Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
File: T4lf8Omad8AX6KODKSy1xvgmESA.mft (raw, json)
Hash identifier: 4JQkUsjvVu0EIOlEsNF7lQNPxX2tNSkgLAXbcO3DC0A=
Subject key identifier: CA:52:32:4C:BE:DF:66:EA:B9:29:E6:80:54:66:03:E6:50:72:DA:F5
Authority key identifier: 4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
Certificate issuer: /CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Certificate serial: 019FD83D1263328748A1686860DA41F6C7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
Manifest number: 0F40
Signing time: Thu 06 Aug 2026 18:01:48 +0000
Manifest this update: Thu 06 Aug 2026 18:01:48 +0000
Manifest next update: Fri 07 Aug 2026 18:01:48 +0000
Files and hashes: 1: 1tI6G_uipCGYM7G28gO9zYS_vd0.roa (hash: jQHm0OXPGE8VAsUUw4pohYSxJ7gjNdv50GcJUwt6Vgs=)
2: 6dxV01X9vg2jPotO5hv9PQEuxwo.roa (hash: +esdA25t1mMRXF/ctuGaJFSpgAhjXcMWg4MEVFS8LMo=)
3: IXCeJ_byCNVELvp9jRcWKh_bBvc.roa (hash: HLRQyauNlxqkbbZVe7bwHpiiXRRzErR+W+RnPz3utM0=)
4: T4lf8Omad8AX6KODKSy1xvgmESA.crl (hash: oBRodSkeztCsuF0ZBnJUg166G2WNr653dtb6WWslhMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 18:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:3d:12:63:32:87:48:a1:68:68:60:da:41:f6:c7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f895ff0e99a77c017e8a383292cb5c6f8261120
Validity
Not Before: Aug 6 18:01:48 2026 GMT
Not After : Aug 7 18:01:48 2026 GMT
Subject: CN=ca52324cbedf66eab929e680546603e65072daf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:2c:f9:a1:d6:2b:6e:f9:ab:dd:51:62:14:
bb:eb:c3:1a:88:58:e4:a2:ff:f9:7a:ae:5e:4f:c6:
bd:c4:07:84:e2:87:03:a1:11:ad:35:a4:c3:29:d2:
bc:47:aa:06:b8:14:84:4b:89:97:08:3c:7f:f3:0e:
44:19:40:6b:94:21:f2:38:41:94:30:cf:ee:94:75:
33:c9:79:88:11:81:6f:73:ce:b0:78:37:93:20:84:
fe:c0:51:b4:30:57:00:18:1d:b9:63:7b:2d:b8:6a:
df:17:2f:00:f4:2b:a4:cc:8f:95:47:b6:d5:87:ba:
79:a7:c8:f3:6e:a6:ee:b2:1d:3f:d9:4f:a7:bf:0f:
1f:e3:49:97:b8:65:f2:2a:95:73:1f:f5:af:3e:89:
ca:7a:69:87:f7:15:de:58:d2:aa:64:37:da:b3:3e:
e5:65:d2:45:cf:79:0b:64:72:29:6f:a9:87:e1:b1:
f9:5d:07:5f:e7:4e:0d:dc:44:6b:8c:70:cd:3e:4c:
36:74:b6:c0:e6:32:8e:ef:b9:34:21:d7:f6:30:71:
c1:19:da:6c:68:9b:5e:e9:79:43:24:30:a5:ec:d0:
38:a4:f3:2f:5f:5d:60:dd:96:7c:db:07:53:00:48:
e7:4f:b4:fc:73:7b:e5:8d:8e:6f:44:d2:5b:7b:8e:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:52:32:4C:BE:DF:66:EA:B9:29:E6:80:54:66:03:E6:50:72:DA:F5
X509v3 Authority Key Identifier:
