Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: sj0e8rbPf0Z4TeRQnMIvYChMRhegfxRLXSMXeKWAukE=
Subject key identifier: 3B:08:B4:35:B6:DD:F1:37:6E:1B:20:68:B3:17:D8:0C:23:65:C7:EF
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 01A0C47C55ACB418B42CCBD7227FDD862C2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 19B9
Signing time: Mon 21 Sep 2026 15:01:17 +0000
Manifest this update: Mon 21 Sep 2026 15:01:17 +0000
Manifest next update: Tue 22 Sep 2026 15:01:17 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: xBFvl3C/BLlrIVtZfxEy0DwwzeHzMwYqhwdU+JrbnDA=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:55:ac:b4:18:b4:2c:cb:d7:22:7f:dd:86:2c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Sep 21 15:01:17 2026 GMT
Not After : Sep 22 15:01:17 2026 GMT
Subject: CN=3b08b435b6ddf1376e1b2068b317d80c2365c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:2a:bb:b9:d9:36:60:4a:46:87:1a:f5:dd:
87:77:17:06:bb:81:21:7a:97:ce:d7:2c:79:22:b0:
21:b0:d6:20:87:43:d6:ba:c9:4c:4a:b3:1e:a1:17:
50:ba:e2:0f:42:f9:53:68:0f:2c:96:fd:f0:9c:5c:
d2:06:15:3f:fd:51:72:d9:03:4a:6d:a0:5f:9c:58:
ec:f3:a7:09:22:ce:ad:2f:ce:26:61:5a:5d:07:27:
7b:69:c9:f8:f7:78:39:5b:23:7f:39:57:61:cc:40:
0e:f2:8a:7e:45:43:5b:ef:07:9b:31:ae:06:5e:e0:
42:2c:71:d6:6f:a3:ca:93:4f:3f:53:e0:82:82:df:
28:81:e0:52:76:6c:9b:ce:66:2c:d1:1e:d6:c6:30:
b1:c8:9e:be:83:86:18:fa:06:96:95:fc:76:9b:8d:
69:ce:8a:c1:48:1a:77:0f:86:93:db:8b:98:bb:f0:
73:27:7a:9e:11:62:c5:b9:e0:de:ed:65:8a:54:36:
84:bb:4d:54:1b:20:f2:21:2c:9a:5b:05:fc:ad:bf:
d4:42:1d:cf:24:6c:8c:e7:25:0a:4e:a7:3e:90:97:
95:82:79:17:66:e5:6e:9b:d1:20:4e:d9:a8:6e:f0:
a0:64:cf:89:9a:cb:0e:19:76:a5:8b:30:43:4f:84:
12:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:B4:35:B6:DD:F1:37:6E:1B:20:68:B3:17:D8:0C:23:65:C7:EF
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:50:38:32:30:a0:f0:26:1e:09:89:fc:bf:f0:1e:9b:d5:95:
9e:96:c9:57:da:bd:bb:d3:2f:95:8b:99:da:97:d2:26:aa:0c:
de:28:9e:8a:0f:c8:76:a2:6c:41:79:66:5f:ea:8c:2a:e3:c8:
14:a1:4c:c0:d0:b3:10:2e:59:21:1f:b2:59:18:61:1b:d1:f0:
e9:9e:0f:fe:ed:ff:06:23:89:58:ce:63:23:61:9e:d4:c5:d6:
76:27:f1:59:b3:d3:a0:fb:02:71:98:a5:41:85:21:01:c3:55:
e7:ea:44:46:44:0b:c4:d6:67:59:85:c9:07:69:d4:9a:a4:7d:
06:41:a9:25:67:de:f9:40:60:44:d6:f1:c0:1f:81:e8:d1:1d:
5f:60:2e:a4:3d:0c:2c:9e:1f:59:ea:a8:9e:65:55:98:d7:00:
fd:cc:a1:a5:c3:c7:71:1f:01:49:58:4e:33:d2:1f:8c:ad:cb:
95:c5:77:16:f1:00:3c:c9:a5:fa:67:d7:4e:d1:16:5b:e9:61:
11:35:a3:41:d2:b3:45:99:b8:60:55:0b:c1:fe:52:06:af:23:
7a:21:e7:da:dc:83:f0:29:ae:38:78:ab:21:b6:89:92:9b:7d:
e2:5b:91:a2:7e:91:e3:15:41:fa:ea:e5:28:5a:37:55:31:9d:
73:1b:0e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEfFWstBi0LMvXIn/dhiwqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2QzZmI2YTg2M2FjMGZhNGQxZmVlZmUzYWVjMzllZDhk
Mzg5NWMwHhcNMjYwOTIxMTUwMTE3WhcNMjYwOTIyMTUwMTE3WjAzMTEwLwYDVQQD
EygzYjA4YjQzNWI2ZGRmMTM3NmUxYjIwNjhiMzE3ZDgwYzIzNjVjN2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Qqu7nZNmBKRoca9d2HdxcGu4Eh
epfO1yx5IrAhsNYgh0PWuslMSrMeoRdQuuIPQvlTaA8slv3wnFzSBhU//VFy2QNK
baBfnFjs86cJIs6tL84mYVpdByd7acn493g5WyN/OVdhzEAO8op+RUNb7webMa4G
XuBCLHHWb6PKk08/U+CCgt8ogeBSdmybzmYs0R7WxjCxyJ6+g4YY+gaWlfx2m41p
zorBSBp3D4aT24uYu/BzJ3qeEWLFueDe7WWKVDaEu01UGyDyISyaWwX8rb/UQh3P
JGyM5yUKTqc+kJeVgnkXZuVum9EgTtmobvCgZM+JmssOGXalizBDT4QS6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsItDW23fE3bhsgaLMX2AwjZcfvMB8GA1UdIwQY
MBaAFOE9P7aoY6wPpNH+7+Ouw57Y04lcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEt
YTM5ZTAwOTYyN2VmLzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEtYTM5ZTAwOTYyN2Vm
LzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFA4MjCg
8CYeCYn8v/Aem9WVnpbJV9q9u9MvlYuZ2pfSJqoM3iieig/IdqJsQXlmX+qMKuPI
FKFMwNCzEC5ZIR+yWRhhG9Hw6Z4P/u3/BiOJWM5jI2Ge1MXWdifxWbPToPsCcZil
QYUhAcNV5+pERkQLxNZnWYXJB2nUmqR9BkGpJWfe+UBgRNbxwB+B6NEdX2AupD0M
LJ4fWeqonmVVmNcA/cyhpcPHcR8BSVhOM9IfjK3LlcV3FvEAPMml+mfXTtEWW+lh
ETWjQdKzRZm4YFULwf5SBq8jeiHn2tyD8CmuOHirIbaJkpt94luRon6R4xVB+url
KFo3VTGdcxsO/w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:35:38 2026 by rpki-client