Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
File: t4cfKQ__DgQmDGdT44fJ77db4pY.mft (raw, json)
Hash identifier: 3oPDnP7amXgoCANjGd3ReKVPtL/Z6dPZjgSWhm61r8I=
Subject key identifier: DF:75:DB:A2:DD:B7:FA:19:A6:21:A5:68:8E:60:45:76:05:61:03:87
Authority key identifier: B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
Certificate issuer: /CN=b7871f290fff0e04260c6753e387c9efb75be296
Certificate serial: 01A03CA8448F99F9F22B2A5CB61E23597042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
Manifest number: 02CE
Signing time: Wed 26 Aug 2026 06:00:55 +0000
Manifest this update: Wed 26 Aug 2026 06:00:55 +0000
Manifest next update: Thu 27 Aug 2026 06:00:55 +0000
Files and hashes: 1: 3zIrc0aWYxX9dKMnCfOMwQPa5t8.asa (hash: cnCGcJrQuR05fmoh1KvgU/rA+KkWRXV4v1npDlI9OnU=)
2: Zs7v1NDx63hWaP0rqC9JgN4viuQ.roa (hash: hVIg73QWwWuqnjCLMmbKJMff3qM/nFL/BxoYDSJaxBw=)
3: t4cfKQ__DgQmDGdT44fJ77db4pY.crl (hash: G815J19Vsz14aphZKkJ+LdZOvczxaEBaHjc0jICqo9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:a8:44:8f:99:f9:f2:2b:2a:5c:b6:1e:23:59:70:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7871f290fff0e04260c6753e387c9efb75be296
Validity
Not Before: Aug 26 06:00:55 2026 GMT
Not After : Aug 27 06:00:55 2026 GMT
Subject: CN=df75dba2ddb7fa19a621a5688e60457605610387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:a4:a7:94:7a:e6:df:c1:45:e3:72:a0:0d:
8e:09:82:8b:70:e9:45:fd:ac:8e:d6:da:01:6b:87:
ef:82:91:1e:46:b8:0c:26:cd:1f:53:26:9e:a2:b1:
40:32:f9:08:b5:c2:b7:4b:6f:78:c3:73:34:1b:17:
60:fc:f7:1c:57:14:1c:ef:3a:4b:11:23:ad:fc:10:
ad:bf:c8:3b:f4:88:ab:a5:29:db:13:49:60:87:fb:
f3:66:f0:d1:7d:a7:b3:d1:3b:42:95:d0:02:88:66:
07:be:4e:e1:29:5c:35:36:87:b3:3b:1f:68:e7:fa:
9f:a8:3b:b4:98:dd:a8:dd:8c:76:a1:c0:e7:07:11:
f5:1f:e2:07:3b:1d:0c:2c:9c:42:33:60:80:41:e0:
e6:87:f0:8d:0c:38:99:b3:d5:c2:b3:c2:d3:bd:aa:
33:a4:13:b6:b6:29:dd:7b:3b:c1:f0:db:86:73:36:
6a:1f:51:fe:db:b3:74:93:77:c5:b3:85:50:86:9d:
7b:cd:56:9c:85:c8:c3:19:13:e7:45:74:a1:ed:c5:
4a:59:6a:7d:34:49:92:68:df:60:3d:2b:3d:a4:a8:
08:6e:0a:dd:1c:4d:fb:91:8d:c1:a9:db:0c:3c:53:
8a:a9:ff:f1:df:21:d3:6d:fb:21:4e:be:d7:aa:41:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:75:DB:A2:DD:B7:FA:19:A6:21:A5:68:8E:60:45:76:05:61:03:87
X509v3 Authority Key Identifier:
keyid:B7:87:1F:29:0F:FF:0E:04:26:0C:67:53:E3:87:C9:EF:B7:5B:E2:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4cfKQ__DgQmDGdT44fJ77db4pY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/836431-b90d-4a98-be2c-955f5cb09893/1/t4cfKQ__DgQmDGdT44fJ77db4pY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b3:ad:99:c9:85:39:f1:23:66:e1:64:99:08:81:71:6f:42:
58:4a:42:56:0c:68:82:9c:c7:5e:c6:69:da:6c:fa:92:66:e3:
74:f8:b7:2f:d3:e1:cf:d0:e2:9f:d9:fa:3e:17:a3:67:ad:98:
a3:8b:1a:b1:48:de:aa:69:e8:a7:b3:9c:d9:2a:a3:ab:ab:a2:
53:79:42:05:94:4f:a1:a4:ed:3f:31:bf:ea:99:5e:25:c2:13:
bf:ca:ac:98:03:45:7f:3a:65:99:fb:40:61:c6:68:7d:4f:59:
c7:25:79:ed:7a:57:cd:f6:5c:27:af:b5:23:7b:de:4b:08:9e:
01:5f:07:62:2d:64:24:7d:3f:19:a0:b9:b2:f7:e6:d4:51:52:
e3:de:c7:8e:45:85:9d:fe:53:74:47:ea:80:12:39:93:ea:7f:
eb:7c:bf:eb:f6:7e:78:8b:5e:8a:d0:17:1f:cf:a0:1c:ad:c9:
76:82:f7:ca:9b:4f:ab:6f:7d:dc:5b:6a:c4:04:7f:ba:61:cc:
3a:aa:73:c2:a3:7f:c7:73:68:74:45:db:44:67:81:85:11:b3:
84:4e:cf:0b:a1:a9:98:0a:41:5e:02:7f:29:7e:d7:a7:7d:b4:
e4:6b:cb:8d:2b:43:5a:15:d1:64:32:6a:b7:1c:27:b1:40:db:
fc:dc:df:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8qESPmfnyKypcth4jWXBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODcxZjI5MGZmZjBlMDQyNjBjNjc1M2UzODdjOWVmYjc1
YmUyOTYwHhcNMjYwODI2MDYwMDU1WhcNMjYwODI3MDYwMDU1WjAzMTEwLwYDVQQD
EyhkZjc1ZGJhMmRkYjdmYTE5YTYyMWE1Njg4ZTYwNDU3NjA1NjEwMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljukp5R65t/BReNyoA2OCYKLcOlF
/ayO1toBa4fvgpEeRrgMJs0fUyaeorFAMvkItcK3S294w3M0Gxdg/PccVxQc7zpL
ESOt/BCtv8g79IirpSnbE0lgh/vzZvDRfaez0TtCldACiGYHvk7hKVw1NoezOx9o
5/qfqDu0mN2o3Yx2ocDnBxH1H+IHOx0MLJxCM2CAQeDmh/CNDDiZs9XCs8LTvaoz
pBO2tindezvB8NuGczZqH1H+27N0k3fFs4VQhp17zVachcjDGRPnRXSh7cVKWWp9
NEmSaN9gPSs9pKgIbgrdHE37kY3BqdsMPFOKqf/x3yHTbfshTr7XqkH5YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9126Ldt/oZpiGlaI5gRXYFYQOHMB8GA1UdIwQY
MBaAFLeHHykP/w4EJgxnU+OHye+3W+KWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMt
OTU1ZjVjYjA5ODkzLzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84MzY0MzEtYjkwZC00YTk4LWJlMmMtOTU1ZjVjYjA5ODkz
LzEvdDRjZktRX19EZ1FtREdkVDQ0Zko3N2RiNHBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbOtmcmF
OfEjZuFkmQiBcW9CWEpCVgxogpzHXsZp2mz6kmbjdPi3L9Phz9Din9n6PhejZ62Y
o4sasUjeqmnop7Oc2Sqjq6uiU3lCBZRPoaTtPzG/6pleJcITv8qsmANFfzplmftA
YcZofU9ZxyV57XpXzfZcJ6+1I3veSwieAV8HYi1kJH0/GaC5svfm1FFS497HjkWF
nf5TdEfqgBI5k+p/63y/6/Z+eIteitAXH8+gHK3JdoL3yptPq2993FtqxAR/umHM
OqpzwqN/x3NodEXbRGeBhRGzhE7PC6GpmApBXgJ/KX7Xp3205GvLjStDWhXRZDJq
txwnsUDb/NzfZA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:06:49 2026 by rpki-client