Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: r1IfVmoK9pWqIPPRAamgcFrNgj+j49KVT3GTs954GoQ=
Subject key identifier: 40:0A:B6:0D:91:26:DC:EB:BB:72:92:4D:B3:DF:97:C4:28:28:32:89
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 01A0E106CAC958CCA32E4A4604A7CCE5D3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 17DC
Signing time: Sun 27 Sep 2026 04:01:53 +0000
Manifest this update: Sun 27 Sep 2026 04:01:53 +0000
Manifest next update: Mon 28 Sep 2026 04:01:53 +0000
Files and hashes: 1: YeKtEsYaTNZoSHj3N6MlBsotJrQ.roa (hash: twTw0giPhGzIQ/V/HMZrgKRp++mkr21dxckWNhdSudg=)
2: ielQr4EC94tydWptb7Zy7oQJTlg.roa (hash: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk=)
3: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: 1g/y9CNIAlELzKbY94z+YJ6FBlGcuPZUtEsh2TXJ24A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:06:ca:c9:58:cc:a3:2e:4a:46:04:a7:cc:e5:d3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Sep 27 04:01:53 2026 GMT
Not After : Sep 28 04:01:53 2026 GMT
Subject: CN=400ab60d9126dcebbb72924db3df97c428283289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ca:65:c3:29:b9:32:ce:f5:58:38:d1:00:16:
fb:74:a7:d5:54:79:78:33:c0:ea:65:43:34:77:f8:
9c:48:45:63:28:a1:84:28:f8:35:a8:27:4f:fb:7a:
2a:c6:0e:4e:e1:39:ac:f3:be:71:6b:ad:26:64:e9:
a5:e6:50:dc:bb:5b:65:96:a4:eb:4f:97:3f:7f:79:
f9:1b:95:5c:81:b9:ae:34:ed:34:4d:8c:69:3e:e1:
d7:92:b3:c0:5f:c4:18:10:66:68:91:8a:ed:78:36:
b6:9b:8e:39:75:a3:b2:85:e1:06:09:5f:97:67:15:
51:f6:68:a3:c2:52:b9:e5:90:9a:7f:6a:e6:97:07:
e4:a0:0b:88:13:7f:4f:0e:4e:03:01:da:f8:f9:d3:
87:94:5a:c0:01:ba:13:d8:bc:bd:c3:93:6b:7c:82:
5a:6d:a8:02:94:65:bc:95:08:23:30:87:55:89:43:
d1:74:04:88:64:14:a7:79:15:e8:70:6b:5b:9b:61:
df:e8:c1:54:1a:49:a4:95:d2:6d:7f:15:34:90:0e:
f2:b2:e4:89:19:9e:c1:60:4c:e5:2b:1b:d6:a2:4f:
34:86:fe:a3:ae:52:d9:12:69:97:5d:dc:45:9f:09:
c7:f1:ac:d8:b6:2f:07:fa:1f:45:38:f2:53:39:60:
0c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:B6:0D:91:26:DC:EB:BB:72:92:4D:B3:DF:97:C4:28:28:32:89
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:37:a3:1e:fd:61:47:49:09:6b:47:38:4a:ba:8d:df:b1:ff:
16:ab:57:d6:32:34:99:e2:69:c2:2b:8f:23:28:00:5f:92:fd:
95:53:30:12:94:15:f6:24:e0:b4:0b:30:f2:19:c8:58:40:c4:
6b:c9:81:bd:8f:92:26:4a:a0:82:ff:d7:e0:63:25:7f:a7:e8:
22:3f:ca:24:16:b1:54:67:8e:60:16:5f:20:18:12:bf:be:5e:
52:9d:58:9a:9a:b9:a7:54:df:7e:5a:87:f6:04:7e:83:e6:75:
d0:c9:da:d7:36:14:94:c7:95:48:62:48:8d:27:30:b4:8a:fb:
e5:60:e4:a7:55:5d:d2:bc:b2:a9:c0:76:93:2d:a1:a7:a5:35:
af:30:3e:9d:d6:eb:af:77:dd:92:57:16:6f:2d:3a:e8:fc:dc:
3f:c2:8a:b2:2b:ca:07:ce:66:64:2a:18:21:ee:0b:a4:54:9c:
81:34:8b:26:7d:3c:84:b6:e6:eb:ec:d7:6e:1a:19:f5:35:57:
c4:27:57:7f:3f:9f:bc:ee:1b:ba:a7:02:39:d0:e1:9d:a2:23:
d2:4f:1d:5c:34:1d:33:d4:54:5a:99:4c:52:97:07:ed:23:28:
d9:c3:85:67:07:ae:5e:10:53:a2:cb:00:78:86:82:4e:23:85:
78:a6:33:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhBsrJWMyjLkpGBKfM5dO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjExNTQyNGMxODFjNjc5NjZjY2MyNDY3ZWRlNjlkMDYw
Y2NmNTMwHhcNMjYwOTI3MDQwMTUzWhcNMjYwOTI4MDQwMTUzWjAzMTEwLwYDVQQD
Eyg0MDBhYjYwZDkxMjZkY2ViYmI3MjkyNGRiM2RmOTdjNDI4MjgzMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5splwym5Ms71WDjRABb7dKfVVHl4
M8DqZUM0d/icSEVjKKGEKPg1qCdP+3oqxg5O4Tms875xa60mZOml5lDcu1tllqTr
T5c/f3n5G5VcgbmuNO00TYxpPuHXkrPAX8QYEGZokYrteDa2m445daOyheEGCV+X
ZxVR9mijwlK55ZCaf2rmlwfkoAuIE39PDk4DAdr4+dOHlFrAAboT2Ly9w5NrfIJa
bagClGW8lQgjMIdViUPRdASIZBSneRXocGtbm2Hf6MFUGkmkldJtfxU0kA7ysuSJ
GZ7BYEzlKxvWok80hv6jrlLZEmmXXdxFnwnH8azYti8H+h9FOPJTOWAMWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAKtg2RJtzru3KSTbPfl8QoKDKJMB8GA1UdIwQY
MBaAFLTxFUJMGBxnlmzMJGft5p0GDM9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2Ut
MzJlOTMyZDZmZDBlLzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2UtMzJlOTMyZDZmZDBl
LzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjejHv1h
R0kJa0c4SrqN37H/FqtX1jI0meJpwiuPIygAX5L9lVMwEpQV9iTgtAsw8hnIWEDE
a8mBvY+SJkqggv/X4GMlf6foIj/KJBaxVGeOYBZfIBgSv75eUp1Ympq5p1TfflqH
9gR+g+Z10Mna1zYUlMeVSGJIjScwtIr75WDkp1Vd0ryyqcB2ky2hp6U1rzA+ndbr
r3fdklcWby066PzcP8KKsivKB85mZCoYIe4LpFScgTSLJn08hLbm6+zXbhoZ9TVX
xCdXfz+fvO4buqcCOdDhnaIj0k8dXDQdM9RUWplMUpcH7SMo2cOFZweuXhBTossA
eIaCTiOFeKYz+g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 11:21:12 2026 by rpki-client