Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
File: kTgbyWneatw9HdwOuJve6s6YBc0.mft (raw, json)
Hash identifier: WEVFtkYH7GhsqD7KPqXD6WinYW+QWzNoCwjx7dACf2E=
Subject key identifier: 5C:3C:8B:B1:68:62:AF:D8:CC:6A:04:ED:11:26:04:30:82:89:C6:D9
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 01A0C88F212FEB91821991D5FDC2EC5D8130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
Manifest number: 0E64
Signing time: Tue 22 Sep 2026 10:00:18 +0000
Manifest this update: Tue 22 Sep 2026 10:00:18 +0000
Manifest next update: Wed 23 Sep 2026 10:00:18 +0000
Files and hashes: 1: BL4Vtry3hEpte5DWArEP18F1cE0.roa (hash: gofiyS9syREpyRSAEswnOrvXK3X11R7n1mcI61HsmZo=)
2: De10BA3lyb6wC65o9g_3Z3Rq9oE.roa (hash: n2SRcsi6LtLV6qCMUUDWO/sW9w7HRsZQAdCEZ81fiO8=)
3: cOhgkIDZUSB-UMCTxrDrvsLKmnc.roa (hash: J8fumuS9RwLV1jOdIP4cqRgqwBElG3GCVerOnC7YBBM=)
4: kTgbyWneatw9HdwOuJve6s6YBc0.crl (hash: xYanFhT2jK9miZi2sUCTDbI0KOG+Hwjk5cEAqNCMPv4=)
5: o14utqHYZFxhZfVEkq-FP4EOMBc.roa (hash: s9KvSuwsAo53TsaYUbZWoSvNDjlPZyPjIsdZ0Auhgao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:21:2f:eb:91:82:19:91:d5:fd:c2:ec:5d:81:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Sep 22 10:00:18 2026 GMT
Not After : Sep 23 10:00:18 2026 GMT
Subject: CN=5c3c8bb16862afd8cc6a04ed112604308289c6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:ef:70:93:1b:55:0a:d7:02:18:e0:66:c7:
9c:b0:85:04:6a:1e:98:70:0a:80:d8:24:77:42:d4:
d0:06:95:74:ab:a6:27:6e:17:cc:79:36:55:07:75:
f9:a1:be:ee:c3:76:b4:fa:6a:53:3a:19:16:9d:7a:
eb:18:52:48:a8:81:e9:a3:ac:8f:8b:5c:33:c2:3a:
bb:21:7b:4f:af:96:53:fa:55:47:e9:d3:e6:67:51:
74:5a:1f:ab:e3:ac:bf:50:6c:85:15:30:44:cc:fa:
41:0f:63:5e:4a:83:ee:c1:54:dc:9e:bd:3e:e2:5f:
35:99:16:2f:2b:40:1d:5a:dc:5c:3e:a0:19:e1:8e:
75:c0:72:a2:f6:e9:8f:e0:5c:73:b3:d6:32:19:f2:
b6:70:b9:52:dd:5d:83:f8:56:64:f4:26:c7:73:64:
05:62:98:85:f3:b0:76:3b:15:13:ad:a3:b6:40:8f:
8d:f2:5d:e7:cd:07:0b:fe:0f:7a:68:6d:17:ab:44:
a0:95:b0:65:30:ed:f0:c7:68:92:74:59:b9:c4:6f:
9b:46:25:94:e2:d9:6d:56:3a:a2:8f:bc:b9:8c:0c:
22:5f:f1:19:7a:8f:cb:25:6f:3a:52:92:19:e6:ce:
c9:f9:58:2e:f8:da:ca:f2:2f:36:d7:2b:2c:98:43:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3C:8B:B1:68:62:AF:D8:CC:6A:04:ED:11:26:04:30:82:89:C6:D9
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:cd:95:10:37:1f:3f:c0:de:d0:29:79:d4:96:fa:90:de:
