Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
File: tZtlS0KDPTZojjeakhvrrswwd2I.mft (raw, json)
Hash identifier: jtdilmQs85tqlgJ1W+nW1nzu3kz89mqIBdfASrMN6/4=
Subject key identifier: F9:19:B8:20:F7:99:87:2A:31:18:CD:99:A6:4A:F1:B4:36:FC:43:FE
Authority key identifier: B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
Certificate issuer: /CN=b59b654b42833d36688e379a921bebaecc307762
Certificate serial: 01A09057E7C013179A97E8112F24082AFBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
Manifest number: C4
Signing time: Fri 11 Sep 2026 12:01:15 +0000
Manifest this update: Fri 11 Sep 2026 12:01:15 +0000
Manifest next update: Sat 12 Sep 2026 12:01:15 +0000
Files and hashes: 1: P1tf3TOfH-5BUA4TlKHVZFLsg9E.roa (hash: Ou5jVY+Wu+51dLZB22miAYmWfU4viS5vwM+gRlM0aZU=)
2: tZtlS0KDPTZojjeakhvrrswwd2I.crl (hash: oGy+jk+/AoRl48uo7MbCXYV22+sJFjPpwBNXAoakybQ=)
3: whrEFYh55PfP3rH9r88LFTEnY0U.roa (hash: TH01oABU19/I/IoXNBdj7bjG3uEgkQpDazrpyE0JmkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:e7:c0:13:17:9a:97:e8:11:2f:24:08:2a:fb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59b654b42833d36688e379a921bebaecc307762
Validity
Not Before: Sep 11 12:01:15 2026 GMT
Not After : Sep 12 12:01:15 2026 GMT
Subject: CN=f919b820f799872a3118cd99a64af1b436fc43fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:fe:30:e6:03:58:25:a5:60:3f:4e:d9:fe:
97:63:12:d7:08:5e:6c:fc:5c:8f:8d:05:79:65:2e:
0d:75:b4:38:8b:5f:3d:cd:22:dc:a3:c6:92:86:1e:
ce:59:8b:59:9f:fe:8e:9f:ed:1a:0b:84:87:28:f5:
18:e9:78:6b:4a:b8:be:6c:40:3b:c7:3c:82:55:bc:
81:07:0e:51:54:c1:df:a1:f1:fb:b7:d1:af:e0:4b:
90:92:e3:7f:b9:32:12:04:18:c3:40:4b:82:1c:62:
2b:23:a3:94:f2:85:7e:8f:16:90:57:b4:43:9e:8b:
f6:e8:f6:9c:23:12:56:78:87:32:ca:4e:08:c4:fe:
9d:00:f6:d7:37:63:98:35:ea:5b:cf:6b:c6:99:1d:
f5:20:39:47:64:96:6c:c9:b1:d5:00:74:58:8f:83:
2f:fe:39:a4:ce:7f:ec:b5:87:8b:cc:3f:35:1e:b8:
34:d7:86:21:60:d7:74:f4:12:78:1c:30:26:63:cc:
f8:7c:76:5e:be:ec:13:c9:2c:16:9b:69:37:92:98:
8f:fd:5e:17:0f:25:e6:05:3e:c8:ff:32:2e:88:d2:
b6:78:62:70:cf:1c:54:e9:bc:10:96:95:db:cb:86:
ea:2d:76:50:dc:f2:1d:24:5e:66:e7:6a:ec:cf:20:
ff:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:B8:20:F7:99:87:2A:31:18:CD:99:A6:4A:F1:B4:36:FC:43:FE
X509v3 Authority Key Identifier:
keyid:B5:9B:65:4B:42:83:3D:36:68:8E:37:9A:92:1B:EB:AE:CC:30:77:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZtlS0KDPTZojjeakhvrrswwd2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/tZtlS0KDPTZojjeakhvrrswwd2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:6f:69:3a:ac:07:f2:28:ef:42:b0:a1:17:a5:51:6c:bb:2c:
