Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
File: T4EisJRezMsfL7mRL72GqgSmGYc.mft (raw, json)
Hash identifier: FDIZfwi3zuZDibcEHU8CV8LVcom2RRH1lemy7FukWXk=
Subject key identifier: 71:D5:D5:56:EA:08:EC:FC:E4:CA:19:B2:93:8F:DF:11:D5:DB:84:69
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 01A122AF4E80518D39B9FE84EE8763B3D5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
Manifest number: 1A96
Signing time: Fri 09 Oct 2026 22:01:16 +0000
Manifest this update: Fri 09 Oct 2026 22:01:16 +0000
Manifest next update: Sat 10 Oct 2026 22:01:16 +0000
Files and hashes: 1: QTRMtFoOW3Na9Q55kjNuxm41uuE.roa (hash: pLBNua0p1PO6zDb7MzcwoLxSSVrUFoLKBy/Xu8ILddg=)
2: T4EisJRezMsfL7mRL72GqgSmGYc.crl (hash: H/qzApifKhXwIDYVBc4jRvy3YN4GiNRl6jRLbtnsVW0=)
3: Unh6jdcSJxudNFyv1JxZ0OwDByI.roa (hash: ZP3ianjjsAEeUKwTMzmvqvt0Yzwm5Qrx7Exl6hWMZbI=)
4: uulI6ExTJtP3irGdM2S5HIHQNgA.roa (hash: dOSl4h1kgdktrCS2a2Neg4UQzObDt3tKhXAVO/T4UEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:af:4e:80:51:8d:39:b9:fe:84:ee:87:63:b3:d5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Oct 9 22:01:16 2026 GMT
Not After : Oct 10 22:01:16 2026 GMT
Subject: CN=71d5d556ea08ecfce4ca19b2938fdf11d5db8469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6f:95:11:db:9f:8d:7b:d2:c0:eb:bf:5e:cc:
5e:bd:26:d0:77:d3:b1:a2:3c:8e:71:56:86:c9:1a:
1f:30:97:64:c4:c1:61:f0:38:af:77:2b:4b:c1:5f:
ed:cd:4d:9c:7b:a8:d4:65:85:49:af:b5:71:b8:3a:
73:36:5c:87:8e:a5:86:ea:d2:d8:77:0a:a7:49:62:
db:d1:b6:b4:3e:b5:6d:c1:a8:49:88:05:18:8d:15:
d1:30:7d:43:05:38:a8:37:b0:d1:63:c6:f5:00:18:
85:6f:02:25:a5:9b:e8:c0:78:60:34:dc:0b:d2:45:
63:d4:9c:1e:89:3c:d3:c2:2f:e3:aa:bb:97:15:42:
26:f4:58:39:b9:93:3c:03:34:cc:70:76:4a:c4:69:
e0:9e:e0:7c:3e:e5:fc:0b:3e:a4:15:5e:fb:53:3e:
69:5c:65:d4:c5:ad:43:e0:bb:d5:21:7c:ca:6a:b4:
72:43:48:1b:9c:5b:98:dc:8d:13:41:46:ea:07:d4:
ae:cd:1a:1e:08:04:ca:e6:b6:ea:0c:d9:5a:7e:48:
a7:f6:71:26:f5:c7:53:e3:e2:b8:60:d6:b5:ef:7f:
b7:21:a2:d3:a6:d4:ed:88:dd:ce:22:e8:55:68:97:
df:9f:cc:34:f3:50:7d:09:72:d0:d0:02:10:a6:fb:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D5:D5:56:EA:08:EC:FC:E4:CA:19:B2:93:8F:DF:11:D5:DB:84:69
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ac:f2:3f:67:46:e8:d2:a6:d2:68:09:61:42:ba:a4:86:91:
