Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: G38vB2mHC7Vj8VR+gL8xuywrOJiKBTs2jyv6hiqwAVU=
Subject key identifier: 30:60:09:4D:F7:5E:CB:0A:DA:B0:A7:31:B7:34:A9:4A:7D:40:FE:69
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 01A0C368CA1EFCA1BDB87C8CDD98EB85B0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 10:00:19 +0000
Manifest this update: Mon 21 Sep 2026 10:00:19 +0000
Manifest next update: Tue 22 Sep 2026 10:00:19 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: wbZSj0LHx/tOW13pfsgZgmhnoSFD3g/mew2PAtRYNMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:ca:1e:fc:a1:bd:b8:7c:8c:dd:98:eb:85:b0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Sep 21 10:00:19 2026 GMT
Not After : Sep 22 10:00:19 2026 GMT
Subject: CN=3060094df75ecb0adab0a731b734a94a7d40fe69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:40:8d:ee:b2:d6:62:a8:62:53:23:eb:58:
9d:1d:67:1a:a5:c3:d2:fa:25:b6:43:c1:0f:f0:65:
23:66:b7:38:84:13:e5:dc:7d:54:08:a8:16:70:8b:
6f:70:37:5f:6d:ee:12:9d:d6:53:a6:8f:55:c6:1e:
c4:36:72:b8:90:dc:f3:94:d7:23:53:fd:df:6f:3e:
dd:2d:d6:d8:8a:76:ff:64:6a:ad:5f:5f:df:df:7d:
94:9e:b2:fd:ed:2f:4e:54:0b:52:fe:70:19:0e:43:
98:45:b0:88:dc:f9:d8:04:4c:7e:cb:09:ff:ed:46:
b5:21:e8:82:f1:e9:39:a8:9b:ee:a5:f9:93:8c:df:
67:c9:cf:6e:a3:e4:b0:8b:26:3c:7b:0c:8f:81:00:
28:60:82:82:ec:e8:14:d4:74:94:5d:f6:63:69:31:
8c:e2:6e:a5:fc:da:65:3a:7f:6f:fd:7c:00:b4:0c:
8f:b6:09:a2:ff:42:94:24:a3:7b:ff:0f:f1:0f:a6:
72:39:ce:a6:61:da:61:5f:c1:27:6a:84:ed:22:8c:
05:5f:d9:a0:c8:87:ad:72:ac:25:a3:cb:a3:68:d0:
0f:de:b8:a1:0d:d1:ea:6c:66:07:22:b5:f5:05:3b:
f3:64:0f:bf:a2:78:6e:f0:c6:da:ae:42:50:e6:b9:
35:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:60:09:4D:F7:5E:CB:0A:DA:B0:A7:31:B7:34:A9:4A:7D:40:FE:69
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:93:f8:1a:32:82:2f:87:94:2b:15:82:68:35:31:d3:0a:ee:
66:00:b1:9e:31:ef:63:55:d3:41:13:a3:4e:9a:2a:4d:c3:ae:
b0:d2:c6:62:67:61:f8:ec:3f:0a:c0:3b:2e:33:d5:be:df:f9:
55:1e:c5:91:93:1f:56:4c:33:e8:2c:cc:f7:40:7e:47:d1:af:
45:6a:eb:8e:33:27:f2:7c:4b:3f:b0:3b:7d:1d:fe:27:8e:f1:
19:9e:82:c6:72:70:45:f6:d8:66:30:e3:13:46:24:30:48:20:
a5:4d:40:7c:61:66:a9:5a:5a:fb:29:bf:fa:a1:53:0d:04:69:
f4:cb:e5:d2:e4:7f:f6:88:b0:b9:2e:b2:c4:d5:a0:dd:52:c4:
12:40:74:c6:b5:4f:69:77:c6:d7:63:1e:5c:c2:88:a6:89:03:
b6:94:4d:d7:c9:99:cb:fd:71:11:6f:12:1e:a9:65:be:73:7c:
16:e5:81:5c:18:1e:05:5f:71:e8:5b:88:46:da:6b:08:40:63:
d9:e7:ae:fe:2c:29:46:bf:af:9a:29:1b:ec:d6:4e:8c:56:96:
f4:19:78:b1:95:e4:fb:2a:f6:66:b5:7f:8f:e7:a2:a4:8c:ba:
f2:00:1d:08:5e:1f:65:cf:6c:e4:bc:75:43:a8:29:fa:42:87:
e0:ec:47:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaMoe/KG9uHyM3ZjrhbClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy
MTk0ZmEwHhcNMjYwOTIxMTAwMDE5WhcNMjYwOTIyMTAwMDE5WjAzMTEwLwYDVQQD
EygzMDYwMDk0ZGY3NWVjYjBhZGFiMGE3MzFiNzM0YTk0YTdkNDBmZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrRAje6y1mKoYlMj61idHWcapcPS
+iW2Q8EP8GUjZrc4hBPl3H1UCKgWcItvcDdfbe4SndZTpo9Vxh7ENnK4kNzzlNcj
U/3fbz7dLdbYinb/ZGqtX1/f332UnrL97S9OVAtS/nAZDkOYRbCI3PnYBEx+ywn/
7Ua1IeiC8ek5qJvupfmTjN9nyc9uo+SwiyY8ewyPgQAoYIKC7OgU1HSUXfZjaTGM
4m6l/NplOn9v/XwAtAyPtgmi/0KUJKN7/w/xD6ZyOc6mYdphX8EnaoTtIowFX9mg
yIetcqwlo8ujaNAP3rihDdHqbGYHIrX1BTvzZA+/onhu8MbarkJQ5rk13QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBgCU33XssK2rCnMbc0qUp9QP5pMB8GA1UdIwQY
MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt
NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx
LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5P4GjKC
L4eUKxWCaDUx0wruZgCxnjHvY1XTQROjTpoqTcOusNLGYmdh+Ow/CsA7LjPVvt/5
VR7FkZMfVkwz6CzM90B+R9GvRWrrjjMn8nxLP7A7fR3+J47xGZ6CxnJwRfbYZjDj
E0YkMEggpU1AfGFmqVpa+ym/+qFTDQRp9Mvl0uR/9oiwuS6yxNWg3VLEEkB0xrVP
aXfG12MeXMKIpokDtpRN18mZy/1xEW8SHqllvnN8FuWBXBgeBV9x6FuIRtprCEBj
2eeu/iwpRr+vmikb7NZOjFaW9Bl4sZXk+yr2ZrV/j+eipIy68gAdCF4fZc9s5Lx1
Q6gp+kKH4OxHXA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:49:28 2026 by rpki-client