Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
File: ts9OV8vBXOTs70T1DluFkvvu7qA.mft (raw, json)
Hash identifier: fBRBqYL5N+mTmLG+0jHT6Jd0S14g+HL1Ea3deSQNYg4=
Subject key identifier: 82:D8:B1:BD:A6:59:27:65:CC:89:9F:98:03:6A:84:F6:91:90:8C:13
Authority key identifier: B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
Certificate issuer: /CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Certificate serial: 01A0C70E942729D5B86952C8CCF76FD94A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
Manifest number: 1220
Signing time: Tue 22 Sep 2026 03:00:16 +0000
Manifest this update: Tue 22 Sep 2026 03:00:16 +0000
Manifest next update: Wed 23 Sep 2026 03:00:16 +0000
Files and hashes: 1: C-iIHFCFPPAyH44XN2FUfWFmMuQ.roa (hash: 4EBK9TE3DKNE91PsZ8jPUioXBBKUno4c9ILnL/KNCRs=)
2: m0XHnqLimHCaVdrwyhH4qvYB5k4.roa (hash: AyXTFUEVIX6Aa2cN5D+zF56YX+NxzZvMWIw5F0uYaGI=)
3: ts9OV8vBXOTs70T1DluFkvvu7qA.crl (hash: zSfpbxXGOyO5ziD4aWgOZRkadZiMDoGe+t7qhoOZFpI=)
4: uFaZ7j6WOK_rFoGA3dV4DOr3Azw.roa (hash: 7Q1qXKsYai/yvbGaDBAb/Nup5NNAKS6f69A2HPPsnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:94:27:29:d5:b8:69:52:c8:cc:f7:6f:d9:4a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6cf4e57cbc15ce4ecef44f50e5b8592fbeeeea0
Validity
Not Before: Sep 22 03:00:16 2026 GMT
Not After : Sep 23 03:00:16 2026 GMT
Subject: CN=82d8b1bda6592765cc899f98036a84f691908c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:89:03:37:d5:17:84:a7:80:89:dc:af:b1:
17:33:25:3c:cd:5a:aa:5e:3e:1c:69:82:38:a8:a5:
01:74:74:ec:6d:a8:e2:66:b4:ed:57:3b:fb:66:d8:
6f:90:95:89:0c:3c:8c:e0:78:66:3b:4b:13:f5:b8:
3f:bc:14:a4:9f:c9:e1:b0:4e:27:f8:89:7c:10:7f:
7f:22:96:6f:31:b5:6a:a2:9a:05:bf:ae:fb:cd:de:
04:3b:f7:af:b5:e5:06:39:ae:31:00:f2:cd:d1:85:
c2:2c:68:70:34:30:45:75:2f:36:1e:71:eb:80:f0:
18:e0:42:c9:a4:2f:52:5c:50:c0:4c:c9:e0:c4:d1:
f8:ad:63:76:2c:bd:a7:34:9f:05:a5:2b:2f:ec:77:
7a:38:4d:ae:0d:ff:6e:04:69:bf:46:25:83:01:2d:
21:7f:09:40:18:65:e9:50:70:d5:70:01:dd:d2:17:
e5:7b:7d:ab:e2:71:79:2d:3d:45:c4:56:92:05:69:
50:08:30:ee:5b:3d:e6:98:12:88:15:09:0c:89:3d:
18:3d:4e:9c:0b:6e:06:db:bb:c6:a3:b4:e6:ea:c5:
7a:76:bc:cd:fd:29:e5:84:31:d2:17:78:17:99:fa:
d7:2d:43:b2:71:ce:1d:bc:9b:55:66:4c:3a:b3:28:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D8:B1:BD:A6:59:27:65:CC:89:9F:98:03:6A:84:F6:91:90:8C:13
X509v3 Authority Key Identifier:
keyid:B6:CF:4E:57:CB:C1:5C:E4:EC:EF:44:F5:0E:5B:85:92:FB:EE:EE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ts9OV8vBXOTs70T1DluFkvvu7qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4e897f-e435-4715-a3c5-85be425d3199/1/ts9OV8vBXOTs70T1DluFkvvu7qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:75:09:25:b6:d5:90:2c:20:e5:68:d0:7f:c7:8c:3f:36:b5:
21:ca:6d:09:a9:55:7d:48:7b:92:47:75:19:b3:cc:b1:35:e3:
08:cc:ce:00:29:58:fe:3d:53:40:be:3d:7c:d0:0e:f9:f1:33:
db:95:4a:43:aa:7a:b1:53:90:33:54:a4:78:a1:d9:5f:08:93:
26:e2:1e:ad:ac:30:2d:3f:92:b4:d0:37:2d:5f:83:90:53:5f:
30:76:d4:b6:31:36:31:84:41:b5:61:00:88:08:e1:49:95:c8:
4a:1d:da:f0:85:66:6f:af:59:68:0b:76:7b:39:63:b7:6c:59:
2e:c2:92:e8:de:00:15:47:b6:59:06:71:65:99:0c:9e:48:5f:
55:f1:30:17:1b:44:40:3f:34:cd:e0:68:91:db:5c:04:0b:da:
01:cf:c1:43:f8:52:f6:24:71:af:cb:6d:03:bd:cb:aa:3d:cb:
48:93:01:a1:2e:a3:c3:48:0a:7f:8e:e5:68:0a:5d:21:cf:76:
1b:fb:d3:3e:60:0e:d2:df:3f:53:20:da:e5:be:ab:88:b1:76:
97:a1:35:35:f1:c5:85:30:d7:8f:f5:73:e1:d2:8e:5a:5a:16:
45:de:26:f2:b6:97:52:a9:05:2f:fe:0e:e2:01:28:fe:e3:7b:
39:67:f7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:25 2026 by rpki-client