Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: hXYT4ypUN6BJXtvQnj+0J0ik0rVNxBIu1pgdRDTtBCM=
Subject key identifier: FB:47:3E:32:A4:E8:6F:38:D6:BB:DC:C9:36:7D:4A:52:70:B7:A7:EC
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 01A0D9BAE1297E692EBFC5B744B840A6C761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 1223
Signing time: Fri 25 Sep 2026 18:01:38 +0000
Manifest this update: Fri 25 Sep 2026 18:01:38 +0000
Manifest next update: Sat 26 Sep 2026 18:01:38 +0000
Files and hashes: 1: DwmG0ZTLhtIMJOsidGWosw6vEeI.asa (hash: FLY0wNhtEopUheMfWvGzuHpYxMOoIr/9eULVvs6/bno=)
2: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: Lf1qBbquDSEPhZ+KdpmUm4va4xG8ldnv/9TN5U8JHHo=)
3: _Tm3qrECzPezIfgQFfA3nySl1es.roa (hash: rBkCC8V4vfJZ7RekKKwrg+MhibDVuZ/LjndlBlPdu+Q=)
4: _q-CP9vVp7ZOCkbVBtsfOnAJ9FA.roa (hash: XNxgADpEzkzVftJcT8a6amX7H8EAtDuMWz2MBkIT+/M=)
5: cjcrwUR9cOViEeTeD6CkQ1Oxg-8.roa (hash: baKzNTEyrVEeukgFUaF5YXuq3MR7DZq0UgoZTBymKqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:e1:29:7e:69:2e:bf:c5:b7:44:b8:40:a6:c7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Sep 25 18:01:38 2026 GMT
Not After : Sep 26 18:01:38 2026 GMT
Subject: CN=fb473e32a4e86f38d6bbdcc9367d4a5270b7a7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:55:ad:65:26:bf:c0:df:b8:49:39:c9:c9:
66:18:23:e1:60:bd:0b:54:4e:4c:42:75:b4:7d:8b:
b5:b1:21:0d:0c:65:79:1e:35:44:6d:d3:55:62:ac:
72:85:b4:8d:a0:e8:30:67:e8:18:0f:c1:21:9a:80:
e1:b8:5d:7f:ea:e6:98:cd:58:91:e5:12:ee:f9:a1:
d2:26:67:1b:fb:af:8a:ee:6b:e8:b0:24:36:18:95:
70:a0:9e:ee:c3:5a:36:a8:38:4e:c5:52:ef:22:37:
cb:de:7a:8c:54:24:be:91:c0:c9:ee:f0:ea:b9:5f:
c5:cc:6b:83:a2:b2:5b:65:5d:ed:b3:7f:53:98:2b:
0c:f7:00:40:37:68:b7:e0:ac:b8:69:ac:b4:9b:56:
d4:1b:5e:1a:cc:9f:92:d3:84:e2:1a:51:1f:10:a3:
55:9d:8c:0a:0a:29:d1:52:59:5d:d9:52:43:bd:7d:
e6:a2:1f:8d:68:79:1e:2a:3b:75:a8:75:22:c1:6e:
93:13:3c:35:64:d7:37:76:1f:28:8d:59:b2:84:6f:
f9:77:27:d4:2e:56:5e:ce:9e:79:3f:12:a7:e8:b0:
62:97:c4:19:4c:8e:72:7d:c6:c4:53:87:ab:ab:aa:
5d:0c:91:c8:6a:74:c2:6f:b4:40:f2:d5:8b:cd:44:
09:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:47:3E:32:A4:E8:6F:38:D6:BB:DC:C9:36:7D:4A:52:70:B7:A7:EC
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d6:83:13:d7:39:dd:f0:d9:56:15:64:a4:83:9f:ee:16:10:
