Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: W3kfRxVJV8hjmvwndOd3RlMeWa5zWJNHtvSXmV/xf3w=
Subject key identifier: 99:CA:80:AE:8E:67:9D:1D:BE:62:AF:D1:7C:47:0D:89:A3:72:0D:D2
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 01A0205625AD2EE0A9808CB2F7EE5678D41F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 152C
Signing time: Thu 20 Aug 2026 18:01:51 +0000
Manifest this update: Thu 20 Aug 2026 18:01:51 +0000
Manifest next update: Fri 21 Aug 2026 18:01:51 +0000
Files and hashes: 1: 7yXVbkDIped5AlVJWBLhNwB93qU.roa (hash: U+X2A4hl4OztYccmnndX5mgP9l1pKYkV+aIE4TVtE9o=)
2: Lac9mI8_0GODDuYUWUFmqBSt9mc.roa (hash: CCm67OvIIp58ZZddyH8lbNoIHH7qksW59/3/CScmsJ8=)
3: g4mflD0Y4dFeWIYXrHeIdFF1Tzk.roa (hash: LWoE8PLWl9I6/87QZF5e3VTAa9OFMyf8LK0mAIwQhYU=)
4: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: UpnIuvH3r439yMy0HHkw2x2IKRgAMOXBaf4UnMBQhfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 18:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:25:ad:2e:e0:a9:80:8c:b2:f7:ee:56:78:d4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Aug 20 18:01:51 2026 GMT
Not After : Aug 21 18:01:51 2026 GMT
Subject: CN=99ca80ae8e679d1dbe62afd17c470d89a3720dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:81:3b:2c:35:6a:a5:d1:39:62:f1:83:b8:
95:d8:72:e0:e3:c5:90:30:eb:9a:c0:10:46:de:98:
41:7c:4b:0b:3c:7f:b6:c4:e4:ed:62:1e:9c:b6:02:
de:6b:e5:02:5d:93:38:61:3b:2a:a4:84:34:ac:09:
88:30:5f:32:0b:0a:af:fb:ec:c5:4c:cd:2f:6c:09:
96:0c:6a:5a:6e:5d:da:b0:80:66:6d:a5:fb:3a:24:
22:51:8d:c9:66:f8:f2:0d:21:34:0e:26:8e:9d:fe:
84:4b:1b:11:d8:b2:af:72:66:35:c2:c6:07:a2:7b:
88:69:25:39:aa:73:73:ab:f3:02:f8:3b:75:c7:2a:
f9:f8:0a:1d:9d:51:7e:6d:7d:2c:c1:4f:e4:f5:64:
10:0c:aa:94:95:79:7c:2d:d2:c6:a9:cc:46:b4:20:
0f:00:03:97:1e:d0:53:29:fc:a4:e2:fc:97:91:78:
26:ea:7b:c0:14:20:3c:cb:5a:b0:bf:e8:a9:66:bf:
02:21:fb:d5:e0:5b:63:35:81:c6:aa:7a:23:8c:8b:
3f:57:2e:17:02:4d:ef:8a:30:7c:94:4a:26:83:7a:
3c:c8:dd:50:1e:07:5a:0c:f9:a7:4c:58:c2:4f:32:
42:35:b9:f9:54:a1:53:c0:35:d1:63:08:dd:12:a3:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CA:80:AE:8E:67:9D:1D:BE:62:AF:D1:7C:47:0D:89:A3:72:0D:D2
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:96:e7:86:dd:c8:62:ce:0a:30:fb:4f:32:fc:da:ba:85:ba:
40:eb:24:86:96:a3:8e:6a:16:25:53:14:0d:e8:bd:18:ac:19:
d8:45:ef:8a:d9:01:ff:e3:23:ae:21:3a:a3:20:20:d4:e5:a2:
18:3e:55:75:31:3e:13:4e:d3:72:96:da:45:31:37:ad:f3:ec:
d0:f0:e1:21:fe:c4:1b:6e:d2:97:26:5d:aa:fc:13:fc:15:36:
39:f9:fa:f4:cc:92:ac:3e:39:9f:80:75:eb:5f:78:61:ea:3e:
ea:22:86:db:1c:ac:b1:8b:ee:90:51:20:9d:21:f6:54:da:4f:
f1:4c:42:76:ff:ea:5f:24:3d:10:80:c4:26:3e:b1:05:ab:1a:
b9:f4:38:f4:3d:11:8d:7d:af:50:4b:95:15:33:34:66:43:99:
e7:ae:4a:d7:7e:0b:bf:9e:b4:b5:90:c8:88:d9:64:1d:5d:54:
55:3c:d5:52:f2:8d:04:e0:19:90:4e:40:6b:3d:fb:74:2e:eb:
d9:f5:7b:5c:00:a7:44:1f:97:f3:d3:52:a5:ed:f2:2c:80:0c:
70:8f:36:5a:f0:be:bc:f6:f7:37:5e:76:b4:8e:2a:b1:32:e9:
fb:f4:8f:af:f8:77:39:56:3b:8b:fa:a3:5b:37:19:0b:25:b2:
ff:cb:d6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgViWtLuCpgIyy9+5WeNQfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx
NmYzYWQwHhcNMjYwODIwMTgwMTUxWhcNMjYwODIxMTgwMTUxWjAzMTEwLwYDVQQD
Eyg5OWNhODBhZThlNjc5ZDFkYmU2MmFmZDE3YzQ3MGQ4OWEzNzIwZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WmBOyw1aqXROWLxg7iV2HLg48WQ
MOuawBBG3phBfEsLPH+2xOTtYh6ctgLea+UCXZM4YTsqpIQ0rAmIMF8yCwqv++zF
TM0vbAmWDGpabl3asIBmbaX7OiQiUY3JZvjyDSE0DiaOnf6ESxsR2LKvcmY1wsYH
onuIaSU5qnNzq/MC+Dt1xyr5+AodnVF+bX0swU/k9WQQDKqUlXl8LdLGqcxGtCAP
AAOXHtBTKfyk4vyXkXgm6nvAFCA8y1qwv+ipZr8CIfvV4FtjNYHGqnojjIs/Vy4X
Ak3vijB8lEomg3o8yN1QHgdaDPmnTFjCTzJCNbn5VKFTwDXRYwjdEqOmfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnKgK6OZ50dvmKv0XxHDYmjcg3SMB8GA1UdIwQY
MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt
NWViZGQ5ZTI4ODdjLzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj
LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJbnht3I
Ys4KMPtPMvzauoW6QOskhpajjmoWJVMUDei9GKwZ2EXvitkB/+MjriE6oyAg1OWi
GD5VdTE+E07TcpbaRTE3rfPs0PDhIf7EG27SlyZdqvwT/BU2Ofn69MySrD45n4B1
6194Yeo+6iKG2xyssYvukFEgnSH2VNpP8UxCdv/qXyQ9EIDEJj6xBasaufQ49D0R
jX2vUEuVFTM0ZkOZ565K134Lv560tZDIiNlkHV1UVTzVUvKNBOAZkE5Aaz37dC7r
2fV7XACnRB+X89NSpe3yLIAMcI82WvC+vPb3N152tI4qsTLp+/SPr/h3OVY7i/qj
WzcZCyWy/8vWbw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 23:35:22 2026 by rpki-client