Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: xfqC7QieBMZpwt6x+SWBOC5pr0YR/t3+xyHxd6uL9Z8=
Subject key identifier: 90:69:EC:14:AA:9B:57:B3:14:3F:10:09:B1:C9:B3:D8:7B:75:A6:76
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01A0859D72E30C90775481B1AFC28CE74CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 135A
Signing time: Wed 09 Sep 2026 10:01:23 +0000
Manifest this update: Wed 09 Sep 2026 10:01:23 +0000
Manifest next update: Thu 10 Sep 2026 10:01:23 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: eQwqvdkfIBcgTp5qlR836LPUeFU83rcaPe7z9cS6bTI=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:9d:72:e3:0c:90:77:54:81:b1:af:c2:8c:e7:4c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Sep 9 10:01:23 2026 GMT
Not After : Sep 10 10:01:23 2026 GMT
Subject: CN=9069ec14aa9b57b3143f1009b1c9b3d87b75a676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:04:56:e0:c0:3d:2e:32:42:d1:4b:bf:1b:65:
d6:ab:24:21:6b:8b:a5:d4:cb:2e:57:c8:bc:b9:53:
49:38:96:84:2d:05:52:c9:f5:dd:d6:a2:80:82:3b:
67:a9:86:19:51:69:4d:8d:c2:ef:9c:f0:ed:29:da:
f4:ee:9b:35:61:ad:89:74:cc:02:3b:e6:ad:e4:c6:
96:a5:80:b2:0b:94:be:7a:60:8e:c8:20:88:f8:f2:
ce:b8:06:d4:4c:3f:23:d9:a5:02:10:ed:e4:89:70:
77:38:b1:63:93:b7:e5:66:97:92:ac:d7:00:64:8f:
91:4c:58:f3:58:07:90:37:5f:28:dc:48:7c:a4:b7:
a2:0a:57:a3:c9:2d:8a:e2:8e:c5:55:7a:8f:a7:b1:
51:0e:c1:68:fc:4d:42:b2:98:b0:35:63:66:6c:b4:
ef:09:b8:ef:f4:10:1c:30:a6:d2:ec:23:07:43:17:
1e:69:16:e8:be:0f:15:d8:ad:f3:7f:be:ea:c4:ac:
c8:86:ef:14:bb:ef:c1:66:ca:9a:fd:59:6a:ba:5f:
5f:b8:58:79:f9:40:45:53:03:e9:ed:ca:57:12:88:
ae:6f:d8:71:a9:1d:06:38:85:22:77:bf:8c:80:28:
72:68:b3:88:81:1a:ab:21:ab:8f:6e:a7:4e:c0:06:
2e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:69:EC:14:AA:9B:57:B3:14:3F:10:09:B1:C9:B3:D8:7B:75:A6:76
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:af:f5:78:0a:9d:5d:fc:bb:65:81:a5:7c:19:70:de:f7:
7c:88:c9:64:2a:39:30:40:34:8a:45:b5:c6:66:64:11:44:1f:
8e:a8:ff:80:33:e3:fd:80:dd:aa:52:11:bd:10:d3:03:63:f9:
05:ca:f3:a4:14:ca:00:e8:48:b9:05:b8:22:08:fe:37:18:d3:
49:55:a3:39:85:30:12:10:08:76:43:cc:ae:de:a0:f3:8d:be:
6f:45:f1:94:6f:f7:72:c1:a2:d3:89:b3:90:b8:82:d7:2e:39:
c5:a5:4a:66:c7:c8:e5:db:a8:d8:06:3e:71:91:51:46:e8:03:
6f:f0:fa:93:fa:5b:ce:cc:44:0d:1e:63:19:00:72:12:0c:54:
ba:c5:1f:97:1c:0a:f9:12:32:8b:08:e3:8f:57:e9:da:ae:d1:
05:a5:6c:08:c6:6f:a3:c6:8b:fb:5d:68:5d:cd:19:c5:09:02:
56:68:0a:53:8f:b0:8e:21:e4:83:03:df:88:c4:2e:7e:97:6a:
0c:e7:d3:47:ef:49:33:08:3e:ba:99:69:05:c8:f5:6d:39:84:
1e:6a:08:22:52:e1:a1:5a:ac:22:81:23:26:64:da:f7:7a:5a:
4a:a2:83:97:85:dc:0f:17:b9:9e:f2:cb:76:d1:30:d6:b2:0f:
3e:ad:0a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCFnXLjDJB3VIGxr8KM50zCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGQ0OTQzMzNjYjRkOWU1ZmQxMGM4NDZjNDdjZjU2NDQ1
YzUwM2EwHhcNMjYwOTA5MTAwMTIzWhcNMjYwOTEwMTAwMTIzWjAzMTEwLwYDVQQD
Eyg5MDY5ZWMxNGFhOWI1N2IzMTQzZjEwMDliMWM5YjNkODdiNzVhNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gRW4MA9LjJC0Uu/G2XWqyQha4ul
1MsuV8i8uVNJOJaELQVSyfXd1qKAgjtnqYYZUWlNjcLvnPDtKdr07ps1Ya2JdMwC
O+at5MaWpYCyC5S+emCOyCCI+PLOuAbUTD8j2aUCEO3kiXB3OLFjk7flZpeSrNcA
ZI+RTFjzWAeQN18o3Eh8pLeiClejyS2K4o7FVXqPp7FRDsFo/E1CspiwNWNmbLTv
Cbjv9BAcMKbS7CMHQxceaRbovg8V2K3zf77qxKzIhu8Uu+/BZsqa/Vlqul9fuFh5
+UBFUwPp7cpXEoiub9hxqR0GOIUid7+MgChyaLOIgRqrIauPbqdOwAYu9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBp7BSqm1ezFD8QCbHJs9h7daZ2MB8GA1UdIwQY
MBaAFLQNSUMzy02eX9EMhGxHz1ZEXFA6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMt
MTgzZjk5NzVmYzk0LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8yYTdiZjQtMzQ1NC00ZDE0LTllMGMtMTgzZjk5NzVmYzk0
LzEvdEExSlF6UExUWjVmMFF5RWJFZlBWa1JjVURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDuv9XgK
nV38u2WBpXwZcN73fIjJZCo5MEA0ikW1xmZkEUQfjqj/gDPj/YDdqlIRvRDTA2P5
BcrzpBTKAOhIuQW4Igj+NxjTSVWjOYUwEhAIdkPMrt6g842+b0XxlG/3csGi04mz
kLiC1y45xaVKZsfI5duo2AY+cZFRRugDb/D6k/pbzsxEDR5jGQByEgxUusUflxwK
+RIyiwjjj1fp2q7RBaVsCMZvo8aL+11oXc0ZxQkCVmgKU4+wjiHkgwPfiMQufpdq
DOfTR+9JMwg+uplpBcj1bTmEHmoIIlLhoVqsIoEjJmTa93paSqKDl4XcDxe5nvLL
dtEw1rIPPq0KwA==
-----END CERTIFICATE-----
Generated at Wed Sep 9 16:40:47 2026 by rpki-client