Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
File: c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft (raw, json)
Hash identifier: xZKKLexWmhlfHvf0LD3LsXUpIOUT97hgpeV1fRIcURw=
Subject key identifier: 85:D6:B0:89:04:16:44:7F:A2:29:9C:75:B1:80:C5:FA:F4:F4:19:8B
Authority key identifier: 73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
Certificate issuer: /CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Certificate serial: 01A0CDB66473AEFE053F54C6E1BE917894F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
Manifest number: 02FE
Signing time: Wed 23 Sep 2026 10:01:17 +0000
Manifest this update: Wed 23 Sep 2026 10:01:17 +0000
Manifest next update: Thu 24 Sep 2026 10:01:17 +0000
Files and hashes: 1: HL-ROcW7ouFfM-ooSu_o2VREjBY.roa (hash: ujK5KehUzQkF735/HRjccuZM+b+O1T9dLVbDOeZE17s=)
2: c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl (hash: pYUk9bgJkDTb0uETHQAqYi+ke/pAySriNObAZVNvgFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b6:64:73:ae:fe:05:3f:54:c6:e1:be:91:78:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7384e508e3adf8edd6f2a242cdad6bde9a5ad018
Validity
Not Before: Sep 23 10:01:17 2026 GMT
Not After : Sep 24 10:01:17 2026 GMT
Subject: CN=85d6b0890416447fa2299c75b180c5faf4f4198b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:c2:b7:9f:72:81:2f:43:6b:99:d9:71:c7:
33:d4:b1:dc:a5:da:39:be:d4:ae:9b:0e:8c:a0:ec:
aa:68:0e:36:4b:f8:fc:d8:21:c5:4f:b9:51:68:2e:
8a:96:77:70:be:ac:2b:0d:5e:e3:57:0b:39:37:7c:
be:68:96:55:f2:fd:91:2e:b5:fc:b5:1c:58:6e:49:
42:3f:c6:88:34:23:eb:c1:46:95:e4:e9:03:38:bd:
93:44:d9:c9:57:1d:d6:75:1b:0c:42:b1:3b:03:51:
b5:8e:2a:6a:a7:b1:f0:55:fc:a9:48:92:84:6c:86:
8b:6f:d4:52:84:a0:12:56:6f:8c:37:f7:09:3e:8a:
c6:d9:39:ca:e8:c3:3d:55:d3:e2:e6:37:bf:73:74:
0a:b9:39:35:96:f4:06:85:d5:d1:ec:49:9d:38:d5:
46:75:eb:2b:3c:4a:a2:3f:3c:48:83:5e:1d:e4:28:
4e:4e:2b:d9:41:fc:ef:17:85:f1:e9:0c:9d:54:05:
29:2a:02:9a:50:17:40:54:8f:5e:8e:eb:ed:ca:5b:
40:d6:b2:69:54:f4:52:64:3e:d6:7e:66:5b:18:a9:
25:e6:e8:81:2d:16:ff:67:9f:c9:38:46:58:9c:25:
b6:8c:b3:b6:6a:44:fb:64:03:6f:01:f1:ca:19:a1:
0a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:B0:89:04:16:44:7F:A2:29:9C:75:B1:80:C5:FA:F4:F4:19:8B
X509v3 Authority Key Identifier:
keyid:73:84:E5:08:E3:AD:F8:ED:D6:F2:A2:42:CD:AD:6B:DE:9A:5A:D0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4TlCOOt-O3W8qJCza1r3ppa0Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/066db2-d35c-481f-ba55-55b677235eb3/1/c4TlCOOt-O3W8qJCza1r3ppa0Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0b:73:5e:b9:13:4b:7b:ff:58:d5:10:0f:32:19:38:56:08:
