Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: 1eh8UN5kZdTB6sxTVTNv/O94GUIiSikoL08QCIikDFY=
Subject key identifier: 58:2B:D5:2C:2B:A7:13:6E:F2:8A:FD:95:8C:92:42:0E:4D:3A:FE:E1
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 01A08B31CBAF39BDEDAF38D03BD5A3E79514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 12:01:31 +0000
Manifest this update: Thu 10 Sep 2026 12:01:31 +0000
Manifest next update: Fri 11 Sep 2026 12:01:31 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: qdlZhCu0rcIq9G7NWYx/Q7T9Eba6bGcKh2ULWeermVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:cb:af:39:bd:ed:af:38:d0:3b:d5:a3:e7:95:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Sep 10 12:01:31 2026 GMT
Not After : Sep 11 12:01:31 2026 GMT
Subject: CN=582bd52c2ba7136ef28afd958c92420e4d3afee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:d1:5d:81:0e:3c:7b:0b:6d:78:90:0f:46:
4e:f5:1c:a9:75:97:b4:19:6a:22:ae:8e:c1:8b:7b:
41:98:02:d7:fd:4c:da:3e:39:8c:df:e8:51:ec:cb:
3e:cb:b4:ee:6e:03:9a:2a:16:98:c6:0a:95:e7:c4:
3a:38:17:07:04:32:3d:bb:96:8d:9c:2e:c2:01:4c:
02:29:32:dc:4d:24:13:2a:e3:94:99:0c:ab:2d:db:
5b:84:44:31:e9:ad:72:2d:81:23:94:ab:cd:c4:d4:
1f:f3:38:43:42:f8:40:47:82:c5:18:1c:c6:93:5f:
0a:08:ec:c5:43:c6:bd:fe:36:00:bc:17:44:cd:05:
6e:ad:6b:3b:c2:48:82:c3:f4:fb:b4:33:5e:bc:5d:
cc:ac:bd:14:96:70:f7:d3:97:cf:03:10:0b:72:db:
3e:8c:4e:aa:62:9f:e5:98:3f:8f:a7:f7:0d:8b:98:
4b:a9:cb:b4:03:47:1a:65:4c:75:bb:cc:05:2b:2e:
0e:e5:43:d8:43:5c:58:1f:a6:11:74:78:39:4c:11:
29:05:85:e2:be:6e:6c:9f:3e:89:23:f5:b5:d4:58:
09:ed:2b:de:ed:a8:c2:ff:a9:13:51:7e:0c:39:af:
f7:24:d8:c1:0f:b8:7b:e8:8f:b5:e7:7e:e5:d1:64:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:D5:2C:2B:A7:13:6E:F2:8A:FD:95:8C:92:42:0E:4D:3A:FE:E1
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:8d:03:e0:68:66:b8:71:ec:eb:18:41:6c:d0:8e:c5:b1:
7f:00:49:83:c6:b6:6f:75:ea:39:f4:10:79:31:b5:12:bc:dd:
23:96:4c:59:60:3c:60:d1:11:07:94:ab:ea:75:a8:38:9d:f0:
2f:29:f8:2b:9a:6f:83:95:b2:44:57:86:d0:97:37:32:13:7f:
b5:8b:b3:e9:dd:31:f4:2d:41:11:1e:8b:4a:65:cb:ac:1a:99:
22:17:72:9b:b9:ef:6f:82:2d:17:4f:70:83:93:6f:52:d7:d2:
14:35:a2:21:ca:3e:0c:a5:76:ba:a4:44:93:3c:57:45:ae:2f:
21:1d:ad:0b:df:10:5f:8a:2f:ca:db:83:ba:3a:5e:f2:94:c6:
d3:18:f1:88:dd:84:7b:d6:c9:eb:f0:75:bb:14:9a:31:29:3d:
33:9a:49:21:59:f0:2d:41:08:f4:a0:5b:65:67:04:7a:a0:95:
26:29:3e:63:b0:fc:f4:79:12:73:f3:24:9e:90:f8:07:22:b4:
cf:64:e8:67:ef:c0:e9:36:54:e8:82:9d:78:df:11:ea:e6:aa:
4b:98:d9:4b:53:87:ce:cd:cc:77:d0:21:ec:a6:42:b1:af:0f:
dd:e4:2f:43:87:0d:96:00:a0:46:84:2a:50:85:48:78:91:24:
28:f2:47:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMcuvOb3trzjQO9Wj55UUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjYwOTEwMTIwMTMxWhcNMjYwOTExMTIwMTMxWjAzMTEwLwYDVQQD
Eyg1ODJiZDUyYzJiYTcxMzZlZjI4YWZkOTU4YzkyNDIwZTRkM2FmZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbrRXYEOPHsLbXiQD0ZO9RypdZe0
GWoiro7Bi3tBmALX/UzaPjmM3+hR7Ms+y7TubgOaKhaYxgqV58Q6OBcHBDI9u5aN
nC7CAUwCKTLcTSQTKuOUmQyrLdtbhEQx6a1yLYEjlKvNxNQf8zhDQvhAR4LFGBzG
k18KCOzFQ8a9/jYAvBdEzQVurWs7wkiCw/T7tDNevF3MrL0UlnD305fPAxALcts+
jE6qYp/lmD+Pp/cNi5hLqcu0A0caZUx1u8wFKy4O5UPYQ1xYH6YRdHg5TBEpBYXi
vm5snz6JI/W11FgJ7Sve7ajC/6kTUX4MOa/3JNjBD7h76I+1537l0WTA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgr1SwrpxNu8or9lYySQg5NOv7hMB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHmNA+Bo
Zrhx7OsYQWzQjsWxfwBJg8a2b3XqOfQQeTG1ErzdI5ZMWWA8YNERB5Sr6nWoOJ3w
Lyn4K5pvg5WyRFeG0Jc3MhN/tYuz6d0x9C1BER6LSmXLrBqZIhdym7nvb4ItF09w
g5NvUtfSFDWiIco+DKV2uqREkzxXRa4vIR2tC98QX4ovytuDujpe8pTG0xjxiN2E
e9bJ6/B1uxSaMSk9M5pJIVnwLUEI9KBbZWcEeqCVJik+Y7D89HkSc/MknpD4ByK0
z2ToZ+/A6TZU6IKdeN8R6uaqS5jZS1OHzs3Md9Ah7KZCsa8P3eQvQ4cNlgCgRoQq
UIVIeJEkKPJHKg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:42:00 2026 by rpki-client