 14:00:17 +0000
Manifest this update: Sun 20 Sep 2026 14:00:17 +0000
Manifest next update: Mon 21 Sep 2026 14:00:17 +0000
Files and hashes: 1: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (hash: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=)
2: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: 1YyUd0zeZeTQzPzlyDu+HlGs0tIjbkSBvHPrzbhXaH0=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:20:01:e7:a8:7a:a9:31:2e:2f:aa:72:d9:6d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Sep 20 14:00:17 2026 GMT
Not After : Sep 21 14:00:17 2026 GMT
Subject: CN=889f4ffe4602512e1cdc2c6683574fc9715fa5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:42:e4:7a:24:42:1f:b0:bf:73:ee:e3:37:
3f:2f:3f:bd:eb:4e:79:0c:96:99:14:8d:4b:d0:e2:
29:a4:bb:7e:93:c5:a7:a8:02:25:b6:67:3b:d6:ac:
62:ae:91:f4:21:b0:35:4f:2d:44:e4:be:05:02:55:
9e:43:73:12:d2:ad:ea:83:08:6c:ad:2f:83:99:38:
b7:b1:27:61:1d:c9:59:44:a1:b7:68:a3:8d:33:c6:
c4:4e:38:40:f3:86:f6:8a:bd:1c:ca:a2:ae:9e:fd:
21:70:87:f8:b4:2a:04:8d:62:38:68:ec:86:62:78:
1c:b4:34:2e:52:44:06:9c:b6:28:82:83:89:b4:e6:
29:bb:cb:9e:74:27:62:b0:c8:64:87:fe:fe:e8:41:
d8:22:59:85:00:63:0a:18:3b:db:23:85:28:db:c5:
0c:cc:36:5e:5e:20:7f:46:33:bd:65:6b:eb:ae:6f:
fa:db:41:18:21:be:da:7d:09:c5:be:97:0c:24:5d:
cb:e6:4a:ca:de:2d:e0:e6:78:73:69:38:14:73:bd:
92:53:e3:d4:c4:7d:98:2c:ee:a8:29:17:76:b7:e3:
9b:95:36:50:da:13:f2:23:b8:86:e5:9c:60:17:ce:
bb:56:60:05:30:be:d7:b9:50:17:59:4a:2f:52:bd:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9F:4F:FE:46:02:51:2E:1C:DC:2C:66:83:57:4F:C9:71:5F:A5:CA
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:ed:8e:b9:23:cf:19:3d:67:bf:2b:32:d3:0f:f6:cc:a7:9d:
5c:cf:2f:70:c3:f1:70:b3:eb:bf:4b:f6:6b:bc:20:ad:61:e1:
2d:e7:57:f0:f7:46:80:ea:58:db:69:17:c8:57:55:38:ee:b6:
e0:71:32:3a:a8:a4:ba:8b:37:49:c2:0b:cd:d0:16:b4:82:42:
aa:44:fc:7d:7f:61:e2:29:9e:16:d9:db:d3:9a:15:ed:59:56:
0d:38:57:c3:b5:a4:0c:12:c2:86:98:cf:73:ce:69:20:cd:67:
1e:9e:78:90:90:3a:01:46:ab:b0:3e:97:e5:91:a6:51:51:60:
a3:dd:78:99:0a:de:af:65:42:c8:ca:25:42:47:ac:39:15:d9:
08:71:d5:80:0c:e0:80:b4:da:d8:dc:dc:41:5f:d6:91:e6:22:
55:3f:b0:6e:01:c9:b3:16:d4:51:5e:77:50:98:8a:e2:39:7a:
9a:18:03:53:28:05:3b:c6:a0:d9:76:ee:07:72:21:af:fe:e8:
0b:ec:39:25:ac:22:82:f1:67:ab:3b:03:66:93:e2:00:63:24:
74:e8:a1:f2:9e:b1:dc:d4:d5:9c:8c:cc:fd:a8:6e:f2:77:c3:
e0:e8:58:ca:f3:7f:cb:00:90:e9:18:58:56:d1:6d:c2:3d:fa:
58:fd:38:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/HiAB56h6qTEuL6py2W0uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2JjNWUwNDVlYWE1Zjc2MmE5MTQ2MjQ0YzE5MjQ4YjYy
YmE5NzYwHhcNMjYwOTIwMTQwMDE3WhcNMjYwOTIxMTQwMDE3WjAzMTEwLwYDVQQD
Eyg4ODlmNGZmZTQ2MDI1MTJlMWNkYzJjNjY4MzU3NGZjOTcxNWZhNWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fNC5HokQh+wv3Pu4zc/Lz+96055
DJaZFI1L0OIppLt+k8WnqAIltmc71qxirpH0IbA1Ty1E5L4FAlWeQ3MS0q3qgwhs
rS+DmTi3sSdhHclZRKG3aKONM8bETjhA84b2ir0cyqKunv0hcIf4tCoEjWI4aOyG
YngctDQuUkQGnLYogoOJtOYpu8uedCdisMhkh/7+6EHYIlmFAGMKGDvbI4Uo28UM
zDZeXiB/RjO9ZWvrrm/620EYIb7afQnFvpcMJF3L5krK3i3g5nhzaTgUc72SU+PU
xH2YLO6oKRd2t+OblTZQ2hPyI7iG5ZxgF867VmAFML7XuVAXWUovUr1jxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIifT/5GAlEuHNwsZoNXT8lxX6XKMB8GA1UdIwQY
MBaAFEzLxeBF6qX3YqkUYkTBkki2K6l2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDct
YTdjNTlkZGNmNzZiLzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9iZjY2ZGQtNjIzNy00OGRlLWFlZDctYTdjNTlkZGNmNzZi
LzEvVE12RjRFWHFwZmRpcVJSaVJNR1NTTFlycVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+2OuSPP
GT1nvysy0w/2zKedXM8vcMPxcLPrv0v2a7wgrWHhLedX8PdGgOpY22kXyFdVOO62
4HEyOqikuos3ScILzdAWtIJCqkT8fX9h4imeFtnb05oV7VlWDThXw7WkDBLChpjP
c85pIM1nHp54kJA6AUarsD6X5ZGmUVFgo914mQrer2VCyMolQkesORXZCHHVgAzg
gLTa2NzcQV/WkeYiVT+wbgHJsxbUUV53UJiK4jl6mhgDUygFO8ag2XbuB3Ihr/7o
C+w5JawigvFnqzsDZpPiAGMkdOih8p6x3NTVnIzM/ahu8nfD4OhYyvN/ywCQ6RhY
VtFtwj36WP04QQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:53:39 2026 by rpki-client