Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
File: tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft (raw, json)
Hash identifier: +VQT520ur96SulLSGPbpOHox/erAYVZMmjDRKN5zg+E=
Subject key identifier: CD:89:12:54:68:A5:67:BF:E6:71:7D:55:2C:40:62:A0:0E:86:2C:E4
Authority key identifier: B4:93:B5:93:7C:63:7E:C2:4F:F9:FB:EB:43:AD:58:8C:D4:C8:CE:BF
Certificate issuer: /CN=b493b5937c637ec24ff9fbeb43ad588cd4c8cebf
Certificate serial: 01A12B0D7F19B90EF657F7EA7E9247821976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
Manifest number: 65
Signing time: Sun 11 Oct 2026 13:01:06 +0000
Manifest this update: Sun 11 Oct 2026 13:01:06 +0000
Manifest next update: Mon 12 Oct 2026 13:01:06 +0000
Files and hashes: 1: tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl (hash: ItFe2iM4rxWpAeGOt4XVHnHkCAwWrwU6POokZaD5dMY=)
2: zuGcw_WT5p62xS2JE_SiF3vkRtY.roa (hash: 2EMrZPbz80p0xTGA51Sh6lHd46B1fhzDFjo+P/eDtD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:7f:19:b9:0e:f6:57:f7:ea:7e:92:47:82:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b493b5937c637ec24ff9fbeb43ad588cd4c8cebf
Validity
Not Before: Oct 11 13:01:06 2026 GMT
Not After : Oct 12 13:01:06 2026 GMT
Subject: CN=cd89125468a567bfe6717d552c4062a00e862ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:f9:53:a3:98:d7:b4:1b:92:b5:2b:c1:eb:
e4:d1:07:60:de:33:21:bf:44:5e:ac:ec:6d:c6:aa:
46:7b:0a:60:17:6c:6d:ce:5c:c0:49:2b:2c:fe:c1:
96:c4:5b:43:1d:da:4d:16:7e:82:cd:f1:18:9f:c4:
dd:da:00:e5:f9:9f:0e:03:be:07:0a:59:95:d6:0e:
38:f2:08:f0:2e:06:0e:72:e9:15:6f:aa:12:c2:bf:
f9:76:72:94:e3:66:ad:9b:de:65:87:fb:ed:61:be:
e3:26:d8:1d:20:58:15:3a:c0:e9:8d:4e:e9:68:1e:
55:1f:1b:9f:55:cf:50:38:3e:64:a2:a6:72:a3:05:
ea:b8:1b:d0:2c:52:ba:f1:c5:3a:ae:40:c3:0e:28:
b1:a8:c9:f1:79:f2:0e:c1:b7:8a:15:ca:ae:00:9d:
97:e7:d5:d6:0e:d5:f8:a5:18:1f:0f:1a:f0:e3:98:
ca:34:44:1f:4e:cb:bc:3e:b6:cb:f3:ab:9d:0c:b6:
ff:4a:04:dd:a4:c8:bd:1d:ab:13:11:c3:99:f5:7c:
75:34:43:68:95:a5:ca:86:10:ac:af:8f:70:47:f2:
93:78:23:5c:a7:d1:ea:8d:d2:73:c1:33:dd:04:c8:
f5:32:71:64:a2:89:76:3a:70:e1:b6:0f:66:35:b1:
3e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:12:54:68:A5:67:BF:E6:71:7D:55:2C:40:62:A0:0E:86:2C:E4
X509v3 Authority Key Identifier:
keyid:B4:93:B5:93:7C:63:7E:C2:4F:F9:FB:EB:43:AD:58:8C:D4:C8:CE:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJO1k3xjfsJP-fvrQ61YjNTIzr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/109d53-4164-4168-afb6-08076924777d/1/tJO1k3xjfsJP-fvrQ61YjNTIzr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:11:b8:7a:37:13:56:3e:08:8b:17:1b:42:cc:19:59:63:
