Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: X0mc/0HPDV5amhGt+7jFIhY3NHgu00jgXRpNSlAstqI=
Subject key identifier: D5:6C:B0:1B:F6:92:64:A9:DE:E0:8C:17:DA:92:64:35:B3:12:5C:EB
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 01A0C7B3DA350210FB829067DBA25FD49C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 06:00:47 +0000
Manifest this update: Tue 22 Sep 2026 06:00:47 +0000
Manifest next update: Wed 23 Sep 2026 06:00:47 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: +m4jWjYECJNwn8th6bzu7nHhZtWET8IGw3XGZ53LyAk=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:da:35:02:10:fb:82:90:67:db:a2:5f:d4:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Sep 22 06:00:47 2026 GMT
Not After : Sep 23 06:00:47 2026 GMT
Subject: CN=d56cb01bf69264a9dee08c17da926435b3125ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:fe:b6:e1:86:31:c3:40:5b:25:99:1c:a2:
f3:02:e4:74:0a:ef:23:29:dc:62:1f:91:ef:1e:7f:
b6:68:cf:86:04:74:dc:3d:4b:10:2e:55:a5:47:e1:
ce:3a:db:f1:e3:e7:d1:95:24:fe:04:61:06:5e:45:
ae:19:0e:ef:9d:bd:a5:b7:0c:90:c8:c9:3a:81:27:
12:99:99:e4:6f:61:40:77:f1:7c:d0:e7:8a:1b:65:
83:61:89:68:dd:71:e6:05:a9:f7:b1:a1:41:46:58:
28:52:b1:b0:39:72:6e:cb:9c:7d:3d:b0:ef:01:08:
c8:e8:cd:6b:1b:fe:f3:92:0d:29:b5:2b:42:ff:29:
89:77:63:b3:2d:e7:d9:fb:d9:6b:04:51:44:a7:ac:
62:77:83:57:bd:e4:77:4d:ba:69:b2:cf:ba:04:77:
b0:34:e2:8e:9a:c0:21:91:0b:41:d5:00:cb:bc:8b:
eb:54:44:90:82:18:57:ee:79:02:df:c5:89:5c:47:
06:e8:e0:c4:21:e2:99:3d:3b:8e:23:2b:63:1a:94:
42:74:44:ed:b7:e1:8e:54:e7:50:e4:8e:af:9c:a9:
c9:dc:50:34:79:7d:32:63:c3:fa:ce:23:f9:a7:da:
23:09:1d:93:4b:f0:74:bc:db:9d:8d:5e:f3:de:0b:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:B0:1B:F6:92:64:A9:DE:E0:8C:17:DA:92:64:35:B3:12:5C:EB
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f9:e5:0c:b0:a1:d2:d4:7b:60:dc:0a:41:79:c4:fe:a5:e3:
e9:22:06:88:8d:ba:a3:37:db:70:72:52:e6:22:3f:d1:8f:5d:
33:4f:93:06:5e:63:e7:0b:33:69:84:92:92:63:18:70:52:23:
69:e6:28:ac:e5:f9:73:75:be:e6:c2:8f:d6:84:2b:e9:8b:1b:
0a:dd:ea:06:04:bc:c8:f7:81:23:17:1a:4f:7b:ed:8c:b3:92:
59:4e:1c:3a:3a:77:8c:c7:c6:46:16:72:5f:1b:e6:6b:a7:09:
ec:62:d7:b8:c7:35:0f:85:b2:ba:88:09:3e:52:db:bf:2b:bc:
a7:6f:e7:a9:84:ec:e0:71:46:52:65:16:b7:8a:bc:75:ae:cb:
48:74:ea:8a:82:59:e4:af:46:fd:c4:e7:55:1e:9c:4b:e3:23:
be:bf:9f:0d:f7:ca:dd:89:4b:0e:89:a8:2c:ad:25:fd:35:57:
8c:84:4a:84:f2:ab:f6:80:6f:0c:10:79:b6:64:81:4a:7f:62:
87:67:f7:ce:ba:c3:eb:ea:4a:1f:7f:75:b4:88:6b:ec:f1:82:
36:36:fa:e8:17:37:fb:b3:c1:21:4a:7f:e8:62:18:88:c0:94:
5d:44:a3:43:b8:49:1f:c6:51:be:d4:85:45:ec:bb:0a:b0:b9:
30:20:1a:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs9o1AhD7gpBn26Jf1JyZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWUzZjZiZWJjZDA1MjkxZGM1MjY1ZTA4YjFjZDZjNDAx
YjljZmQwHhcNMjYwOTIyMDYwMDQ3WhcNMjYwOTIzMDYwMDQ3WjAzMTEwLwYDVQQD
EyhkNTZjYjAxYmY2OTI2NGE5ZGVlMDhjMTdkYTkyNjQzNWIzMTI1Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppL+tuGGMcNAWyWZHKLzAuR0Cu8j
KdxiH5HvHn+2aM+GBHTcPUsQLlWlR+HOOtvx4+fRlST+BGEGXkWuGQ7vnb2ltwyQ
yMk6gScSmZnkb2FAd/F80OeKG2WDYYlo3XHmBan3saFBRlgoUrGwOXJuy5x9PbDv
AQjI6M1rG/7zkg0ptStC/ymJd2OzLefZ+9lrBFFEp6xid4NXveR3Tbppss+6BHew
NOKOmsAhkQtB1QDLvIvrVESQghhX7nkC38WJXEcG6ODEIeKZPTuOIytjGpRCdETt
t+GOVOdQ5I6vnKnJ3FA0eX0yY8P6ziP5p9ojCR2TS/B0vNudjV7z3gvc/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVssBv2kmSp3uCMF9qSZDWzElzrMB8GA1UdIwQY
MBaAFLUeP2vrzQUpHcUmXgixzWxAG5z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAt
OGZhNTUxZTZhZTc1LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wMmZkZmQtN2FjOC00MzIxLWI5MzAtOGZhNTUxZTZhZTc1
LzEvdFI0X2Etdk5CU2tkeFNaZUNMSE5iRUFiblAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/nlDLCh
0tR7YNwKQXnE/qXj6SIGiI26ozfbcHJS5iI/0Y9dM0+TBl5j5wszaYSSkmMYcFIj
aeYorOX5c3W+5sKP1oQr6YsbCt3qBgS8yPeBIxcaT3vtjLOSWU4cOjp3jMfGRhZy
Xxvma6cJ7GLXuMc1D4WyuogJPlLbvyu8p2/nqYTs4HFGUmUWt4q8da7LSHTqioJZ
5K9G/cTnVR6cS+Mjvr+fDffK3YlLDomoLK0l/TVXjIRKhPKr9oBvDBB5tmSBSn9i
h2f3zrrD6+pKH391tIhr7PGCNjb66Bc3+7PBIUp/6GIYiMCUXUSjQ7hJH8ZRvtSF
Rey7CrC5MCAazA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:23:42 2026 by rpki-client