Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: qz9BFy2n2AsF1rcNBQ1JLxZ/EsJ2zD1ipeXJkiKZ8iw=
Subject key identifier: 31:3F:23:37:03:04:11:80:DD:EE:CC:48:5C:6E:CA:3E:FC:35:15:93
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 01A0E5885721FC9DB30000178B51A022BF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 01:01:52 +0000
Manifest this update: Mon 28 Sep 2026 01:01:52 +0000
Manifest next update: Tue 29 Sep 2026 01:01:52 +0000
Files and hashes: 1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: oyQp9vzzsCd0INYqLaMT3yxKSIsFCSBi/UQOKkYdfsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:57:21:fc:9d:b3:00:00:17:8b:51:a0:22:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Sep 28 01:01:52 2026 GMT
Not After : Sep 29 01:01:52 2026 GMT
Subject: CN=313f233703041180ddeecc485c6eca3efc351593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:c7:4c:1f:eb:29:39:05:8e:d4:d9:f1:88:
c3:6d:ea:eb:68:60:50:f7:4d:eb:05:d5:c4:2c:3f:
5c:43:eb:e4:67:7a:9f:2f:4b:ba:62:0a:b3:13:e1:
41:30:4d:0c:9f:96:44:f5:c1:e2:b6:90:50:af:43:
8b:10:33:5f:7e:76:cb:7d:6d:5c:8d:ce:b3:9d:57:
66:25:dc:b8:18:92:13:a7:f7:bd:7e:f3:25:f3:6a:
bb:c1:04:5f:24:00:8a:35:a0:a4:5a:65:91:c4:ae:
a8:f2:91:0c:61:6c:6c:21:6c:8a:32:33:97:8f:56:
d7:bf:89:da:98:42:7b:4f:e4:8f:dd:eb:4f:32:f3:
b8:0d:c9:39:47:1d:45:56:ea:1c:fc:f8:72:d8:8e:
4a:40:67:2d:27:54:ba:f2:52:05:bb:a8:91:66:94:
a6:eb:e9:97:59:16:79:fe:2c:ff:9a:6d:64:e6:6f:
1d:bf:0f:2d:f0:7c:65:c6:c5:dd:a8:6b:a9:4e:bc:
3e:a2:ba:6a:70:56:e5:6f:3e:b9:62:10:3f:3b:e2:
b1:b4:e0:f3:b4:a9:45:f2:fc:b2:9f:32:74:1a:46:
62:69:00:80:e8:53:4b:a9:42:ac:24:92:48:fc:e1:
0d:5b:fa:c5:9b:7d:7c:d6:b2:ca:bc:93:20:99:39:
5e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:23:37:03:04:11:80:DD:EE:CC:48:5C:6E:CA:3E:FC:35:15:93
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:23:69:19:19:85:32:51:e3:9c:bf:aa:31:5f:04:e4:5f:
b8:fc:e8:0b:b3:79:22:bc:23:c7:00:49:43:82:26:0a:30:4f:
7d:c6:2f:7c:93:d4:75:8e:b2:3f:67:4c:dd:ed:38:67:0f:1c:
ab:ea:17:dd:f4:cf:a0:0c:de:ed:fa:b1:4e:b2:39:61:90:40:
a9:30:54:e0:1b:3e:e9:77:e5:59:6a:c3:53:c4:7b:53:b0:d3:
8c:aa:6a:c8:b5:71:91:fe:27:7b:8a:cf:27:70:24:f9:cb:c4:
d5:9a:5a:92:2d:ae:1d:db:09:f7:e9:c1:27:a2:fa:04:c1:f4:
80:43:5b:8a:bc:ae:41:72:45:ed:19:f1:56:2c:6b:a1:1e:4c:
51:04:ed:a5:40:73:27:d8:8f:b9:32:d5:c1:8e:af:ed:0a:9b:
a8:5f:a0:df:fa:51:cd:6a:51:9e:e7:c2:9a:69:3e:64:80:39:
e3:ce:04:05:ee:b7:cd:87:f4:c0:5a:2c:7a:50:2b:13:4a:b6:
67:f9:aa:99:fc:f5:bc:24:08:09:68:ad:b8:e0:10:10:d9:15:
7b:ad:fa:18:48:95:7e:32:03:82:4b:9f:2d:15:04:33:24:ea:
08:e1:61:83:a8:6b:84:34:d1:47:5c:ac:e7:cd:3b:0f:a9:73:
25:f0:24:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDliFch/J2zAAAXi1GgIr+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTg0MWNkYzlmNjM1OTRkZGRjMmJhNTlhNDAxMzMxODJi
NTc5ZmEwHhcNMjYwOTI4MDEwMTUyWhcNMjYwOTI5MDEwMTUyWjAzMTEwLwYDVQQD
EygzMTNmMjMzNzAzMDQxMTgwZGRlZWNjNDg1YzZlY2EzZWZjMzUxNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbXHTB/rKTkFjtTZ8YjDberraGBQ
903rBdXELD9cQ+vkZ3qfL0u6YgqzE+FBME0Mn5ZE9cHitpBQr0OLEDNffnbLfW1c
jc6znVdmJdy4GJITp/e9fvMl82q7wQRfJACKNaCkWmWRxK6o8pEMYWxsIWyKMjOX
j1bXv4namEJ7T+SP3etPMvO4Dck5Rx1FVuoc/Phy2I5KQGctJ1S68lIFu6iRZpSm
6+mXWRZ5/iz/mm1k5m8dvw8t8HxlxsXdqGupTrw+orpqcFblbz65YhA/O+KxtODz
tKlF8vyynzJ0GkZiaQCA6FNLqUKsJJJI/OENW/rFm3181rLKvJMgmTleCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE/IzcDBBGA3e7MSFxuyj78NRWTMB8GA1UdIwQY
MBaAFLUYQc3J9jWU3dwrpZpAEzGCtXn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAt
NjkxMGYzOTlkMzhmLzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9mMGFmNjEtOGNjYy00YTNiLTkwMTAtNjkxMGYzOTlkMzhm
LzEvdFJoQnpjbjJOWlRkM0N1bG1rQVRNWUsxZWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIUjaRkZ
hTJR45y/qjFfBORfuPzoC7N5IrwjxwBJQ4ImCjBPfcYvfJPUdY6yP2dM3e04Zw8c
q+oX3fTPoAze7fqxTrI5YZBAqTBU4Bs+6XflWWrDU8R7U7DTjKpqyLVxkf4ne4rP
J3Ak+cvE1Zpaki2uHdsJ9+nBJ6L6BMH0gENbiryuQXJF7RnxVixroR5MUQTtpUBz
J9iPuTLVwY6v7QqbqF+g3/pRzWpRnufCmmk+ZIA5484EBe63zYf0wFoselArE0q2
Z/mqmfz1vCQICWituOAQENkVe636GEiVfjIDgkufLRUEMyTqCOFhg6hrhDTRR1ys
5807D6lzJfAkhw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:36:43 2026 by rpki-client