Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File: tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier: o0UAZZiB8/3DiVaaPkkCeTVXCarSr80ErvL/8tPS4kg=
Subject key identifier: 35:D4:0C:0A:8C:04:C7:A1:D2:6A:D2:F5:22:3F:50:BA:B3:8B:26:15
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer: /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial: 01A08AC332DD1A09E7A58FAAEBF1E251BDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 10:00:43 +0000
Manifest this update: Thu 10 Sep 2026 10:00:43 +0000
Manifest next update: Fri 11 Sep 2026 10:00:43 +0000
Files and hashes: 1: 2xyGd4qEniBlKou_7ihYJc4dy5Y.roa (hash: lqEk1LL+Y5wccVFTi2AQMzn54se+0I/4Xp16c+5zeQA=)
2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: rn5FezziOu5D13T449FvrTupm/0Vkcqj2YECvpHMLCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:32:dd:1a:09:e7:a5:8f:aa:eb:f1:e2:51:bd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Validity
Not Before: Sep 10 10:00:43 2026 GMT
Not After : Sep 11 10:00:43 2026 GMT
Subject: CN=35d40c0a8c04c7a1d26ad2f5223f50bab38b2615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:82:7d:c1:05:6f:2e:39:4a:45:8d:3f:e0:
d6:52:d8:f9:8e:70:12:11:e4:5b:7e:7f:c3:7f:36:
70:51:f0:7e:8a:91:ea:38:3f:19:d1:2b:51:63:e8:
40:df:05:1e:09:8b:43:78:6c:0f:73:de:cc:71:e6:
87:c0:77:95:72:e2:9a:df:b4:1d:fc:d2:04:87:41:
d9:58:d8:72:4a:0f:ae:02:92:45:88:02:13:78:64:
54:45:66:ed:83:f3:0a:88:e2:8a:98:cf:5b:3a:3a:
d1:36:b0:e5:d5:6c:f8:78:b1:95:89:95:c6:8e:c0:
08:94:84:32:65:b2:44:87:65:8d:6e:4d:e3:db:57:
11:f8:2e:a7:07:02:75:df:1b:0f:bf:e9:e7:63:f9:
4e:b3:c3:d3:32:03:12:07:5a:5f:d5:8b:c8:78:05:
11:85:f4:38:4b:10:40:98:6d:8e:b7:43:f6:14:c5:
13:6f:1d:71:7a:fd:f2:46:f6:86:89:64:4b:ba:5a:
c5:ba:b3:ca:58:61:b0:ac:76:fb:ec:67:53:74:75:
b3:f4:81:84:8d:1c:b2:31:98:6a:ef:e1:d6:30:b0:
98:83:00:d7:d3:1b:89:ad:4d:b8:2d:ac:2f:8c:f8:
8e:5e:29:82:df:ef:78:a4:47:2a:ae:3e:a7:1a:9a:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:0C:0A:8C:04:C7:A1:D2:6A:D2:F5:22:3F:50:BA:B3:8B:26:15
X509v3 Authority Key Identifier:
keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:df:9d:c8:7e:8a:85:f8:6d:bf:28:9a:d3:28:ef:89:db:70:
50:e3:25:0f:d3:03:08:9e:89:ce:d9:f5:9c:42:a2:cd:37:c8:
c1:62:b8:14:9e:1a:73:62:21:32:a7:45:eb:d3:26:e4:a2:db:
91:45:c1:0e:e9:b0:a4:ea:d1:ac:55:e3:cc:93:cd:18:6e:e9:
10:fe:f0:28:4c:bd:8e:af:ef:6e:03:82:04:5b:bf:cd:06:53:
e4:db:63:b7:99:6c:ac:45:63:3e:53:f1:06:d6:da:29:0b:b0:
77:3a:a0:80:d3:ce:2b:05:ce:eb:43:0f:f2:d4:50:29:a2:59:
61:cb:1e:69:56:3b:6b:96:c5:50:98:fc:39:da:3a:5e:d0:dd:
4a:93:02:bb:20:52:01:a7:4b:af:75:b5:7b:00:df:92:bb:c2:
a7:72:27:10:41:51:55:ca:94:27:e0:8c:54:82:7b:5b:bf:fd:
57:b0:bc:8b:76:e4:42:a9:2f:f5:72:40:74:41:88:89:bc:56:
3d:9c:8f:66:36:3e:f0:45:41:de:1c:4a:41:31:54:36:4b:aa:
5b:3d:34:da:5a:f7:7f:f4:4c:ad:fa:b2:68:49:97:3d:68:07:
c0:81:5a:81:95:ad:34:dc:bd:32:e6:a6:b0:2e:57:18:c8:76:
6e:63:e2:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKwzLdGgnnpY+q6/HiUb2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NWUzYjc0ZmM5MzRiMDkyMTkzYWRlZDdlY2EwMWRhMWVm
MTg2YWQwHhcNMjYwOTEwMTAwMDQzWhcNMjYwOTExMTAwMDQzWjAzMTEwLwYDVQQD
EygzNWQ0MGMwYThjMDRjN2ExZDI2YWQyZjUyMjNmNTBiYWIzOGIyNjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt12CfcEFby45SkWNP+DWUtj5jnAS
EeRbfn/DfzZwUfB+ipHqOD8Z0StRY+hA3wUeCYtDeGwPc97MceaHwHeVcuKa37Qd
/NIEh0HZWNhySg+uApJFiAITeGRURWbtg/MKiOKKmM9bOjrRNrDl1Wz4eLGViZXG
jsAIlIQyZbJEh2WNbk3j21cR+C6nBwJ13xsPv+nnY/lOs8PTMgMSB1pf1YvIeAUR
hfQ4SxBAmG2Ot0P2FMUTbx1xev3yRvaGiWRLulrFurPKWGGwrHb77GdTdHWz9IGE
jRyyMZhq7+HWMLCYgwDX0xuJrU24LawvjPiOXimC3+94pEcqrj6nGpq45QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXUDAqMBMeh0mrS9SI/ULqziyYVMB8GA1UdIwQY
MBaAFLZeO3T8k0sJIZOt7X7KAdoe8YatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9mNTlmOGUtZjU0NC00ZmJlLTk1YzMt
Y2ZmMDBlNGNkMmJlLzEvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9mNTlmOGUtZjU0NC00ZmJlLTk1YzMtY2ZmMDBlNGNkMmJl
LzEvdGw0N2RQeVRTd2toazYzdGZzb0IyaDd4aHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtd+dyH6K
hfhtvyia0yjvidtwUOMlD9MDCJ6Jztn1nEKizTfIwWK4FJ4ac2IhMqdF69Mm5KLb
kUXBDumwpOrRrFXjzJPNGG7pEP7wKEy9jq/vbgOCBFu/zQZT5Ntjt5lsrEVjPlPx
BtbaKQuwdzqggNPOKwXO60MP8tRQKaJZYcseaVY7a5bFUJj8Odo6XtDdSpMCuyBS
AadLr3W1ewDfkrvCp3InEEFRVcqUJ+CMVIJ7W7/9V7C8i3bkQqkv9XJAdEGIibxW
PZyPZjY+8EVB3hxKQTFUNkuqWz002lr3f/RMrfqyaEmXPWgHwIFagZWtNNy9Muam
sC5XGMh2bmPigQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:10:00 2026 by rpki-client