Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: 0i1S8ftjmHNnPgy+0GOJ0n2BKMGjMAHuMOd31XEG9rI=
Subject key identifier: 64:B8:42:3F:29:A5:A6:8A:88:39:68:B7:52:9E:E7:86:29:D9:43:E7
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01A0C557B27E88EDEEED8ABE1471E0BF1B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 137B
Signing time: Mon 21 Sep 2026 19:00:53 +0000
Manifest this update: Mon 21 Sep 2026 19:00:53 +0000
Manifest next update: Tue 22 Sep 2026 19:00:53 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: tJQbEwFXbFEoEpaua6T2E43tvoKub04D7mbHf+NDAM0=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:b2:7e:88:ed:ee:ed:8a:be:14:71:e0:bf:1b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Sep 21 19:00:53 2026 GMT
Not After : Sep 22 19:00:53 2026 GMT
Subject: CN=64b8423f29a5a68a883968b7529ee78629d943e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:39:9a:63:fe:19:22:89:9c:ae:a9:a8:da:
b4:47:57:cc:f2:bb:8e:17:0c:95:64:60:0a:0a:22:
68:a9:8f:14:80:10:fe:f1:80:ff:17:32:3e:c0:9a:
dc:99:ad:72:bb:46:00:62:bd:4d:df:78:57:99:de:
35:bc:78:7e:6b:f1:72:5f:db:d5:dc:63:50:38:5d:
31:51:77:0a:62:27:7b:f2:44:10:ca:32:dc:cb:98:
32:0a:f4:d3:a8:0d:08:15:79:7c:22:b5:4d:1d:de:
11:af:e6:61:fd:c4:e8:05:9b:c4:e2:bf:b6:7b:62:
84:ff:aa:d7:69:2b:9b:c3:51:50:31:bf:6d:fa:d1:
04:c0:d6:52:74:3b:b9:8e:f2:77:fe:df:e3:1c:65:
c2:51:f7:76:31:5a:13:9a:dd:53:71:7b:15:3d:06:
9e:b1:5d:8d:cc:da:21:64:4c:1d:da:49:8e:91:50:
0d:78:1a:26:73:30:86:cf:61:81:42:08:3e:26:d5:
d3:49:47:ed:11:cb:8a:a1:6a:7e:13:d6:18:94:6a:
56:f5:bf:2f:7c:4f:ad:5c:bb:2b:08:12:cc:99:8d:
b5:4a:b5:01:ee:3f:9b:c1:f5:cd:9a:0a:10:69:21:
b7:d6:95:b5:1d:a3:1f:29:76:86:a4:11:12:24:d0:
14:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B8:42:3F:29:A5:A6:8A:88:39:68:B7:52:9E:E7:86:29:D9:43:E7
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:74:78:a9:5b:9d:00:79:d4:31:13:e2:aa:ca:1e:4b:6c:2e:
5e:b5:18:b6:b8:81:2d:35:51:63:3a:dc:e7:20:a3:86:2c:44:
c6:bc:15:dd:b7:e4:eb:33:4c:c0:65:66:36:5a:8c:32:b7:0e:
35:2f:29:d1:60:2a:d7:1e:ea:4a:2a:38:f9:cf:5b:f7:c7:f2:
16:9d:eb:e7:30:fa:6a:aa:85:f7:3b:00:26:c7:3b:2d:a0:2f:
f7:5e:bb:6e:1e:f2:5e:0f:33:36:c5:fd:58:97:de:b8:a8:77:
d1:ef:f3:e8:88:1c:2a:65:d5:d1:e6:a5:4e:d4:ab:74:76:a2:
98:cf:0e:df:c3:31:34:c7:f2:5c:9b:46:8f:4b:2f:0a:68:f7:
b8:15:57:a5:de:3f:0a:c9:1a:d2:6d:57:de:20:fe:b3:1d:f6:
37:b5:77:44:39:9f:7d:41:fa:e6:a3:d7:bd:ca:66:27:9e:5b:
d2:d6:3e:ce:dc:ae:55:83:58:ed:8c:2a:1d:02:10:c0:d7:d2:
4d:64:bd:be:ab:af:76:a5:f2:d6:95:1f:45:21:fb:5b:ef:6e:
4a:8e:7e:f6:d2:24:9b:20:c1:a3:96:10:4e:f2:07:27:e5:10:
da:85:84:2b:5d:0e:1c:e2:c5:c4:40:2b:db:3f:70:78:fa:7f:
87:6b:a5:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV7J+iO3u7Yq+FHHgvxtGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1
YzUwM2EwHhcNMjYwOTIxMTkwMDUzWhcNMjYwOTIyMTkwMDUzWjAzMTEwLwYDVQQD
Eyg2NGI4NDIzZjI5YTVhNjhhODgzOTY4Yjc1MjllZTc4NjI5ZDk0M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY85mmP+GSKJnK6pqNq0R1fM8ruO
FwyVZGAKCiJoqY8UgBD+8YD/FzI+wJrcma1yu0YAYr1N33hXmd41vHh+a/FyX9vV
3GNQOF0xUXcKYid78kQQyjLcy5gyCvTTqA0IFXl8IrVNHd4Rr+Zh/cToBZvE4r+2
e2KE/6rXaSubw1FQMb9t+tEEwNZSdDu5jvJ3/t/jHGXCUfd2MVoTmt1TcXsVPQae
sV2NzNohZEwd2kmOkVANeBomczCGz2GBQgg+JtXTSUftEcuKoWp+E9YYlGpW9b8v
fE+tXLsrCBLMmY21SrUB7j+bwfXNmgoQaSG31pW1HaMfKXaGpBESJNAUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS4Qj8ppaaKiDlot1Ke54Yp2UPnMB8GA1UdIwQY
MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt
MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0
LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1XR4qVud
AHnUMRPiqsoeS2wuXrUYtriBLTVRYzrc5yCjhixExrwV3bfk6zNMwGVmNlqMMrcO
NS8p0WAq1x7qSio4+c9b98fyFp3r5zD6aqqF9zsAJsc7LaAv9167bh7yXg8zNsX9
WJfeuKh30e/z6IgcKmXV0ealTtSrdHaimM8O38MxNMfyXJtGj0svCmj3uBVXpd4/
Cska0m1X3iD+sx32N7V3RDmffUH65qPXvcpmJ55b0tY+ztyuVYNY7YwqHQIQwNfS
TWS9vquvdqXy1pUfRSH7W+9uSo5+9tIkmyDBo5YQTvIHJ+UQ2oWEK10OHOLFxEAr
2z9wePp/h2ul2g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:03:30 2026 by rpki-client