Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: YsHAq39TxGQvn+Ve0VZghrKefOBbsYUgGjMr2VGfTlU=
Subject key identifier: 62:20:C4:91:77:09:DD:AE:14:19:2D:AD:2C:45:A7:CB:F3:65:82:C1
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 01A047D09F0E948278CA06DEAFCB4CDCC5E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 1A25
Signing time: Fri 28 Aug 2026 10:00:49 +0000
Manifest this update: Fri 28 Aug 2026 10:00:49 +0000
Manifest next update: Sat 29 Aug 2026 10:00:49 +0000
Files and hashes: 1: 1-GyqlA5KmcLfrL7pM3klE299nlw.roa (hash: J/BXL3XYbhHb/gfys6Z72uUSQjUFONh9EZ4ff4040ZQ=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: NO9VqfebEDgnvtErzS+JT3gGATeJylR3WQEiD5Z4Yhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:d0:9f:0e:94:82:78:ca:06:de:af:cb:4c:dc:c5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Aug 28 10:00:49 2026 GMT
Not After : Aug 29 10:00:49 2026 GMT
Subject: CN=6220c4917709ddae14192dad2c45a7cbf36582c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:93:5c:09:93:df:2f:76:a9:2b:76:d2:f2:
1e:20:0e:f3:55:ba:4e:ad:4e:f4:18:37:d7:b7:e1:
1a:f3:50:37:33:7b:67:25:97:2a:a7:67:28:d6:8a:
fd:b5:e5:ef:f5:fe:36:a4:02:a1:90:ce:fd:28:34:
16:32:74:b9:92:13:95:3f:c2:0b:bc:83:12:cd:58:
b6:b7:53:23:b0:c4:6f:cc:98:a2:b1:7b:eb:39:ad:
51:26:1b:64:3a:b5:6f:3b:fc:9e:31:01:ba:aa:d2:
d9:f3:3d:e6:40:c5:ad:3a:59:3b:d6:fd:9f:a4:de:
56:12:85:02:b4:88:8f:1f:4b:3a:97:d4:bd:8a:50:
ac:3c:93:53:df:f4:7f:8a:4a:f5:33:17:5f:39:34:
f4:f1:f7:ce:cb:30:4b:a4:68:18:a8:6c:4e:ea:3a:
a7:c6:f4:ab:b4:72:7b:b5:af:f2:5a:da:f4:01:69:
a6:76:09:78:cc:33:54:2d:5f:c4:d9:2b:c8:08:5a:
fe:98:86:4d:e4:d7:84:fc:63:db:b0:48:b4:e8:3b:
6b:c7:31:62:68:2d:0c:4f:e7:59:c0:b0:a5:9c:cb:
3e:3c:42:f5:f2:51:ce:09:2c:d0:c5:b7:94:59:9f:
44:9d:e8:95:8d:a6:4d:1c:8c:f0:f8:9d:80:54:8a:
18:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:20:C4:91:77:09:DD:AE:14:19:2D:AD:2C:45:A7:CB:F3:65:82:C1
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:79:cc:19:04:19:2d:17:04:05:e9:ef:18:74:c8:fe:6c:c8:
ee:2e:7e:5e:d6:8a:c5:9f:5a:74:fc:07:61:82:a1:2d:26:7a:
ae:fa:b7:59:e7:3c:d2:0d:2e:50:27:76:39:9a:27:d6:43:0d:
1c:05:6a:27:bd:72:47:88:c3:17:61:1c:6e:f3:83:2b:cd:c1:
9e:aa:34:5a:70:9e:8a:e4:e9:ff:02:20:6d:12:51:43:17:e0:
65:df:4c:bf:ef:52:ce:b4:b8:59:df:04:94:e6:a7:4a:2e:49:
17:c5:0b:12:f5:a5:14:f0:8d:76:38:36:88:32:91:eb:69:f5:
01:cb:1e:ca:d9:09:b5:bc:2b:57:88:19:09:9c:d1:e4:d5:77:
cd:ea:c6:6e:25:46:17:1a:e4:71:dd:19:a1:34:3d:e4:93:c9:
0e:59:82:33:3a:25:9e:96:e7:6a:d7:c9:38:a6:e4:9e:50:25:
05:53:4d:45:c6:37:82:51:ee:b2:36:cf:b7:62:1b:c4:f2:7f:
d1:58:be:31:84:16:a0:f3:1f:34:eb:e7:be:17:3e:2a:81:64:
73:3b:f1:a1:c6:5a:07:7b:42:7b:a5:ad:62:9d:a8:3a:15:91:
fe:ca:4a:c3:0f:99:70:42:b1:a3:f0:8e:41:e3:18:5d:0d:cf:
b4:70:ea:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBH0J8OlIJ4ygber8tM3MXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy
MTk0ZmEwHhcNMjYwODI4MTAwMDQ5WhcNMjYwODI5MTAwMDQ5WjAzMTEwLwYDVQQD
Eyg2MjIwYzQ5MTc3MDlkZGFlMTQxOTJkYWQyYzQ1YTdjYmYzNjU4MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwmTXAmT3y92qSt20vIeIA7zVbpO
rU70GDfXt+Ea81A3M3tnJZcqp2co1or9teXv9f42pAKhkM79KDQWMnS5khOVP8IL
vIMSzVi2t1MjsMRvzJiisXvrOa1RJhtkOrVvO/yeMQG6qtLZ8z3mQMWtOlk71v2f
pN5WEoUCtIiPH0s6l9S9ilCsPJNT3/R/ikr1MxdfOTT08ffOyzBLpGgYqGxO6jqn
xvSrtHJ7ta/yWtr0AWmmdgl4zDNULV/E2SvICFr+mIZN5NeE/GPbsEi06DtrxzFi
aC0MT+dZwLClnMs+PEL18lHOCSzQxbeUWZ9EneiVjaZNHIzw+J2AVIoYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIgxJF3Cd2uFBktrSxFp8vzZYLBMB8GA1UdIwQY
MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt
NGNhOTU2YjA4YTQxLzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx
LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3nMGQQZ
LRcEBenvGHTI/mzI7i5+XtaKxZ9adPwHYYKhLSZ6rvq3Wec80g0uUCd2OZon1kMN
HAVqJ71yR4jDF2EcbvODK83Bnqo0WnCeiuTp/wIgbRJRQxfgZd9Mv+9SzrS4Wd8E
lOanSi5JF8ULEvWlFPCNdjg2iDKR62n1AcseytkJtbwrV4gZCZzR5NV3zerGbiVG
Fxrkcd0ZoTQ95JPJDlmCMzolnpbnatfJOKbknlAlBVNNRcY3glHusjbPt2IbxPJ/
0Vi+MYQWoPMfNOvnvhc+KoFkczvxocZaB3tCe6WtYp2oOhWR/spKww+ZcEKxo/CO
QeMYXQ3PtHDqNg==
-----END CERTIFICATE-----
Generated at Fri Aug 28 18:21:25 2026 by rpki-client