Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
File: tjUR6nObBPqgDTGq0uWIekxM-N8.mft (raw, json)
Hash identifier: evc30EK/1py171NzKlBraq2hSTgM7lXBq15VjYbhAfE=
Subject key identifier: C0:11:7B:03:DE:22:4B:BA:E3:92:FA:42:84:55:DF:FF:18:5A:C0:7B
Authority key identifier: B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF
Certificate issuer: /CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
Certificate serial: 01A196FBEC257183F2A427642305A1FAEE2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
Manifest number: 014C
Signing time: Sun 01 Nov 2026 12:00:54 +0000
Manifest this update: Sun 01 Nov 2026 12:00:54 +0000
Manifest next update: Mon 02 Nov 2026 12:00:54 +0000
Files and hashes: 1: O3Md2fGu_NAQGVwzsUndSXloRpk.roa (hash: II4bSX3yzIxXnF5wQkTynrc5UoTKYvwt/oh8DflXYKc=)
2: tjUR6nObBPqgDTGq0uWIekxM-N8.crl (hash: 1O6lEOL4aQ19y8rnnBKn9C/ZKRk03MPao7R1Zp4y1Tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:fb:ec:25:71:83:f2:a4:27:64:23:05:a1:fa:ee:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63511ea739b04faa00d31aad2e5887a4c4cf8df
Validity
Not Before: Nov 1 12:00:54 2026 GMT
Not After : Nov 2 12:00:54 2026 GMT
Subject: CN=c0117b03de224bbae392fa428455dfff185ac07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:b0:57:fe:0f:fb:e2:0d:89:44:b0:b3:b4:
3e:08:bc:e9:db:b3:ac:74:18:fc:2f:d8:eb:37:02:
c6:e6:06:49:89:cc:b3:7c:9c:ee:23:0e:42:ef:23:
1c:f7:ce:39:e7:51:f8:84:2a:08:a6:0e:13:df:18:
b0:d4:50:91:6d:b9:e0:c1:d1:fa:b6:ad:d9:98:1a:
ae:86:f1:36:06:d5:bc:7d:84:bf:1b:51:90:0d:33:
8b:9a:59:01:30:64:40:b7:57:aa:4d:6e:64:66:f5:
72:2e:2a:80:3a:9b:b7:06:29:66:94:59:f8:69:2b:
17:b2:e0:6e:52:b3:4a:3e:08:4e:3c:56:bd:68:0f:
01:cd:e7:09:aa:b3:36:22:ae:43:5e:fd:74:50:cb:
d4:e9:8f:5b:2c:11:c7:9c:98:01:ab:59:9d:d8:a0:
72:a4:58:1b:14:f0:55:97:18:c3:6a:f4:b3:24:75:
df:ed:7d:ed:56:82:fa:1d:5e:43:25:37:20:85:43:
ca:3d:28:c2:8f:86:7f:bf:96:c0:98:9f:2c:d3:46:
28:56:98:9c:0b:29:66:ce:9a:d6:a8:96:57:c8:82:
27:4f:2b:89:6b:fa:e8:34:be:de:bf:71:20:f8:ca:
69:2d:22:d7:be:2d:5e:0a:43:af:ab:6d:99:48:5a:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:11:7B:03:DE:22:4B:BA:E3:92:FA:42:84:55:DF:FF:18:5A:C0:7B
X509v3 Authority Key Identifier:
keyid:B6:35:11:EA:73:9B:04:FA:A0:0D:31:AA:D2:E5:88:7A:4C:4C:F8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjUR6nObBPqgDTGq0uWIekxM-N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/22b3bc-7287-4190-8ece-a71759aa638d/1/tjUR6nObBPqgDTGq0uWIekxM-N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:72:96:96:64:65:cb:40:2b:21:13:20:fc:97:b7:f6:28:5d:
