Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File: tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier: nkMkfazZ4thq4VHZZTRmcvzNUGn7r8rJvILdgxKz3lA=
Subject key identifier: 24:30:84:6E:DD:7D:60:F9:02:9A:FE:65:43:A2:9A:96:19:11:DA:61
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 01A0DA28597366014929A3CDB1D06CE29C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number: 0256
Signing time: Fri 25 Sep 2026 20:01:12 +0000
Manifest this update: Fri 25 Sep 2026 20:01:12 +0000
Manifest next update: Sat 26 Sep 2026 20:01:12 +0000
Files and hashes: 1: 72DmjSMw_29l_MO3IEi6OHdN1xU.roa (hash: 8Q2q436xMShLzuSw0XiF5YubpeOEkzT16ilKpEr4WNs=)
2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
4: UgRQ-S_2_jSMHR28Yfy4B7uMcDM.roa (hash: 2q1tfYfhbbmDrJeuTIKGf6ksnLxn1XENXGZ1v4ftHM8=)
5: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
6: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
7: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
8: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
9: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: 3+MH+QWS5LHEjIPhQ6lLDG+APcbxqLT2Q79bUM1JcJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:59:73:66:01:49:29:a3:cd:b1:d0:6c:e2:9c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Sep 25 20:01:12 2026 GMT
Not After : Sep 26 20:01:12 2026 GMT
Subject: CN=2430846edd7d60f9029afe6543a29a961911da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:d2:c1:83:0e:b7:33:a1:92:41:94:0c:50:
7a:cb:09:68:5e:ae:3e:70:11:46:1a:3d:ef:89:2a:
31:8e:36:ce:92:75:9a:e4:b2:15:76:e1:87:28:72:
b7:8c:02:46:ec:ac:76:9a:86:9b:ec:d9:38:28:c5:
f9:1f:ee:dc:8e:a6:56:8c:2f:27:87:1f:99:3e:c3:
ca:cc:c7:87:fa:8a:57:f0:0e:65:28:d6:f3:ee:a3:
ac:76:f4:0c:3d:c5:ea:49:fc:d3:96:fc:d3:fc:d1:
d0:46:84:62:9b:24:13:21:1f:09:d9:81:a7:28:3a:
99:d0:00:db:d4:68:32:2c:c6:99:95:e3:9b:78:57:
4a:45:c9:15:8a:78:83:5e:4e:56:64:5c:34:25:44:
89:34:20:e3:e6:b6:56:d5:49:f7:48:c7:c6:a9:12:
16:22:43:eb:01:f3:ec:d5:ed:18:bc:eb:63:06:60:
3a:70:3d:24:1f:5f:2e:52:c1:f5:d8:b6:d3:c1:d6:
48:87:c3:fe:77:b9:ae:e5:25:ea:d7:d6:38:71:fa:
30:0a:33:02:91:df:81:29:7b:8c:cd:1b:88:dd:89:
cc:f3:13:1d:29:8e:b6:69:48:5c:c4:0f:72:52:bf:
1e:49:f8:62:36:5f:a7:81:f4:3f:9e:c3:de:a5:ac:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:84:6E:DD:7D:60:F9:02:9A:FE:65:43:A2:9A:96:19:11:DA:61
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:1a:41:ba:5c:3f:02:2a:45:4d:92:89:00:e5:ec:42:f0:96:
25:f8:f4:66:b3:57:bf:99:e7:49:9b:b7:40:75:66:93:f3:41:
f7:75:c2:a3:ef:77:c8:f2:4a:8e:c7:66:19:78:d7:71:a9:73:
b8:72:85:61:95:8e:09:69:84:33:fc:94:0a:0d:cc:9c:16:0f:
7d:d8:47:a5:9c:e1:3d:c9:cb:9a:5f:90:11:13:3d:45:9d:da:
cd:ee:10:fe:3d:fe:61:7a:4d:1a:9f:f8:c2:85:fd:d1:58:d1:
84:bd:41:dc:87:bc:70:79:36:38:1e:88:e2:d5:7e:a9:b0:04:
0c:a6:23:ba:dc:5f:b6:eb:b0:bd:77:ce:b6:d9:0b:dc:a1:b1:
12:2c:55:ee:82:e6:7a:83:6d:b5:67:d9:c6:da:bf:4c:8b:26:
84:2b:a5:e5:ed:7e:c3:65:14:bf:c7:5a:a8:d9:f2:da:bf:14:
51:67:f9:78:f9:63:19:bc:5e:db:b4:8a:78:2a:e9:90:8a:bd:
62:e2:16:59:ac:e5:ec:ec:a4:fa:b7:b0:95:39:9b:31:24:c1:
08:03:18:a8:1b:3a:02:bc:b0:d4:20:69:b7:ad:0f:06:c4:89:
25:9a:95:ed:8f:26:ad:14:8b:f3:6e:14:d6:e6:1d:b9:00:1a:
00:d3:d2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDaKFlzZgFJKaPNsdBs4pxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MTg5ZDllYTgyZDVmYmI2NmQ2YzExZjE4NzYzMzQ3NjAz
NGUwZGUwHhcNMjYwOTI1MjAwMTEyWhcNMjYwOTI2MjAwMTEyWjAzMTEwLwYDVQQD
EygyNDMwODQ2ZWRkN2Q2MGY5MDI5YWZlNjU0M2EyOWE5NjE5MTFkYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL7SwYMOtzOhkkGUDFB6ywloXq4+
cBFGGj3viSoxjjbOknWa5LIVduGHKHK3jAJG7Kx2moab7Nk4KMX5H+7cjqZWjC8n
hx+ZPsPKzMeH+opX8A5lKNbz7qOsdvQMPcXqSfzTlvzT/NHQRoRimyQTIR8J2YGn
KDqZ0ADb1GgyLMaZleObeFdKRckViniDXk5WZFw0JUSJNCDj5rZW1Un3SMfGqRIW
IkPrAfPs1e0YvOtjBmA6cD0kH18uUsH12LbTwdZIh8P+d7mu5SXq19Y4cfowCjMC
kd+BKXuMzRuI3YnM8xMdKY62aUhcxA9yUr8eSfhiNl+ngfQ/nsPepawtiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQwhG7dfWD5Apr+ZUOimpYZEdphMB8GA1UdIwQY
MBaAFLUYnZ6oLV+7ZtbBHxh2M0dgNODeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFJpZG5xZ3RYN3RtMXNFZkdIWXpSMkEwNE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81ZTYxZDgtZDFiZi00ZjJhLWEzMmUt
ZjVkNmI3NTJhZTM0LzEvdFJpZG5xZ3RYN3RtMXNFZkdIWXpSMkEwNE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi81ZTYxZDgtZDFiZi00ZjJhLWEzMmUtZjVkNmI3NTJhZTM0
LzEvdFJpZG5xZ3RYN3RtMXNFZkdIWXpSMkEwNE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0xpBulw/
AipFTZKJAOXsQvCWJfj0ZrNXv5nnSZu3QHVmk/NB93XCo+93yPJKjsdmGXjXcalz
uHKFYZWOCWmEM/yUCg3MnBYPfdhHpZzhPcnLml+QERM9RZ3aze4Q/j3+YXpNGp/4
woX90VjRhL1B3Ie8cHk2OB6I4tV+qbAEDKYjutxftuuwvXfOttkL3KGxEixV7oLm
eoNttWfZxtq/TIsmhCul5e1+w2UUv8daqNny2r8UUWf5ePljGbxe27SKeCrpkIq9
YuIWWazl7Oyk+rewlTmbMSTBCAMYqBs6Aryw1CBpt60PBsSJJZqV7Y8mrRSL824U
1uYduQAaANPStg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:31:26 2026 by rpki-client