69:1e:7d:86:27:ac:d0:1b:4a:21:a4:16:cc:6d:27:3a:95:f1:
9c:c1:9e:92:6e:37:a9:8e:5a:31:68:a9:f3:0d:96:f3:c8:29:
91:5f:30:89:18:1b:9f:93:c2:91:78:3e:25:05:ab:9d:20:02:
a4:f7:22:8d:b6:e2:3c:bb:10:a8:6a:8e:65:2a:ee:58:63:64:
e5:19:42:27:e6:70:5b:c1:1a:92:20:a7:08:46:63:6e:3c:f1:
93:4a:54:d2:f9:59:3e:76:27:bd:f6:36:e4:22:38:3d:d2:69:
35:9d:0b:bb:64:95:94:5f:a2:f2:94:e2:ad:da:02:0a:54:b0:
40:3e:09:c5:77:2a:98:4d:ad:25:4c:20:be:44:9f:0a:5a:fe:
1d:8c:4c:c6:c9:30:e2:d8:16:b4:fb:5a:c1:76:56:75:d1:80:
32:ee:5b:e1:a6:2d:4c:b4:94:d5:66:3e:63:70:ca:d5:b8:78:
69:55:4c:25:68:44:ac:81:cf:23:33:99:39:01:d5:09:41:15:
92:96:53:19:06:23:aa:f2:f9:d0:ab:41:1d:b7:3b:28:72:9b:
9f:f1:3e:94:ba:7b:5c:6f:34:04:75:d9:2c:be:9a:f8:64:a5:
93:5f:a1:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQV+fAExeal+gRLyQIKvuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OWI2NTRiNDI4MzNkMzY2ODhlMzc5YTkyMWJlYmFlY2Mz
MDc3NjIwHhcNMjYwOTExMTIwMTE1WhcNMjYwOTEyMTIwMTE1WjAzMTEwLwYDVQQD
EyhmOTE5YjgyMGY3OTk4NzJhMzExOGNkOTlhNjRhZjFiNDM2ZmM0M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHv+MOYDWCWlYD9O2f6XYxLXCF5s
/FyPjQV5ZS4NdbQ4i189zSLco8aShh7OWYtZn/6On+0aC4SHKPUY6XhrSri+bEA7
xzyCVbyBBw5RVMHfofH7t9Gv4EuQkuN/uTISBBjDQEuCHGIrI6OU8oV+jxaQV7RD
nov26PacIxJWeIcyyk4IxP6dAPbXN2OYNepbz2vGmR31IDlHZJZsybHVAHRYj4Mv
/jmkzn/stYeLzD81Hrg014YhYNd09BJ4HDAmY8z4fHZevuwTySwWm2k3kpiP/V4X
DyXmBT7I/zIuiNK2eGJwzxxU6bwQlpXby4bqLXZQ3PIdJF5m52rszyD/pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkZuCD3mYcqMRjNmaZK8bQ2/EP+MB8GA1UdIwQY
MBaAFLWbZUtCgz02aI43mpIb667MMHdiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFp0bFMwS0RQVFpvamplYWtodnJyc3d3ZDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTIt
MDJiMzM1ODJjNzQ3LzEvdFp0bFMwS0RQVFpvamplYWtodnJyc3d3ZDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9mMWQ5NzYtNzI2Yi00Y2I3LTlmYTItMDJiMzM1ODJjNzQ3
LzEvdFp0bFMwS0RQVFpvamplYWtodnJyc3d3ZDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE29pOqwH
8ijvQrChF6VRbLssaR59hies0BtKIaQWzG0nOpXxnMGekm43qY5aMWip8w2W88gp
kV8wiRgbn5PCkXg+JQWrnSACpPcijbbiPLsQqGqOZSruWGNk5RlCJ+ZwW8EakiCn
CEZjbjzxk0pU0vlZPnYnvfY25CI4PdJpNZ0Lu2SVlF+i8pTirdoCClSwQD4JxXcq
mE2tJUwgvkSfClr+HYxMxskw4tgWtPtawXZWddGAMu5b4aYtTLSU1WY+Y3DK1bh4
aVVMJWhErIHPIzOZOQHVCUEVkpZTGQYjqvL50KtBHbc7KHKbn/E+lLp7XG80BHXZ
LL6a+GSlk1+hxA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 22:00:30 2026 by rpki-client