02:2d:04:f0:71:da:30:26:4d:37:a9:ba:c2:44:96:d9:f7:67:
ec:a3:ce:74:3f:87:36:eb:c7:0c:79:d3:71:9e:f9:f5:b9:0d:
6e:a6:ce:29:29:82:6c:75:19:b3:20:c2:3f:2c:40:b7:31:5c:
42:e1:d9:5b:9b:da:b3:2f:69:8c:ec:8d:53:91:7c:fe:e1:0d:
be:3e:99:5f:d1:eb:8f:5b:4d:3b:b9:dd:cb:0c:90:b4:00:2e:
b7:a9:f0:5c:57:4e:88:99:7d:e0:88:a6:2f:9b:9d:a0:8b:4d:
ba:91:9a:6d:ee:37:59:43:0b:0c:b5:27:d1:bf:4b:56:9a:9a:
79:74:cf:70:27:7b:8f:c7:02:41:8c:75:bf:1e:0e:c3:52:90:
92:e9:d7:3d:63:e7:b7:46:dd:4d:b3:4d:c4:6b:15:11:19:66:
21:03:32:13:a6:77:e6:d4:d6:74:a3:45:33:58:f5:97:68:a5:
56:17:06:30:04:08:3c:20:55:5d:a4:f0:a1:8b:8e:f6:65:2e:
99:dc:19:d1:d0:4f:ba:01:88:1b:58:10:bd:11:e7:16:15:36:
75:3b:84:6e:76:7a:3d:fd:95:d2:40:f3:5a:4d:9b:17:f5:68:
3a:17:61:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGW++wlcYPypCdkIwWh+u4qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzUxMWVhNzM5YjA0ZmFhMDBkMzFhYWQyZTU4ODdhNGM0
Y2Y4ZGYwHhcNMjYxMTAxMTIwMDU0WhcNMjYxMTAyMTIwMDU0WjAzMTEwLwYDVQQD
EyhjMDExN2IwM2RlMjI0YmJhZTM5MmZhNDI4NDU1ZGZmZjE4NWFjMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4ywV/4P++INiUSws7Q+CLzp27Os
dBj8L9jrNwLG5gZJicyzfJzuIw5C7yMc984551H4hCoIpg4T3xiw1FCRbbngwdH6
tq3ZmBquhvE2BtW8fYS/G1GQDTOLmlkBMGRAt1eqTW5kZvVyLiqAOpu3BilmlFn4
aSsXsuBuUrNKPghOPFa9aA8BzecJqrM2Iq5DXv10UMvU6Y9bLBHHnJgBq1md2KBy
pFgbFPBVlxjDavSzJHXf7X3tVoL6HV5DJTcghUPKPSjCj4Z/v5bAmJ8s00YoVpic
CylmzprWqJZXyIInTyuJa/roNL7ev3Eg+MppLSLXvi1eCkOvq22ZSFqGtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMARewPeIku645L6QoRV3/8YWsB7MB8GA1UdIwQY
MBaAFLY1EepzmwT6oA0xqtLliHpMTPjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpVUjZuT2JCUHFnRFRHcTB1V0lla3hNLU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yMmIzYmMtNzI4Ny00MTkwLThlY2Ut
YTcxNzU5YWE2MzhkLzEvdGpVUjZuT2JCUHFnRFRHcTB1V0lla3hNLU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yMmIzYmMtNzI4Ny00MTkwLThlY2UtYTcxNzU5YWE2Mzhk
LzEvdGpVUjZuT2JCUHFnRFRHcTB1V0lla3hNLU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXKWlmRl
y0ArIRMg/Je39ihdAi0E8HHaMCZNN6m6wkSW2fdn7KPOdD+HNuvHDHnTcZ759bkN
bqbOKSmCbHUZsyDCPyxAtzFcQuHZW5vasy9pjOyNU5F8/uENvj6ZX9Hrj1tNO7nd
ywyQtAAut6nwXFdOiJl94IimL5udoItNupGabe43WUMLDLUn0b9LVpqaeXTPcCd7
j8cCQYx1vx4Ow1KQkunXPWPnt0bdTbNNxGsVERlmIQMyE6Z35tTWdKNFM1j1l2il
VhcGMAQIPCBVXaTwoYuO9mUumdwZ0dBPugGIG1gQvRHnFhU2dTuEbnZ6Pf2V0kDz
Wk2bF/VoOhdhUQ==
-----END CERTIFICATE-----
Generated at Sun Nov 1 16:41:26 2026 by rpki-client