0f:34:1f:74:13:fa:49:ee:61:36:92:a1:98:a0:01:c4:48:17:
95:b6:48:88:6e:d4:86:86:e9:87:f3:70:5e:ee:21:82:01:84:
f8:8d:d9:19:2e:d0:a3:66:4b:50:86:fe:21:4c:75:ff:8d:a7:
26:bf:cf:dd:db:f0:e6:27:df:bb:e5:2f:33:bb:5c:05:08:f0:
15:f4:3d:b5:73:36:e6:2d:38:6f:6c:bc:63:cd:9a:f4:bf:e9:
71:63:81:d2:2f:05:40:ee:dc:76:70:fe:4d:f6:bd:97:d9:41:
0a:d6:88:d9:74:70:4b:97:1c:c9:a1:1a:bc:6c:77:55:ad:0b:
51:15:0c:7a:52:2a:f2:92:61:3f:05:0b:de:d3:3b:4e:f4:29:
8c:93:28:25:85:d6:81:aa:d3:35:64:2e:19:d5:7f:1b:22:d3:
55:25:ee:a8:7c:8b:e3:1a:a6:91:2c:d1:fd:51:9b:9d:84:2e:
c1:17:c9:e8:53:0d:be:77:d8:8c:6b:e6:78:05:d4:d0:fa:8a:
10:3e:62:0c:05:23:82:eb:81:d1:2b:d5:af:20:c4:98:dd:79:
2f:36:b8:3c:ce:a2:c4:f9:1a:bc:2a:cd:bd:1b:cd:3f:b3:b7:
ea:31:5b:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZuuEpfmkuv8W3RLhApsdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYTVjZGU1MjRmNzgxMGQ1ODY4YmM0OWFiMGJmNjYyMWY0
NGRjMjEwHhcNMjYwOTI1MTgwMTM4WhcNMjYwOTI2MTgwMTM4WjAzMTEwLwYDVQQD
EyhmYjQ3M2UzMmE0ZTg2ZjM4ZDZiYmRjYzkzNjdkNGE1MjcwYjdhN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4pVrWUmv8DfuEk5yclmGCPhYL0L
VE5MQnW0fYu1sSENDGV5HjVEbdNVYqxyhbSNoOgwZ+gYD8EhmoDhuF1/6uaYzViR
5RLu+aHSJmcb+6+K7mvosCQ2GJVwoJ7uw1o2qDhOxVLvIjfL3nqMVCS+kcDJ7vDq
uV/FzGuDorJbZV3ts39TmCsM9wBAN2i34Ky4aay0m1bUG14azJ+S04TiGlEfEKNV
nYwKCinRUlld2VJDvX3moh+NaHkeKjt1qHUiwW6TEzw1ZNc3dh8ojVmyhG/5dyfU
LlZezp55PxKn6LBil8QZTI5yfcbEU4erq6pdDJHIanTCb7RA8tWLzUQJ0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtHPjKk6G841rvcyTZ9SlJwt6fsMB8GA1UdIwQY
MBaAFE+lzeUk94ENWGi8SasL9mIfRNwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYt
MzJkNGFkOGY1NmRlLzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9kNjA4OGMtMzExMC00MWUxLWI5OTYtMzJkNGFkOGY1NmRl
LzEvVDZYTjVTVDNnUTFZYUx4SnF3djJZaDlFM0NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtaDE9c5
3fDZVhVkpIOf7hYQDzQfdBP6Se5hNpKhmKABxEgXlbZIiG7Uhobph/NwXu4hggGE
+I3ZGS7Qo2ZLUIb+IUx1/42nJr/P3dvw5iffu+UvM7tcBQjwFfQ9tXM25i04b2y8
Y82a9L/pcWOB0i8FQO7cdnD+Tfa9l9lBCtaI2XRwS5ccyaEavGx3Va0LURUMelIq
8pJhPwUL3tM7TvQpjJMoJYXWgarTNWQuGdV/GyLTVSXuqHyL4xqmkSzR/VGbnYQu
wRfJ6FMNvnfYjGvmeAXU0PqKED5iDAUjguuB0SvVryDEmN15Lza4PM6ixPkavCrN
vRvNP7O36jFb0Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 20:53:01 2026 by rpki-client