fc:16:93:b2:56:8e:31:7f:8e:38:da:db:21:3f:d2:b2:b5:25:
92:9e:a0:62:fa:c0:a0:cf:9f:6d:74:7c:d2:58:e0:34:14:ba:
61:a2:1c:ae:88:68:bd:c4:0e:fc:73:9c:4c:ce:7c:a5:33:02:
6a:87:c0:a9:c4:02:31:d6:12:f0:cc:2b:d7:58:a4:b5:69:9b:
8f:bc:f6:f6:a1:12:97:1f:85:ba:f5:12:4d:6b:99:2a:08:21:
c3:d8:f3:7d:22:33:84:30:b0:ea:71:10:e2:ac:08:a9:0d:50:
a4:44:d3:77:1a:db:3a:d2:63:fa:50:24:a8:57:68:cc:7b:45:
16:99:3d:97:bc:aa:72:dd:d2:ad:cd:5b:17:9f:a1:56:cd:fd:
b8:3d:fe:c7:a2:9a:f8:29:ac:67:4b:9c:a3:e0:39:83:62:32:
bd:58:27:6e:ec:a1:7e:df:c5:ba:fd:34:6f:3b:93:16:69:b5:
b6:08:1d:c6:67:2e:cc:12:44:bd:42:61:e0:74:c2:9f:e4:bc:
7f:d5:e4:b2:9c:b2:fe:e3:5a:61:dd:e8:e2:9f:35:80:cc:d3:
7f:15:b7:17:84:56:e4:78:c7:d3:9c:c1:8c:93:21:c3:3d:a4:
bb:20:69:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEir06AUY05uf6E7odjs9W5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODEyMmIwOTQ1ZWNjY2IxZjJmYjk5MTJmYmQ4NmFhMDRh
NjE5ODcwHhcNMjYxMDA5MjIwMTE2WhcNMjYxMDEwMjIwMTE2WjAzMTEwLwYDVQQD
Eyg3MWQ1ZDU1NmVhMDhlY2ZjZTRjYTE5YjI5MzhmZGYxMWQ1ZGI4NDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42+VEdufjXvSwOu/XsxevSbQd9Ox
ojyOcVaGyRofMJdkxMFh8DivdytLwV/tzU2ce6jUZYVJr7VxuDpzNlyHjqWG6tLY
dwqnSWLb0ba0PrVtwahJiAUYjRXRMH1DBTioN7DRY8b1ABiFbwIlpZvowHhgNNwL
0kVj1JweiTzTwi/jqruXFUIm9Fg5uZM8AzTMcHZKxGngnuB8PuX8Cz6kFV77Uz5p
XGXUxa1D4LvVIXzKarRyQ0gbnFuY3I0TQUbqB9SuzRoeCATK5rbqDNlafkin9nEm
9cdT4+K4YNa173+3IaLTptTtiN3OIuhVaJffn8w081B9CXLQ0AIQpvtsewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHV1VbqCOz85MoZspOP3xHV24RpMB8GA1UdIwQY
MBaAFE+BIrCUXszLHy+5kS+9hqoEphmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjkt
MmIyMjZhMjM0MDZhLzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yMWRlZTItMjlkNy00ZGFkLWJlYjktMmIyMjZhMjM0MDZh
LzEvVDRFaXNKUmV6TXNmTDdtUkw3MkdxZ1NtR1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6zyP2dG
6NKm0mgJYUK6pIaR/BaTslaOMX+OONrbIT/SsrUlkp6gYvrAoM+fbXR80ljgNBS6
YaIcrohovcQO/HOcTM58pTMCaofAqcQCMdYS8Mwr11iktWmbj7z29qESlx+FuvUS
TWuZKgghw9jzfSIzhDCw6nEQ4qwIqQ1QpETTdxrbOtJj+lAkqFdozHtFFpk9l7yq
ct3Src1bF5+hVs39uD3+x6Ka+CmsZ0uco+A5g2IyvVgnbuyhft/Fuv00bzuTFmm1
tggdxmcuzBJEvUJh4HTCn+S8f9Xkspyy/uNaYd3o4p81gMzTfxW3F4RW5HjH05zB
jJMhwz2kuyBp6A==
-----END CERTIFICATE-----
Generated at Sat Oct 10 08:23:03 2026 by rpki-client