Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: /TFtevEHCmgeMgTW9wlZ5ep2YiZxe1u3Pa3SINmi0Bg=
Subject key identifier: C1:1A:D0:6C:13:DC:03:9E:49:C9:55:2A:98:31:44:90:34:05:23:FD
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019EBE479376456E514F307F96D8D301DDC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0EAE
Signing time: Sat 13 Jun 2026 00:00:22 +0000
Manifest this update: Sat 13 Jun 2026 00:00:22 +0000
Manifest next update: Sun 14 Jun 2026 00:00:22 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: LqMocN99jE2vkXMUSsAg7KHzDiXWqMgCt7s4fFgJE4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:93:76:45:6e:51:4f:30:7f:96:d8:d3:01:dd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Jun 13 00:00:22 2026 GMT
Not After : Jun 14 00:00:22 2026 GMT
Subject: CN=c11ad06c13dc039e49c9552a98314490340523fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:c9:66:fe:05:39:60:4e:63:ad:01:db:64:
4e:f3:a3:36:49:ab:73:14:42:a4:f1:81:f8:6d:dc:
d9:da:1c:c2:89:00:be:0d:1d:67:44:37:19:36:2d:
d1:ae:bd:19:90:d8:2b:f4:c0:c5:c5:11:d2:1f:19:
b2:6c:cf:76:41:8f:88:d8:28:0b:ea:d3:69:2a:ba:
76:6b:25:df:4c:41:4b:1d:58:72:8f:db:5b:b4:25:
c7:7f:d3:25:61:c0:35:e9:3e:ff:cb:a9:99:87:55:
0e:9e:54:52:a8:aa:b4:8d:bb:39:b6:df:b7:27:94:
26:31:b6:1f:8f:6a:5b:87:90:f5:37:3d:e5:af:ff:
02:07:5e:1e:d9:9a:83:87:a8:ff:77:26:1e:de:08:
34:d8:5e:29:c9:02:f6:42:4a:2a:2b:ea:dc:50:a5:
99:26:bb:97:b5:b3:eb:21:85:e9:f7:1f:ee:d4:aa:
4f:a8:81:67:3a:ce:5b:fc:e7:a1:26:05:6b:2f:7d:
b0:95:7c:8f:ce:a9:56:4d:6b:6c:04:2e:8e:e1:83:
e4:32:2e:7c:28:f0:55:6b:3c:33:7b:cf:5d:38:36:
a9:30:e6:55:8d:fd:13:c6:4c:16:79:fe:ff:43:76:
98:0a:22:f3:9c:ca:fb:d5:e2:7a:eb:6e:7f:e7:2a:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1A:D0:6C:13:DC:03:9E:49:C9:55:2A:98:31:44:90:34:05:23:FD
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:81:16:42:9d:ea:4a:8c:43:1f:a1:32:5c:16:5e:41:43:ed:
dd:03:02:06:55:b5:01:57:10:da:a6:bb:a8:98:fa:d8:6a:3e:
02:53:64:3c:d2:13:61:0e:54:51:cd:f9:b7:b9:ee:2f:6d:24:
0b:ab:3f:c4:19:d3:a2:02:fc:3a:f7:44:c1:f8:d0:a7:3d:ae:
a9:0f:9e:86:69:cc:3c:9c:07:88:3e:9b:87:1e:0b:5b:9d:55:
cc:c3:58:05:92:4c:c1:8a:a3:4a:ff:3a:eb:11:85:b6:f5:e2:
3d:5c:61:8e:20:2b:82:39:db:d2:90:cd:16:75:0b:76:b4:f7:
14:f6:98:28:40:0e:bc:02:1f:d2:23:07:59:0b:1b:6e:25:75:
a6:d6:b5:ad:16:01:89:f6:32:3f:41:2d:9f:88:87:29:5d:c5:
5c:9c:e6:22:21:1d:3f:99:4b:21:4e:c8:fd:e5:0a:72:cc:c3:
db:e0:0b:eb:83:cb:d4:9c:0c:62:80:b7:86:ff:3b:e0:89:3a:
be:77:30:3f:9d:75:db:e9:d2:0f:f5:b9:a5:16:75:4a:0a:27:
40:56:28:60:af:4c:a9:86:86:36:09:bd:3d:fc:64:f1:e0:64:
a8:c3:29:43:07:8e:d5:bd:ff:d0:fd:be:bc:72:de:0b:dd:c7:
32:a5:30:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+R5N2RW5RTzB/ltjTAd3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy
NjExMjAwHhcNMjYwNjEzMDAwMDIyWhcNMjYwNjE0MDAwMDIyWjAzMTEwLwYDVQQD
EyhjMTFhZDA2YzEzZGMwMzllNDljOTU1MmE5ODMxNDQ5MDM0MDUyM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2TJZv4FOWBOY60B22RO86M2Satz
FEKk8YH4bdzZ2hzCiQC+DR1nRDcZNi3Rrr0ZkNgr9MDFxRHSHxmybM92QY+I2CgL
6tNpKrp2ayXfTEFLHVhyj9tbtCXHf9MlYcA16T7/y6mZh1UOnlRSqKq0jbs5tt+3
J5QmMbYfj2pbh5D1Nz3lr/8CB14e2ZqDh6j/dyYe3gg02F4pyQL2QkoqK+rcUKWZ
JruXtbPrIYXp9x/u1KpPqIFnOs5b/OehJgVrL32wlXyPzqlWTWtsBC6O4YPkMi58
KPBVazwze89dODapMOZVjf0TxkwWef7/Q3aYCiLznMr71eJ6625/5yq7RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEa0GwT3AOeSclVKpgxRJA0BSP9MB8GA1UdIwQY
MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt
ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj
LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoEWQp3q
SoxDH6EyXBZeQUPt3QMCBlW1AVcQ2qa7qJj62Go+AlNkPNITYQ5UUc35t7nuL20k
C6s/xBnTogL8OvdEwfjQpz2uqQ+ehmnMPJwHiD6bhx4LW51VzMNYBZJMwYqjSv86
6xGFtvXiPVxhjiArgjnb0pDNFnULdrT3FPaYKEAOvAIf0iMHWQsbbiV1pta1rRYB
ifYyP0Etn4iHKV3FXJzmIiEdP5lLIU7I/eUKcszD2+AL64PL1JwMYoC3hv874Ik6
vncwP5112+nSD/W5pRZ1SgonQFYoYK9MqYaGNgm9Pfxk8eBkqMMpQweO1b3/0P2+
vHLeC93HMqUw1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:15:21 2026 by rpki-client