66:3d:28:1c:b1:c6:02:1b:35:ba:c6:27:79:80:09:89:ac:b4:
fc:6c:13:27:71:41:d0:74:d4:9f:92:40:ed:a8:48:6e:2d:e3:
e2:02:19:c1:a0:d5:45:39:d5:c5:f1:01:83:cb:aa:8e:04:c2:
00:43:a8:87:a7:8c:01:b2:be:54:6c:64:01:02:20:2e:11:5a:
8a:2e:97:d1:97:cf:52:6c:69:77:05:22:9b:52:c8:e3:01:16:
0d:75:27:9b:d9:5b:8e:3d:71:07:4d:c5:94:13:fd:cd:2f:22:
91:32:c5:36:35:85:72:11:d2:ab:97:9f:be:c1:18:86:16:88:
ec:c1:28:9b:ca:15:ca:dc:16:01:d7:f8:7b:2f:0e:84:53:e1:
bd:72:b5:6c:b0:f9:49:a8:5a:50:59:3f:0a:ea:42:2e:8d:3b:
01:de:35:86:37:51:f7:44:83:a4:bb:6f:a8:82:39:49:f6:b0:
12:1a:14:3d:e9:b0:2e:ac:6f:d3:cd:f1:be:8a:1c:c2:9a:4c:
8c:24:41:89:cc:b0:e5:b0:1f:4e:81:af:81:c0:0b:5e:fa:f8:
74:8d:66:27:28:d0:22:a7:18:cb:95:39:49:61:78:51:3d:b1:
3e:be:16:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErDX8ZuQ72V/fqfpJHghl2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OTNiNTkzN2M2MzdlYzI0ZmY5ZmJlYjQzYWQ1ODhjZDRj
OGNlYmYwHhcNMjYxMDExMTMwMTA2WhcNMjYxMDEyMTMwMTA2WjAzMTEwLwYDVQQD
EyhjZDg5MTI1NDY4YTU2N2JmZTY3MTdkNTUyYzQwNjJhMDBlODYyY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokT5U6OY17QbkrUrwevk0Qdg3jMh
v0RerOxtxqpGewpgF2xtzlzASSss/sGWxFtDHdpNFn6CzfEYn8Td2gDl+Z8OA74H
ClmV1g448gjwLgYOcukVb6oSwr/5dnKU42atm95lh/vtYb7jJtgdIFgVOsDpjU7p
aB5VHxufVc9QOD5koqZyowXquBvQLFK68cU6rkDDDiixqMnxefIOwbeKFcquAJ2X
59XWDtX4pRgfDxrw45jKNEQfTsu8PrbL86udDLb/SgTdpMi9HasTEcOZ9Xx1NENo
laXKhhCsr49wR/KTeCNcp9HqjdJzwTPdBMj1MnFkool2OnDhtg9mNbE+VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2JElRopWe/5nF9VSxAYqAOhizkMB8GA1UdIwQY
MBaAFLSTtZN8Y37CT/n760OtWIzUyM6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEpPMWszeGpmc0pQLWZ2clE2MVlqTlRJenI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xMDlkNTMtNDE2NC00MTY4LWFmYjYt
MDgwNzY5MjQ3NzdkLzEvdEpPMWszeGpmc0pQLWZ2clE2MVlqTlRJenI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xMDlkNTMtNDE2NC00MTY4LWFmYjYtMDgwNzY5MjQ3Nzdk
LzEvdEpPMWszeGpmc0pQLWZ2clE2MVlqTlRJenI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6sRuHo3
E1Y+CIsXG0LMGVljZj0oHLHGAhs1usYneYAJiay0/GwTJ3FB0HTUn5JA7ahIbi3j
4gIZwaDVRTnVxfEBg8uqjgTCAEOoh6eMAbK+VGxkAQIgLhFaii6X0ZfPUmxpdwUi
m1LI4wEWDXUnm9lbjj1xB03FlBP9zS8ikTLFNjWFchHSq5efvsEYhhaI7MEom8oV
ytwWAdf4ey8OhFPhvXK1bLD5SahaUFk/CupCLo07Ad41hjdR90SDpLtvqII5Sfaw
EhoUPemwLqxv083xvoocwppMjCRBicyw5bAfToGvgcALXvr4dI1mJyjQIqcYy5U5
SWF4UT2xPr4WHw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:09:12 2026 by rpki-client