keyid:4F:89:5F:F0:E9:9A:77:C0:17:E8:A3:83:29:2C:B5:C6:F8:26:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4lf8Omad8AX6KODKSy1xvgmESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3328da-aa4e-445b-9da9-d053745c2acc/1/T4lf8Omad8AX6KODKSy1xvgmESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5c:3c:bf:ea:97:42:f3:18:b9:eb:bd:29:fd:7a:f1:f4:27:
64:87:1c:48:c2:dc:99:96:5a:1f:22:ed:23:b9:7e:f0:67:89:
60:6b:e6:e6:e4:ed:bc:60:93:38:af:9c:48:49:cb:9c:1b:e3:
f8:41:12:fa:3a:13:14:81:73:38:0a:2a:c8:96:68:bb:c1:30:
18:37:68:fc:0a:d4:50:a8:c4:c2:17:92:c3:dd:84:7a:49:13:
5a:3d:c7:30:26:5c:cb:62:93:17:f1:f1:dc:02:72:ec:dd:77:
5c:dc:7f:b4:b1:1c:45:fa:96:0d:37:93:7a:81:f4:f4:60:eb:
00:44:14:10:8c:b8:e4:ef:9d:a5:6d:70:a1:06:f1:e2:1c:24:
58:55:68:c0:86:5e:2d:b9:f0:1a:3f:9d:10:f7:b1:6d:59:68:
30:94:25:ae:df:bb:a0:14:1d:42:d3:87:da:26:aa:3b:d9:1a:
2d:b8:c8:9d:38:8d:8c:d7:5a:79:a8:8d:83:c1:ee:c9:7a:8b:
57:37:1a:1b:63:c3:24:5a:e3:ae:c9:32:9f:4c:58:69:1f:f5:
92:1c:f8:9b:b8:10:11:d6:cf:70:08:a7:d5:9d:c0:38:9b:b6:
22:48:87:18:32:88:a0:6d:2d:a2:6a:16:51:d8:4f:cb:78:e8:
5f:93:b1:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/YPRJjModIoWhoYNpB9sfCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmODk1ZmYwZTk5YTc3YzAxN2U4YTM4MzI5MmNiNWM2Zjgy
NjExMjAwHhcNMjYwODA2MTgwMTQ4WhcNMjYwODA3MTgwMTQ4WjAzMTEwLwYDVQQD
EyhjYTUyMzI0Y2JlZGY2NmVhYjkyOWU2ODA1NDY2MDNlNjUwNzJkYWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/Is+aHWK275q91RYhS768MaiFjk
ov/5eq5eT8a9xAeE4ocDoRGtNaTDKdK8R6oGuBSES4mXCDx/8w5EGUBrlCHyOEGU
MM/ulHUzyXmIEYFvc86weDeTIIT+wFG0MFcAGB25Y3stuGrfFy8A9CukzI+VR7bV
h7p5p8jzbqbush0/2U+nvw8f40mXuGXyKpVzH/WvPonKemmH9xXeWNKqZDfasz7l
ZdJFz3kLZHIpb6mH4bH5XQdf504N3ERrjHDNPkw2dLbA5jKO77k0Idf2MHHBGdps
aJte6XlDJDCl7NA4pPMvX11g3ZZ82wdTAEjnT7T8c3vljY5vRNJbe47rWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpSMky+32bquSnmgFRmA+ZQctr1MB8GA1UdIwQY
MBaAFE+JX/DpmnfAF+ijgykstcb4JhEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTkt
ZDA1Mzc0NWMyYWNjLzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zMzI4ZGEtYWE0ZS00NDViLTlkYTktZDA1Mzc0NWMyYWNj
LzEvVDRsZjhPbWFkOEFYNktPREtTeTF4dmdtRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1w8v+qX
QvMYueu9Kf168fQnZIccSMLcmZZaHyLtI7l+8GeJYGvm5uTtvGCTOK+cSEnLnBvj
+EES+joTFIFzOAoqyJZou8EwGDdo/ArUUKjEwheSw92EekkTWj3HMCZcy2KTF/Hx
3AJy7N13XNx/tLEcRfqWDTeTeoH09GDrAEQUEIy45O+dpW1woQbx4hwkWFVowIZe
LbnwGj+dEPexbVloMJQlrt+7oBQdQtOH2iaqO9kaLbjInTiNjNdaeaiNg8HuyXqL
VzcaG2PDJFrjrskyn0xYaR/1khz4m7gQEdbPcAin1Z3AOJu2IkiHGDKIoG0tomoW
UdhPy3joX5Ox3Q==
-----END CERTIFICATE-----
Generated at Fri Aug 7 03:52:51 2026 by rpki-client