Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File: tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier: 4+8CL2rwsirjg3buEq98tmCwA6pFplUbChBZ3yuGqtQ=
Subject key identifier: DB:10:FC:24:D4:58:2A:5D:DD:2A:DB:23:46:98:B5:34:68:20:7A:D7
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer: /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial: 01A03E5F83952C37730BBD6216E211FF8834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number: 1A20
Signing time: Wed 26 Aug 2026 14:00:41 +0000
Manifest this update: Wed 26 Aug 2026 14:00:41 +0000
Manifest next update: Thu 27 Aug 2026 14:00:41 +0000
Files and hashes: 1: Ay40Es4lmjK5Q5DTaQo_Rj0Il34.roa (hash: l6a+NksOUtbW9bPUki0o5wq7kn4tvxRKIpI840BR/qo=)
2: _6C7ZJIoO8hrlgkDOWBLtP8RmkY.asa (hash: t9M76dXMiyceR0U0QUt2/ZTaClfSexTzeZfzv7VPHnc=)
3: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: SDNkMZad8POmGBzKZLj4LrEJJM55+lIUmz1E49FwFuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:83:95:2c:37:73:0b:bd:62:16:e2:11:ff:88:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Validity
Not Before: Aug 26 14:00:41 2026 GMT
Not After : Aug 27 14:00:41 2026 GMT
Subject: CN=db10fc24d4582a5ddd2adb234698b53468207ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:df:23:27:1f:99:e6:05:bf:77:f5:be:72:fc:
c4:ee:fe:9e:8c:7d:90:9e:15:c3:a7:c1:b1:b4:d0:
fc:87:fb:ae:6f:c6:6f:97:54:09:7c:b5:af:ff:bc:
a9:98:29:33:0a:4d:ca:56:24:ca:13:5c:62:07:2c:
60:7c:96:b6:1e:62:9d:1c:3e:dd:8b:d6:50:cb:0e:
06:9a:ca:0d:d8:db:a2:71:14:62:bc:58:b8:8d:90:
64:cc:6d:db:4e:6b:25:9a:89:26:4d:f7:5d:c9:ad:
27:fe:22:ec:26:76:61:e0:63:dc:b2:43:37:b1:8b:
6e:9e:a3:82:82:92:cb:80:5c:dc:3f:9f:fd:fb:c3:
47:50:b2:40:5d:e9:9e:bf:70:b2:ee:b4:26:41:23:
8c:a4:c9:6b:49:5c:78:de:d8:d4:f0:48:0e:db:e4:
59:fc:8c:4a:c8:25:70:60:00:e3:e2:b5:92:75:4e:
e2:f5:0a:94:f5:26:c8:ae:89:7e:65:f7:8c:d8:90:
6d:cd:88:31:99:ad:23:ee:c3:37:e5:c4:f2:a6:21:
0d:ed:f9:84:d3:4c:74:b1:98:20:93:18:98:13:48:
99:ff:a9:da:b6:6e:93:4b:8d:2a:11:4f:29:55:52:
4c:52:fd:9d:33:8c:1b:bd:3b:a4:f3:a0:5f:8c:ef:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:10:FC:24:D4:58:2A:5D:DD:2A:DB:23:46:98:B5:34:68:20:7A:D7
X509v3 Authority Key Identifier:
keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:df:5e:8a:ef:c4:cd:64:18:82:05:12:59:80:46:d9:e2:9e:
ba:80:d2:1c:81:b0:f0:fe:a4:d0:2f:a6:1a:33:74:94:35:13:
b0:06:d2:bf:66:cd:ed:b2:48:18:5d:ab:96:af:60:e0:f7:01:
f8:4c:2e:87:3b:bf:f7:c0:43:49:19:72:8e:42:4c:82:24:c3:
ba:7c:56:cd:f2:b9:c7:4e:81:90:26:5e:67:f6:7e:9a:fe:f4:
c0:28:06:f3:7c:f4:ab:08:f3:71:3a:fc:1f:67:f7:b3:0d:b2:
b7:be:60:1b:fd:2a:29:1a:ca:ce:30:43:72:df:7c:54:7f:3a:
82:32:a7:e0:b7:da:e2:7f:c7:2f:d3:07:c5:0b:7a:19:69:9c:
4a:65:09:6f:2a:54:6d:74:80:a4:75:d5:4c:a0:69:7d:ab:1a:
61:c0:03:04:e4:13:d1:39:fe:f9:0c:e8:96:ef:a1:8d:6a:34:
ac:03:73:14:ab:19:96:60:47:94:a5:0d:89:44:da:49:d5:66:
5c:60:44:1d:34:3b:38:c3:b7:8f:72:99:ca:30:f8:9c:02:65:
0c:89:9f:01:27:03:a2:14:6e:50:4d:c4:24:b5:e6:d1:02:e6:
ba:47:10:32:c4:8a:03:ee:d7:d3:c5:4f:0d:07:96:29:30:87:
89:52:e3:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+X4OVLDdzC71iFuIR/4g0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0YmRkZTc4NDE1YjY5YzMxMjc3YzBhYWM3ZmNhNjYwN2Q2
MzVkODgwHhcNMjYwODI2MTQwMDQxWhcNMjYwODI3MTQwMDQxWjAzMTEwLwYDVQQD
EyhkYjEwZmMyNGQ0NTgyYTVkZGQyYWRiMjM0Njk4YjUzNDY4MjA3YWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd8jJx+Z5gW/d/W+cvzE7v6ejH2Q
nhXDp8GxtND8h/uub8Zvl1QJfLWv/7ypmCkzCk3KViTKE1xiByxgfJa2HmKdHD7d
i9ZQyw4GmsoN2NuicRRivFi4jZBkzG3bTmslmokmTfddya0n/iLsJnZh4GPcskM3
sYtunqOCgpLLgFzcP5/9+8NHULJAXemev3Cy7rQmQSOMpMlrSVx43tjU8EgO2+RZ
/IxKyCVwYADj4rWSdU7i9QqU9SbIrol+ZfeM2JBtzYgxma0j7sM35cTypiEN7fmE
00x0sZggkxiYE0iZ/6natm6TS40qEU8pVVJMUv2dM4wbvTuk86BfjO+ugQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsQ/CTUWCpd3SrbI0aYtTRoIHrXMB8GA1UdIwQY
MBaAFLS93nhBW2nDEnfAqsf8pmB9Y12IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEt
MDk0NGJlZDBlZDI2LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8zNGQ0NzAtNDlmNy00YWUwLWI2MWEtMDk0NGJlZDBlZDI2
LzEvdEwzZWVFRmJhY01TZDhDcXhfeW1ZSDFqWFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt9eiu/E
zWQYggUSWYBG2eKeuoDSHIGw8P6k0C+mGjN0lDUTsAbSv2bN7bJIGF2rlq9g4PcB
+Ewuhzu/98BDSRlyjkJMgiTDunxWzfK5x06BkCZeZ/Z+mv70wCgG83z0qwjzcTr8
H2f3sw2yt75gG/0qKRrKzjBDct98VH86gjKn4Lfa4n/HL9MHxQt6GWmcSmUJbypU
bXSApHXVTKBpfasaYcADBOQT0Tn++Qzolu+hjWo0rANzFKsZlmBHlKUNiUTaSdVm
XGBEHTQ7OMO3j3KZyjD4nAJlDImfAScDohRuUE3EJLXm0QLmukcQMsSKA+7X08VP
DQeWKTCHiVLjTQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:58:15 2026 by rpki-client