Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: h8vEaT6EKqvFxgqw/YgSiIKDCDTay4NTBzn8o/kRNVc=
Subject key identifier: 12:AB:AD:A3:D7:1D:4F:F4:DA:51:7F:65:B7:17:81:9B:9E:F8:15:C9
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 01A1716F070B0C1794EF4580DAD829CB4E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 1723
Signing time: Sun 25 Oct 2026 05:01:03 +0000
Manifest this update: Sun 25 Oct 2026 05:01:03 +0000
Manifest next update: Mon 26 Oct 2026 05:01:03 +0000
Files and hashes: 1: DnWfHELWv6ZXmwtakQ_6GSkBnMs.roa (hash: sD3OKMp3tJ9sJrkja6bcQY3bU7GkERVJF54ua1KO+ik=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: Gv3Y32OQiEQAxfrZKPWGnF7yswNVQ6/5jxCooyn3z34=)
3: yIPdIGKPSnnWaFjIROBzg5HRQN4.roa (hash: mQmVzMDOZ6m+DVFs/cWi/nLMKKEFrfsoFqYmCDlkyPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:6f:07:0b:0c:17:94:ef:45:80:da:d8:29:cb:4e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Oct 25 05:01:03 2026 GMT
Not After : Oct 26 05:01:03 2026 GMT
Subject: CN=12abada3d71d4ff4da517f65b717819b9ef815c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:74:56:a5:90:47:ba:d5:e7:53:6c:d8:a4:
9b:ac:8a:f0:8f:d1:0b:7f:ce:a8:a4:a8:3a:6c:c2:
1b:60:2e:c8:7b:d4:8a:33:6a:14:77:83:66:ff:75:
91:11:26:16:e3:a2:b5:25:06:41:bb:35:4d:79:b9:
65:75:8b:0a:70:d9:ef:f5:ea:88:8b:a0:1b:18:3f:
56:ef:d2:1f:d1:9f:ba:17:07:c0:2a:74:8c:c1:29:
10:23:f4:75:81:52:ac:45:46:82:bc:c3:a7:43:a0:
42:7c:5c:9d:78:d7:eb:bc:71:f8:5e:55:a8:76:fa:
30:51:43:1a:4c:1a:d3:6c:31:a9:2c:e7:78:6d:df:
76:94:66:45:0c:b9:71:75:08:23:b1:56:f7:50:80:
69:a5:51:2b:17:69:bf:43:17:f6:fd:6c:f5:2d:f9:
11:ae:d3:0c:21:1d:05:cb:cb:07:a7:8b:5c:73:3a:
e5:7a:c6:e9:e9:42:f0:65:30:ec:36:64:b5:8b:11:
ca:f4:16:47:d6:8f:f1:c8:b5:bd:df:d6:49:5c:97:
e5:f3:32:ca:38:e3:71:ca:94:6e:2c:04:62:e9:f6:
4c:12:e0:66:7e:a9:ab:e2:60:4a:fa:dd:f8:e2:88:
6b:96:99:8b:3d:f8:29:fe:d3:00:fb:c7:1e:47:eb:
eb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AB:AD:A3:D7:1D:4F:F4:DA:51:7F:65:B7:17:81:9B:9E:F8:15:C9
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:33:a8:f1:42:f0:7f:5f:fd:9b:08:4b:c2:00:d4:11:f0:39:
87:5e:eb:ee:0f:a8:17:90:74:d7:b7:d4:cb:2b:9c:fd:ae:78:
85:85:1a:ce:a3:69:4a:66:59:a9:12:66:f8:35:da:9b:c2:e7:
57:1d:16:6d:1f:0c:44:82:62:25:00:ec:46:2e:8a:78:ec:50:
f1:79:01:42:29:e9:39:f7:d0:b8:80:21:38:e0:77:70:c9:2d:
af:34:31:ef:12:e6:21:4f:3d:36:43:19:dc:84:6c:1e:7d:a8:
66:a8:71:16:72:9f:25:43:8d:45:94:4f:dd:38:ea:60:05:ea:
02:fd:2d:22:72:04:18:12:3b:e5:95:06:df:bb:d7:62:da:c2:
2f:58:1e:64:d7:eb:55:63:df:ec:42:0a:ab:b4:7c:0f:b9:11:
e5:34:d0:b0:a5:25:14:6a:e7:26:ea:ac:b0:71:42:7c:b4:b7:
fb:0f:a0:7f:a4:21:8b:e3:e4:8d:38:68:d2:ee:e0:0a:0e:c5:
83:e9:9b:b9:d2:a3:b8:d1:5d:c1:9f:42:e1:eb:a9:3c:1a:b0:
74:26:0c:d8:e9:a9:02:b0:74:2d:9f:0f:ce:30:22:59:46:93:
d7:3a:37:08:43:ab:d9:b5:89:79:d1:b9:66:cf:ec:91:80:f5:
8a:3b:b4:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFxbwcLDBeU70WA2tgpy04JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODQ3N2U1NjlkMWQ3ZDYwZjA0NjlhN2NjOGE3ZjQ3NDYw
MzliYjcwHhcNMjYxMDI1MDUwMTAzWhcNMjYxMDI2MDUwMTAzWjAzMTEwLwYDVQQD
EygxMmFiYWRhM2Q3MWQ0ZmY0ZGE1MTdmNjViNzE3ODE5YjllZjgxNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzl0VqWQR7rV51Ns2KSbrIrwj9EL
f86opKg6bMIbYC7Ie9SKM2oUd4Nm/3WRESYW46K1JQZBuzVNeblldYsKcNnv9eqI
i6AbGD9W79If0Z+6FwfAKnSMwSkQI/R1gVKsRUaCvMOnQ6BCfFydeNfrvHH4XlWo
dvowUUMaTBrTbDGpLOd4bd92lGZFDLlxdQgjsVb3UIBppVErF2m/Qxf2/Wz1LfkR
rtMMIR0Fy8sHp4tcczrlesbp6ULwZTDsNmS1ixHK9BZH1o/xyLW939ZJXJfl8zLK
OONxypRuLARi6fZMEuBmfqmr4mBK+t344ohrlpmLPfgp/tMA+8ceR+vrcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKrraPXHU/02lF/ZbcXgZue+BXJMB8GA1UdIwQY
MBaAFE+Ed+Vp0dfWDwRpp8yKf0dGA5u3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEt
YWQxNDdkOTE1NzkxLzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NzUxOTAtY2I5NC00MDYzLThjMWEtYWQxNDdkOTE1Nzkx
LzEvVDRSMzVXblIxOVlQQkdtbnpJcF9SMFlEbTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjOo8ULw
f1/9mwhLwgDUEfA5h17r7g+oF5B017fUyyuc/a54hYUazqNpSmZZqRJm+DXam8Ln
Vx0WbR8MRIJiJQDsRi6KeOxQ8XkBQinpOffQuIAhOOB3cMktrzQx7xLmIU89NkMZ
3IRsHn2oZqhxFnKfJUONRZRP3TjqYAXqAv0tInIEGBI75ZUG37vXYtrCL1geZNfr
VWPf7EIKq7R8D7kR5TTQsKUlFGrnJuqssHFCfLS3+w+gf6Qhi+PkjTho0u7gCg7F
g+mbudKjuNFdwZ9C4eupPBqwdCYM2OmpArB0LZ8PzjAiWUaT1zo3CEOr2bWJedG5
Zs/skYD1iju0zQ==
-----END CERTIFICATE-----
Generated at Sun Oct 25 12:46:46 2026 by rpki-client