Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File: Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier: EZ7ouCOpK20IXyEtXiVXQCFC3LJPSM7TPux6FkBCxjM=
Subject key identifier: 01:31:A5:37:D8:48:5D:C8:EE:77:AA:E1:F4:96:5F:2D:1F:E9:78:C7
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer: /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial: 01A0C6A10C25BDB9D807896B04749509D9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 01:00:38 +0000
Manifest this update: Tue 22 Sep 2026 01:00:38 +0000
Manifest next update: Wed 23 Sep 2026 01:00:38 +0000
Files and hashes: 1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: 9W/zQQq546lRx1FsrlvCn/YbEjcYsWHhyCvTNYiJP6Q=)
2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:0c:25:bd:b9:d8:07:89:6b:04:74:95:09:d9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Validity
Not Before: Sep 22 01:00:38 2026 GMT
Not After : Sep 23 01:00:38 2026 GMT
Subject: CN=0131a537d8485dc8ee77aae1f4965f2d1fe978c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:6f:3d:3c:86:00:60:4a:ab:12:9b:8d:4c:
70:ba:e2:b6:d2:7b:de:5c:a7:12:a0:f7:35:32:4f:
20:b0:5b:eb:07:2e:01:b0:22:8a:4b:26:75:28:48:
b5:9f:de:75:d8:52:72:b7:e2:a9:f7:08:81:d0:e7:
2b:03:b3:91:6b:aa:a8:b1:72:7a:d5:a8:c3:ce:5d:
ca:c8:1d:a3:db:5f:54:2c:8c:50:4b:8c:d9:70:1f:
c9:21:7c:47:89:77:fb:2f:32:ff:79:e7:01:3c:25:
cf:76:b7:5c:c8:e1:22:ca:8d:94:4c:75:27:d0:fa:
bc:11:57:17:bb:cf:48:a3:66:12:28:0d:2e:91:1e:
98:89:a2:77:b5:c7:f1:43:d4:5b:3e:cd:72:58:91:
cf:81:bf:6d:39:d5:7f:46:b6:a1:49:2e:9c:54:6a:
8c:29:2f:7e:d7:df:9f:0e:f3:41:11:95:d1:05:f7:
5a:44:b1:06:26:b1:2b:a6:31:f5:84:36:1c:8f:e2:
a5:39:ea:18:d6:aa:d2:0d:35:2f:78:55:71:8b:9c:
23:49:d0:6f:75:5c:b8:09:d9:1f:2d:69:5c:6f:db:
90:12:55:52:17:64:2f:4e:d0:62:52:3e:b3:d2:6c:
ab:db:f5:bd:c4:a6:cd:37:b9:b5:d6:53:27:ef:09:
19:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:31:A5:37:D8:48:5D:C8:EE:77:AA:E1:F4:96:5F:2D:1F:E9:78:C7
X509v3 Authority Key Identifier:
keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ed:3e:bf:05:8a:fd:fb:77:0d:8d:77:c6:12:e7:90:ea:7d:
0e:bb:cb:14:95:a9:b3:20:4c:29:b5:fa:af:14:1d:0e:4c:8f:
43:c4:0d:6e:37:ef:41:8c:2b:08:b7:bb:3f:67:4e:ff:53:94:
94:cc:96:55:5d:f9:3c:d6:9d:96:72:05:f5:4c:72:a0:37:f7:
4e:86:d5:15:fa:9c:5f:03:70:39:bb:0d:1e:00:17:98:33:fc:
a0:38:94:94:20:f5:80:bc:6a:16:34:01:75:62:ab:ba:1d:0b:
5a:5e:4d:d3:e1:a5:78:c9:ad:bb:dc:1a:b6:b3:4d:8b:b7:ed:
a3:e8:b5:9f:a0:e7:fd:7e:25:cb:14:61:29:ca:56:c1:c1:28:
9d:a7:be:ce:72:88:e0:7d:96:91:a9:92:29:36:b8:dd:1b:24:
5e:17:4e:3a:63:46:c4:ba:cf:4d:d6:be:29:8a:14:95:40:75:
97:65:dd:12:0f:52:39:85:2c:86:cb:81:cb:5b:cc:df:f9:2d:
cd:07:1a:0e:10:5a:c8:80:af:f8:ba:87:88:eb:dc:fa:53:03:
52:c4:3d:59:a8:81:44:a8:0c:ae:e7:14:3e:2d:5d:dc:8f:90:
ff:39:1e:f2:5d:49:82:af:5a:55:af:31:98:83:09:9d:16:a7:
f3:69:e6:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoQwlvbnYB4lrBHSVCdnEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi
MWE5OGEwHhcNMjYwOTIyMDEwMDM4WhcNMjYwOTIzMDEwMDM4WjAzMTEwLwYDVQQD
EygwMTMxYTUzN2Q4NDg1ZGM4ZWU3N2FhZTFmNDk2NWYyZDFmZTk3OGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu5vPTyGAGBKqxKbjUxwuuK20nve
XKcSoPc1Mk8gsFvrBy4BsCKKSyZ1KEi1n9512FJyt+Kp9wiB0OcrA7ORa6qosXJ6
1ajDzl3KyB2j219ULIxQS4zZcB/JIXxHiXf7LzL/eecBPCXPdrdcyOEiyo2UTHUn
0Pq8EVcXu89Io2YSKA0ukR6YiaJ3tcfxQ9RbPs1yWJHPgb9tOdV/RrahSS6cVGqM
KS9+19+fDvNBEZXRBfdaRLEGJrErpjH1hDYcj+KlOeoY1qrSDTUveFVxi5wjSdBv
dVy4CdkfLWlcb9uQElVSF2QvTtBiUj6z0myr2/W9xKbNN7m11lMn7wkZOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAExpTfYSF3I7neq4fSWXy0f6XjHMB8GA1UdIwQY
MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt
NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl
LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde0+vwWK
/ft3DY13xhLnkOp9DrvLFJWpsyBMKbX6rxQdDkyPQ8QNbjfvQYwrCLe7P2dO/1OU
lMyWVV35PNadlnIF9UxyoDf3TobVFfqcXwNwObsNHgAXmDP8oDiUlCD1gLxqFjQB
dWKruh0LWl5N0+GleMmtu9watrNNi7fto+i1n6Dn/X4lyxRhKcpWwcEonae+znKI
4H2WkamSKTa43RskXhdOOmNGxLrPTda+KYoUlUB1l2XdEg9SOYUshsuBy1vM3/kt
zQcaDhBayICv+LqHiOvc+lMDUsQ9WaiBRKgMrucUPi1d3I+Q/zke8l1Jgq9aVa8x
mIMJnRan82nmGA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:34:39 2026 by rpki-client