Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: 4EsGNoDnsbQPl04vI4b9JIxK/hoFIn9zexdx4uBMM3g=
Subject key identifier: 29:B8:EF:9F:28:11:A5:5E:B5:1F:0E:45:52:43:48:78:1F:72:19:1C
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 01A132FDF7FBD38A19E709590EE5C33E7132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 02:01:07 +0000
Manifest this update: Tue 13 Oct 2026 02:01:07 +0000
Manifest next update: Wed 14 Oct 2026 02:01:07 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: pb8LavoFm48aslfrxIyLZaWLObE+EDlUlq36X5AZMOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:fd:f7:fb:d3:8a:19:e7:09:59:0e:e5:c3:3e:71:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Oct 13 02:01:07 2026 GMT
Not After : Oct 14 02:01:07 2026 GMT
Subject: CN=29b8ef9f2811a55eb51f0e45524348781f72191c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e5:4d:37:47:bb:fd:93:0c:27:2e:80:7a:66:
ea:2c:e4:cc:d2:ac:cf:8a:63:d0:82:d1:17:9c:75:
f5:0f:e3:ff:2d:a7:f7:8f:53:37:83:5b:9e:82:05:
16:0f:d1:54:f1:a2:99:2a:cb:37:a2:db:63:46:72:
24:8a:50:ae:be:c7:a0:7a:6b:ce:41:1b:e3:4f:68:
a1:93:94:a6:92:b2:39:98:b5:f7:05:7d:6b:7c:a0:
25:8e:1b:a8:9d:8c:43:70:dd:56:80:cd:47:36:38:
15:d0:8e:a2:ed:f8:3c:02:7a:06:f1:3b:d0:7b:88:
53:0a:b1:1f:e4:2d:83:dd:ac:fd:2d:92:8b:c1:94:
a2:42:7b:bd:25:44:00:c4:71:59:03:f2:af:c7:52:
0e:5e:1c:00:6a:66:b1:78:b8:f8:ee:a1:66:df:cb:
c3:dd:06:7d:99:e3:b1:e9:5d:a4:f1:45:c0:f2:cf:
e5:b2:58:87:fa:e0:d5:20:af:be:61:b2:31:f4:7c:
7a:4d:89:59:93:8c:ad:ee:24:a8:68:63:31:99:5f:
61:e5:61:52:ab:44:db:41:86:9b:7f:3f:c1:24:8d:
83:ca:0f:62:dc:7f:2b:02:67:99:fd:37:9c:56:7a:
d1:2c:c6:bf:f9:80:c8:2b:63:32:85:11:68:e5:5e:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:EF:9F:28:11:A5:5E:B5:1F:0E:45:52:43:48:78:1F:72:19:1C
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:51:fe:b5:c7:7f:71:74:0f:ff:50:e1:28:66:88:fa:2d:6c:
c6:70:bc:69:e5:fa:e5:9c:30:42:de:f8:b9:63:36:8f:5b:df:
68:db:92:c6:c1:00:86:7d:a3:5b:d6:ca:9e:e0:78:b6:eb:8a:
83:51:26:49:f5:86:8f:85:a6:d7:c0:07:ec:50:d3:53:ec:91:
44:3b:3d:ba:3e:9d:4c:c9:da:fe:1e:a3:13:12:a0:ae:00:07:
65:8f:65:04:26:8d:24:c5:78:bb:ec:72:8f:32:0c:3e:e2:12:
4c:06:11:d8:0f:d7:ba:5d:ac:02:00:1a:8e:6e:85:3c:6a:7d:
d8:ae:3c:0c:f3:b5:9e:24:b9:c5:15:e8:7a:d3:82:bb:e6:0f:
61:c2:17:1c:17:2e:35:32:5e:75:a8:dd:bf:b4:2c:32:d2:dc:
a6:bd:27:03:31:a1:b4:f5:14:1e:11:66:b4:23:9d:be:94:2a:
ff:4e:9d:52:f3:d3:41:56:36:78:63:3d:df:55:c9:59:ec:af:
c5:53:82:4e:51:47:ae:72:3a:98:20:c2:e1:e5:c2:6d:40:41:
af:28:3d:57:95:52:f5:8f:bd:0d:01:c8:ad:ac:04:60:b4:af:
f6:ac:da:bc:e7:29:f5:b5:d0:1b:9e:16:11:8b:2e:32:e0:64:
e4:00:5a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEy/ff704oZ5wlZDuXDPnEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx
ZmFlZDQwHhcNMjYxMDEzMDIwMTA3WhcNMjYxMDE0MDIwMTA3WjAzMTEwLwYDVQQD
EygyOWI4ZWY5ZjI4MTFhNTVlYjUxZjBlNDU1MjQzNDg3ODFmNzIxOTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouVNN0e7/ZMMJy6AembqLOTM0qzP
imPQgtEXnHX1D+P/Laf3j1M3g1ueggUWD9FU8aKZKss3ottjRnIkilCuvsegemvO
QRvjT2ihk5SmkrI5mLX3BX1rfKAljhuonYxDcN1WgM1HNjgV0I6i7fg8AnoG8TvQ
e4hTCrEf5C2D3az9LZKLwZSiQnu9JUQAxHFZA/Kvx1IOXhwAamaxeLj47qFm38vD
3QZ9meOx6V2k8UXA8s/lsliH+uDVIK++YbIx9Hx6TYlZk4yt7iSoaGMxmV9h5WFS
q0TbQYabfz/BJI2Dyg9i3H8rAmeZ/TecVnrRLMa/+YDIK2MyhRFo5V5o3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCm4758oEaVetR8ORVJDSHgfchkcMB8GA1UdIwQY
MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt
ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4
LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlH+tcd/
cXQP/1DhKGaI+i1sxnC8aeX65ZwwQt74uWM2j1vfaNuSxsEAhn2jW9bKnuB4tuuK
g1EmSfWGj4Wm18AH7FDTU+yRRDs9uj6dTMna/h6jExKgrgAHZY9lBCaNJMV4u+xy
jzIMPuISTAYR2A/Xul2sAgAajm6FPGp92K48DPO1niS5xRXoetOCu+YPYcIXHBcu
NTJedajdv7QsMtLcpr0nAzGhtPUUHhFmtCOdvpQq/06dUvPTQVY2eGM931XJWeyv
xVOCTlFHrnI6mCDC4eXCbUBBryg9V5VS9Y+9DQHIrawEYLSv9qzavOcp9bXQG54W
EYsuMuBk5ABaRQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:47:28 2026 by rpki-client