7b:cd:5b:79:67:b5:f2:80:9e:59:7c:f3:c1:61:5d:39:63:b0:
db:52:38:d9:3b:73:bd:5e:8a:14:83:25:d7:97:5d:17:a1:1a:
65:16:c8:f5:10:c4:13:54:d8:4a:f5:a2:0b:7c:c2:83:f5:b3:
52:0c:23:25:27:f2:23:ad:2e:c5:6a:e3:76:4d:37:e7:e7:23:
7f:52:80:61:0d:27:aa:59:8a:e9:7d:16:b4:cc:8d:ca:e3:0c:
46:f8:b9:2a:11:63:9b:27:65:64:a8:02:05:5a:50:c7:99:ff:
7c:05:d6:5b:e3:2e:5d:5f:ec:14:3f:8f:c1:53:c7:e1:a1:84:
a5:ee:ce:14:87:19:dc:29:59:51:0a:f8:17:7b:45:0d:59:97:
b3:2f:da:7a:86:97:64:d0:15:77:0b:b1:4f:71:bc:9e:2d:9d:
89:81:b9:79:a7:43:01:a3:b6:d6:23:98:f8:e7:6d:e6:a4:77:
3b:e8:af:4b:b6:bb:c7:28:44:6b:5a:14:ed:ef:6c:07:40:df:
a0:cf:e4:8d:ee:58:6f:9d:bf:20:15:38:63:17:1d:30:d2:47:
a1:e3:47:e8:45:09:2a:2d:98:8f:5c:3e:cb:d0:48:35:d8:37:
6f:70:7d:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIjyEv65GCGZHV/cLsXYEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMzgxYmM5NjlkZTZhZGMzZDFkZGMwZWI4OWJkZWVhY2U5
ODA1Y2QwHhcNMjYwOTIyMTAwMDE4WhcNMjYwOTIzMTAwMDE4WjAzMTEwLwYDVQQD
Eyg1YzNjOGJiMTY4NjJhZmQ4Y2M2YTA0ZWQxMTI2MDQzMDgyODljNmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjfvcJMbVQrXAhjgZsecsIUEah6Y
cAqA2CR3QtTQBpV0q6YnbhfMeTZVB3X5ob7uw3a0+mpTOhkWnXrrGFJIqIHpo6yP
i1wzwjq7IXtPr5ZT+lVH6dPmZ1F0Wh+r46y/UGyFFTBEzPpBD2NeSoPuwVTcnr0+
4l81mRYvK0AdWtxcPqAZ4Y51wHKi9umP4Fxzs9YyGfK2cLlS3V2D+FZk9CbHc2QF
YpiF87B2OxUTraO2QI+N8l3nzQcL/g96aG0Xq0SglbBlMO3wx2iSdFm5xG+bRiWU
4tltVjqij7y5jAwiX/EZeo/LJW86UpIZ5s7J+Vgu+NrK8i821yssmEN+hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw8i7FoYq/YzGoE7REmBDCCicbZMB8GA1UdIwQY
MBaAFJE4G8lp3mrcPR3cDrib3urOmAXNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMt
MjU2ZGE5NWQxMzQ1LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mMzU0MDYtZDhjNC00ZjVjLTkyYWMtMjU2ZGE5NWQxMzQ1
LzEva1RnYnlXbmVhdHc5SGR3T3VKdmU2czZZQmMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtjNlRA3
Hz/A3tApedSW+pDee81beWe18oCeWXzzwWFdOWOw21I42TtzvV6KFIMl15ddF6Ea
ZRbI9RDEE1TYSvWiC3zCg/WzUgwjJSfyI60uxWrjdk035+cjf1KAYQ0nqlmK6X0W
tMyNyuMMRvi5KhFjmydlZKgCBVpQx5n/fAXWW+MuXV/sFD+PwVPH4aGEpe7OFIcZ
3ClZUQr4F3tFDVmXsy/aeoaXZNAVdwuxT3G8ni2diYG5eadDAaO21iOY+Odt5qR3
O+ivS7a7xyhEa1oU7e9sB0DfoM/kje5Yb52/IBU4YxcdMNJHoeNH6EUJKi2Yj1w+
y9BINdg3b3B9hw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:47:05 2026 by rpki-client