Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File: tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier: 3yn8uhpn/Ms2SdsXJys+Wp0wFDp/4pWciY3LmGEOQN4=
Subject key identifier: 24:15:5E:20:B4:1A:33:C6:59:9E:B8:72:C8:C6:6C:0A:64:B4:3A:77
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial: 01A0CE233125C1D4B201A3E324952EF0BFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number: 15CC
Signing time: Wed 23 Sep 2026 12:00:07 +0000
Manifest this update: Wed 23 Sep 2026 12:00:07 +0000
Manifest next update: Thu 24 Sep 2026 12:00:07 +0000
Files and hashes: 1: CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa (hash: gQEYUEzKFyH2/cM28ksUHG3hbitgcosJBEkltHf/gqA=)
2: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
3: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: s0yj3D4kRl7CQ+dUQnjXCljmrZXNF5e/yT8ZNsjV0D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:31:25:c1:d4:b2:01:a3:e3:24:95:2e:f0:bf:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Validity
Not Before: Sep 23 12:00:07 2026 GMT
Not After : Sep 24 12:00:07 2026 GMT
Subject: CN=24155e20b41a33c6599eb872c8c66c0a64b43a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d4:a1:eb:cc:5d:ba:d7:27:0e:1e:06:df:cb:
4c:62:74:bb:d7:24:dc:a4:11:cb:66:04:d7:50:60:
39:d9:f9:4a:31:79:11:a5:92:71:d5:a6:b9:69:95:
20:22:e6:d1:85:b2:8f:9d:6c:2d:59:3f:dd:f8:6b:
6a:be:3f:01:53:1d:fa:b7:31:1a:7c:07:69:86:9e:
c8:21:c9:af:13:12:08:ab:b8:19:57:f5:6f:d7:6e:
df:2e:ad:ea:a7:c9:d6:1d:ea:ed:c8:2d:e5:f8:d5:
c8:24:da:c6:0d:d7:4e:ff:99:5f:b4:40:8c:40:f9:
f2:0d:4c:5a:cd:79:12:bd:7a:dd:65:38:68:d2:be:
25:80:34:d5:77:2f:bf:b1:5a:27:bd:72:cb:d8:3b:
3b:b6:a1:44:7e:3a:f2:2a:d6:c6:c5:44:9e:d5:aa:
99:01:83:22:db:2c:42:f9:d1:f4:0c:77:e6:9b:05:
25:a0:fd:7e:d7:d1:c0:b6:1a:51:a9:5e:2f:2d:73:
ff:07:3d:d1:19:61:a6:a9:2b:ff:86:47:0e:dc:c5:
d1:35:c2:0c:98:d2:34:dd:40:98:5b:8f:d2:0a:fb:
15:af:32:a3:bc:b9:c6:78:98:de:1a:6e:db:00:0d:
2d:f0:42:08:90:01:fe:5c:a9:96:db:74:09:fa:15:
b3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:15:5E:20:B4:1A:33:C6:59:9E:B8:72:C8:C6:6C:0A:64:B4:3A:77
X509v3 Authority Key Identifier:
keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bc:ab:9f:33:6a:83:42:48:16:b9:c6:2f:ca:c8:82:11:e2:
ab:a3:c4:05:47:7b:13:56:93:b9:e3:6e:a9:86:59:78:27:50:
0d:66:4b:60:16:b2:5c:e6:5c:d1:f6:30:5b:c4:f5:13:c2:4b:
64:19:e9:ec:d9:4c:24:19:68:9e:72:9f:1a:59:e7:e4:ea:c5:
15:00:6f:04:3d:8a:a5:a7:c0:8d:36:20:fc:55:bd:ce:dd:a4:
46:1a:68:f4:9e:3b:08:a7:08:cb:18:54:06:22:06:3c:9f:e3:
6c:96:3d:5c:8c:af:09:6b:a2:1d:d2:eb:33:09:46:7a:43:a0:
bb:89:5c:9b:a9:bf:ba:f9:df:41:75:05:94:da:10:f8:8c:67:
76:ac:d0:05:ad:bd:cf:d6:7c:fb:00:2b:6a:68:79:95:47:50:
fc:3f:33:ab:02:ef:d2:01:71:ef:9a:2e:e5:4e:e4:06:2b:fc:
3c:ae:f3:f6:2e:ee:21:e3:89:16:be:39:d3:ef:c6:72:3a:b2:
4b:5c:46:bf:93:b4:bf:68:0c:d5:03:12:1f:d9:c4:e8:5b:ed:
04:e7:ad:d8:8b:ba:e3:82:eb:81:26:4e:d2:e7:c0:2a:a1:f1:
50:29:62:1c:49:e3:b6:20:4b:c2:f1:76:35:85:ec:4c:7c:64:
76:51:96:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOIzElwdSyAaPjJJUu8L/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw
OGI0NDIwHhcNMjYwOTIzMTIwMDA3WhcNMjYwOTI0MTIwMDA3WjAzMTEwLwYDVQQD
EygyNDE1NWUyMGI0MWEzM2M2NTk5ZWI4NzJjOGM2NmMwYTY0YjQzYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutSh68xdutcnDh4G38tMYnS71yTc
pBHLZgTXUGA52flKMXkRpZJx1aa5aZUgIubRhbKPnWwtWT/d+Gtqvj8BUx36tzEa
fAdphp7IIcmvExIIq7gZV/Vv127fLq3qp8nWHertyC3l+NXIJNrGDddO/5lftECM
QPnyDUxazXkSvXrdZTho0r4lgDTVdy+/sVonvXLL2Ds7tqFEfjryKtbGxUSe1aqZ
AYMi2yxC+dH0DHfmmwUloP1+19HAthpRqV4vLXP/Bz3RGWGmqSv/hkcO3MXRNcIM
mNI03UCYW4/SCvsVrzKjvLnGeJjeGm7bAA0t8EIIkAH+XKmW23QJ+hWz9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQVXiC0GjPGWZ64csjGbApktDp3MB8GA1UdIwQY
MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It
MGM5MDliZjViZTRkLzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk
LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7yrnzNq
g0JIFrnGL8rIghHiq6PEBUd7E1aTueNuqYZZeCdQDWZLYBayXOZc0fYwW8T1E8JL
ZBnp7NlMJBlonnKfGlnn5OrFFQBvBD2KpafAjTYg/FW9zt2kRhpo9J47CKcIyxhU
BiIGPJ/jbJY9XIyvCWuiHdLrMwlGekOgu4lcm6m/uvnfQXUFlNoQ+IxndqzQBa29
z9Z8+wAramh5lUdQ/D8zqwLv0gFx75ou5U7kBiv8PK7z9i7uIeOJFr450+/Gcjqy
S1xGv5O0v2gM1QMSH9nE6FvtBOet2Iu644LrgSZO0ufAKqHxUCliHEnjtiBLwvF2
NYXsTHxkdlGWHw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:33:01 2026 by rpki-client