Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: 9s3bYrr6lbKmTUTPVoGsevzKThISZWIeC1wTuAPuzn8=
Subject key identifier: 83:90:43:65:F2:B2:94:04:42:5D:E6:A2:9F:A1:C0:60:CC:94:0A:35
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 019DF125FF7B1F5FB4DE0AF35DD2B3574808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0944
Signing time: Mon 04 May 2026 04:01:32 +0000
Manifest this update: Mon 04 May 2026 04:01:32 +0000
Manifest next update: Tue 05 May 2026 04:01:32 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: 7BhaflN4lYn+ZV0ePmdxjP1cSedOgvynteFG3aanI+g=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 May 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f1:25:ff:7b:1f:5f:b4:de:0a:f3:5d:d2:b3:57:48:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: May 4 04:01:32 2026 GMT
Not After : May 5 04:01:32 2026 GMT
Subject: CN=83904365f2b29404425de6a29fa1c060cc940a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:e2:74:c9:05:b9:69:5f:ff:4f:ac:46:52:
c0:82:e0:ac:d4:cd:84:2a:1e:b7:1d:84:cd:ba:a2:
b0:ac:44:c8:54:20:a6:04:19:73:47:c5:2d:2d:c6:
09:fd:29:10:16:05:77:f8:34:fe:e0:12:bf:9d:57:
e2:1b:a3:75:01:49:09:7c:26:1d:57:e6:8b:1e:90:
e3:ed:0f:b5:f5:1a:a2:b3:3e:de:33:39:f5:0d:85:
53:ed:65:45:b7:48:26:06:33:5a:ae:c6:fe:3e:5d:
4a:bc:49:3d:0f:f2:32:e8:21:f6:de:e1:a9:27:87:
70:b2:cd:cc:29:24:87:6f:9d:9c:60:83:4d:e5:e4:
cc:77:ba:f0:7f:fa:54:dc:a7:61:16:ae:f4:59:0f:
ec:4e:01:3b:e1:64:33:b9:f9:2b:ba:30:26:54:ce:
61:51:13:bf:29:e9:ba:b8:63:ce:8f:48:17:81:c4:
e5:91:da:fd:f0:46:c7:0b:82:e8:2e:af:73:93:3d:
85:7b:3a:8f:b5:05:1a:b3:f7:c7:6e:80:e6:4f:d7:
2b:bc:f0:0d:da:f8:55:b6:0d:15:63:3b:f7:83:e2:
8f:5d:f9:58:66:d8:53:99:3c:8f:c9:5d:d4:5f:f0:
12:97:e7:2e:8b:dd:0c:8e:04:a9:ce:37:88:6d:e8:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:43:65:F2:B2:94:04:42:5D:E6:A2:9F:A1:C0:60:CC:94:0A:35
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:95:b3:e8:cb:17:cf:a4:eb:79:97:e8:5c:03:ce:ee:c8:c0:
aa:f3:ed:1c:57:22:34:f6:56:ee:9e:65:d0:98:e9:c9:d3:c9:
b0:d6:a3:e3:6a:de:f1:b7:b2:15:87:6c:90:8c:03:50:50:c1:
b8:9a:35:7e:b6:80:63:9c:d4:f6:90:ff:46:78:a9:24:8d:b6:
44:7b:51:5d:a6:08:13:17:35:01:90:60:85:ff:b2:5c:f5:2e:
cc:94:3a:69:97:27:8b:0f:ca:e6:9a:0a:0d:e7:88:ae:7a:77:
a2:b9:27:b8:4b:19:c0:10:93:e0:ea:19:48:24:12:3f:e0:6f:
c3:b9:24:41:6b:ff:38:e5:5c:05:d9:55:ba:ba:43:75:71:50:
9a:75:96:db:0f:f7:9f:0a:f6:fd:4b:4e:aa:29:25:cd:f4:68:
4a:37:73:61:ea:75:5a:58:6a:ab:a9:5b:82:f1:77:2c:78:a4:
8f:2c:cb:62:00:0f:1c:7f:24:f6:6a:b3:db:bc:8f:9e:e0:c8:
17:fa:04:af:cd:60:80:b1:33:7d:4d:ba:65:6f:11:a9:c7:87:
be:7d:d8:f2:43:c8:bf:6b:ad:e5:4e:4d:8a:95:fc:d9:fe:9f:
12:7f:78:b3:2a:9c:6f:e4:10:ba:37:00:c7:dc:7b:ae:e1:b4:
cf:b8:e0:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3xJf97H1+03grzXdKzV0gIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzQ2MTQ3N2I1OWI3YmMwOTA2ZjZjZTYwNjUwYmIzYWQy
ZGVlNTcwHhcNMjYwNTA0MDQwMTMyWhcNMjYwNTA1MDQwMTMyWjAzMTEwLwYDVQQD
Eyg4MzkwNDM2NWYyYjI5NDA0NDI1ZGU2YTI5ZmExYzA2MGNjOTQwYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf7idMkFuWlf/0+sRlLAguCs1M2E
Kh63HYTNuqKwrETIVCCmBBlzR8UtLcYJ/SkQFgV3+DT+4BK/nVfiG6N1AUkJfCYd
V+aLHpDj7Q+19Rqisz7eMzn1DYVT7WVFt0gmBjNarsb+Pl1KvEk9D/Iy6CH23uGp
J4dwss3MKSSHb52cYINN5eTMd7rwf/pU3KdhFq70WQ/sTgE74WQzufkrujAmVM5h
URO/Kem6uGPOj0gXgcTlkdr98EbHC4LoLq9zkz2FezqPtQUas/fHboDmT9crvPAN
2vhVtg0VYzv3g+KPXflYZthTmTyPyV3UX/ASl+cui90MjgSpzjeIbegSUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOQQ2XyspQEQl3mop+hwGDMlAo1MB8GA1UdIwQY
MBaAFE50YUd7Wbe8CQb2zmBlC7OtLe5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUt
ZGRiYzBkZWY4M2UxLzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82MTEwOWYtMmQxOS00MWNlLWJhNmUtZGRiYzBkZWY4M2Ux
LzEvVG5SaFIzdFp0N3dKQnZiT1lHVUxzNjB0N2xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5Wz6MsX
z6TreZfoXAPO7sjAqvPtHFciNPZW7p5l0JjpydPJsNaj42re8beyFYdskIwDUFDB
uJo1fraAY5zU9pD/RnipJI22RHtRXaYIExc1AZBghf+yXPUuzJQ6aZcniw/K5poK
DeeIrnp3orknuEsZwBCT4OoZSCQSP+Bvw7kkQWv/OOVcBdlVurpDdXFQmnWW2w/3
nwr2/UtOqiklzfRoSjdzYep1Wlhqq6lbgvF3LHikjyzLYgAPHH8k9mqz27yPnuDI
F/oEr81ggLEzfU26ZW8RqceHvn3Y8kPIv2ut5U5NipX82f6fEn94syqcb+QQujcA
x9x7ruG0z7jgBA==
-----END CERTIFICATE-----
Generated at Mon May 4 13:18:15 2026 by rpki-client