d7:7d:ca:99:cc:82:db:08:9e:d1:ec:16:a6:5e:e2:83:1d:fa:
35:d1:cb:34:1a:f0:79:1d:bf:f7:76:95:0f:ee:ef:c3:2b:dd:
1f:ef:0d:92:69:24:0f:20:da:27:6b:87:ad:f4:28:5b:dc:5a:
fd:42:56:61:38:75:a6:7a:b7:92:0d:a7:f0:4a:17:90:b6:25:
1d:3e:1a:17:0f:fe:69:1f:5b:eb:52:60:f1:4d:53:74:6b:3e:
8d:e0:9b:fc:36:ae:10:20:8c:08:47:6c:3d:d9:a3:bc:96:83:
67:56:0d:d8:04:7d:c6:eb:96:99:86:d5:50:c6:3b:3f:26:bd:
ef:5b:f6:82:58:7e:93:72:e4:98:b0:44:90:c6:60:70:1c:f2:
be:2c:63:40:cd:4f:58:66:ef:61:fa:2d:95:5f:c4:d1:e8:7b:
a0:2f:9c:15:9e:e7:80:11:9f:4c:53:e1:4e:a6:ed:7f:9d:24:
00:18:98:00:8c:c6:bf:fe:41:68:d1:b4:d2:8e:66:03:e6:6b:
a2:ac:8e:b8:58:3a:19:4e:50:74:8c:91:29:5e:93:8f:a6:47:
80:9e:52:c5:82:53:11:96:16:3b:9c:8b:65:7d:f3:95:a8:1c:
b7:b0:19:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNtmRzrv4FP1TG4b6ReJT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczODRlNTA4ZTNhZGY4ZWRkNmYyYTI0MmNkYWQ2YmRlOWE1
YWQwMTgwHhcNMjYwOTIzMTAwMTE3WhcNMjYwOTI0MTAwMTE3WjAzMTEwLwYDVQQD
Eyg4NWQ2YjA4OTA0MTY0NDdmYTIyOTljNzViMTgwYzVmYWY0ZjQxOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifCt59ygS9Da5nZcccz1LHcpdo5
vtSumw6MoOyqaA42S/j82CHFT7lRaC6KlndwvqwrDV7jVws5N3y+aJZV8v2RLrX8
tRxYbklCP8aINCPrwUaV5OkDOL2TRNnJVx3WdRsMQrE7A1G1jipqp7HwVfypSJKE
bIaLb9RShKASVm+MN/cJPorG2TnK6MM9VdPi5je/c3QKuTk1lvQGhdXR7EmdONVG
desrPEqiPzxIg14d5ChOTivZQfzvF4Xx6QydVAUpKgKaUBdAVI9ejuvtyltA1rJp
VPRSZD7WfmZbGKkl5uiBLRb/Z5/JOEZYnCW2jLO2akT7ZANvAfHKGaEKwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXWsIkEFkR/oimcdbGAxfr09BmLMB8GA1UdIwQY
MBaAFHOE5Qjjrfjt1vKiQs2ta96aWtAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUt
NTViNjc3MjM1ZWIzLzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wNjZkYjItZDM1Yy00ODFmLWJhNTUtNTViNjc3MjM1ZWIz
LzEvYzRUbENPT3QtTzNXOHFKQ3phMXIzcHBhMEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwtzXrkT
S3v/WNUQDzIZOFYI133KmcyC2wie0ewWpl7igx36NdHLNBrweR2/93aVD+7vwyvd
H+8NkmkkDyDaJ2uHrfQoW9xa/UJWYTh1pnq3kg2n8EoXkLYlHT4aFw/+aR9b61Jg
8U1TdGs+jeCb/DauECCMCEdsPdmjvJaDZ1YN2AR9xuuWmYbVUMY7Pya971v2glh+
k3LkmLBEkMZgcBzyvixjQM1PWGbvYfotlV/E0eh7oC+cFZ7ngBGfTFPhTqbtf50k
ABiYAIzGv/5BaNG00o5mA+ZroqyOuFg6GU5QdIyRKV6Tj6ZHgJ5SxYJTEZYWO5yL
ZX3zlagct7AZNQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:31:28 2026 by rpki-client