
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File: TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier: e1dewHUYuuu+z4hOsBmz3OyhasLd8fci8RGBHOZkrIc=
Subject key identifier: 4C:B5:D3:09:0C:23:69:A7:6F:D5:AC:2B:F7:B0:80:C9:E9:DF:EB:9F
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 01A0C0D5B78C604DB1A4407DDC456618E8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number: 1A8E
Signing time: Sun 20 Sep 2026 22:00:26 +0000
Manifest this update: Sun 20 Sep 2026 22:00:26 +0000
Manifest next update: Mon 21 Sep 2026 22:00:26 +0000
Files and hashes: 1: 0lpbV27AN-RWXlo8EoDNHkn_WFo.roa (hash: 6Kk8nKuXT+iDhxODfuxvlj4oC1k4gGbREeQuyIoqN44=)
2: 3a7na1VrOyD4j9eANMYFxWbuuXA.roa (hash: zi3twxBdnTcqBHYcetTlSiGtn2VDXgmL6wD/jF3qYjQ=)
3: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (hash: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=)
4: KrEjWh12m9Ky0XdHMs-AV4DW__Q.roa (hash: htLgSYFv0aza897YRzqYZzsiSWGM3XLxPit9x6cKCoM=)
5: QFNxEKmMB0w9c_fcbUm6kZIgIiU.roa (hash: yRObraxWQ+KSiz/NMpv1EAHhy6xFZ3g/Tjjo6DSAkhE=)
6: SNq1qsP_v5HGgFCmwxtgF5oBbtM.roa (hash: KVtsT0fMQgVAG+EfM+vPhmS8z1w+vo6LbjbuGgZDfvk=)
7: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: b2L+fM0Mzm8OjP1ebfw925MQ1bwdNOZLN7SBwOqHoug=)
8: UYXgcCIK5zcKT9TlB3oRxLcPw4c.roa (hash: ZKu5onIAs6YBld/h2tSRXhaOsFitxQIlAPhxGco8hos=)
9: UvcJIP9GU_V2Mt4tyf-MC05D4z4.roa (hash: Irba1/9xm6DmXZQD7UmL9JlVgVcOaYu4q1AwZlIIIho=)
10: XfkL7_PpVycbprVLaH4OE4tT8zw.roa (hash: Oii2pbC7CFv3HCPeNrmN9q1EffMqA0bBjcOQLdxIuL0=)
11: _K246O-pbv3LImR_NbGl0Uuk0ms.roa (hash: 4aM+aELc7GT7SUF0gs3npOnDB0xgu8gqvceBuJ4g3W0=)
12: aDqWfD8qVv5mTmy_YKlw0knE910.roa (hash: Nt6HJPyyJEcO8XZlWiN2Qky5erL1hvtr6Hh2B65imCI=)
13: cRwj08O3uwfvrDOHpp6Z7hcZGo0.roa (hash: oSg1p4d3f/Ek/TgEvq1Kl3nuuVmFt2QEXW8+ntmYEbw=)
14: dX-rNWvNzQQp4mkv-p-E7vQ4jvE.roa (hash: tzroMUcOp9V01Z5SuKmv3L+kiGKSKimIDzFfo75M/VM=)
15: e2-M3_roN4thnHrSRcYhd3A5tEE.roa (hash: HtHoJrcFJ7Tr7k+ozWHjO7whHbckIcy4WmHKQ/7ZFj4=)
16: hJ_DSrWaO3ObBm5-hhe295ZUGZU.roa (hash: sBGo0ebfgaJ7zl4GXpc60jYy9/bgceVEOmE1IuNRiO8=)
17: hjOcsPBVdAJXSAwKdiUTWAmGopQ.roa (hash: X6Ep2QeB8bOGHavV+XJT5rALDucLiATYg1DR3vQrIUc=)
18: iI_SDTDKoORMx-kq45a1qjOTuZk.roa (hash: J2K/cush+bx+VMhqbDSKLYwVdG3Sbi2stgQnJe6Lx8g=)
19: kwWZWud0oDxj9bqRYQSnO1fTRms.roa (hash: pxOltO+Vbwb+oDFmvBF+y18EOaW3vQK3U1vDji5y33Q=)
20: m-uMu0uWUHMAd3RnwZiaiy6-u0I.roa (hash: n8StrjuRMyFGihImcOgaJXRS+zodWuJUHk2aQxkkkuU=)
21: niKMcxvkNHwtFE1swRnZRa7V130.roa (hash: 5BhfKtNxHPXceWh2gh+NnT77omNb+6j7lXfyG61q2BY=)
22: o5XpHbYzECM8PxBWg33FKmpPLyo.roa (hash: /s+OXvlcKVVirwj5hJhUGVZIhqNKlLQOjzuXK++kB0A=)
23: ptwWAfUIQhVLhqDQn5RDQ5c7CTA.roa (hash: Nd7kZjPWVNNkDzbbN1dtVJihtNFnEpHnC+VpDFqPs8A=)
24: xvJ1JSPTIpMQJ_Z_PhJXPC59D34.roa (hash: 944aX9Q9tSThrEugzQqJaCWIZrVcCyB9vKNFlU0FXPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:b7:8c:60:4d:b1:a4:40:7d:dc:45:66:18:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Sep 20 22:00:26 2026 GMT
Not After : Sep 21 22:00:26 2026 GMT
Subject: CN=4cb5d3090c2369a76fd5ac2bf7b080c9e9dfeb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:e6:3f:e5:d9:9d:a4:01:07:1b:84:b3:c0:
7a:d0:a4:1e:e0:10:36:db:70:29:70:1a:d3:42:07:
7d:0b:9d:17:e3:d5:2d:dc:69:27:7b:4c:f7:95:6e:
9a:6d:2e:6e:ef:71:2b:c5:18:b8:e1:ff:0f:50:24:
54:00:ca:22:74:7d:60:06:b6:e4:ac:c3:43:ae:99:
e9:29:18:e9:25:45:ba:29:37:11:36:d6:62:65:03:
4d:e3:4d:e4:4a:2b:c7:9d:8d:1a:a1:54:d2:f8:e4:
89:85:16:13:c9:5f:db:f2:ad:f1:89:ec:61:33:33:
37:9e:07:02:1f:0d:62:7d:53:dd:79:28:61:85:c3:
3a:1c:4a:94:f4:86:7a:d2:87:9e:84:46:dd:59:91:
8b:09:0a:a4:f2:30:c2:3e:f6:93:3a:9e:67:ea:ef:
c6:c8:3f:d0:89:10:96:24:f5:41:4e:e7:fb:a1:ff:
d7:e5:e3:2e:b4:9f:05:42:71:34:2c:60:a7:b3:b2:
80:2c:1a:b7:f6:c0:88:f4:53:80:7f:e8:97:e4:24:
0d:23:6f:16:0d:21:54:25:91:4c:82:fc:41:33:37:
cb:a0:9f:e6:b1:58:6c:f2:a0:9d:a6:d8:b5:a4:fe:
40:d6:ab:6e:f2:70:e2:0d:77:5c:f3:70:31:1f:32:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:D3:09:0C:23:69:A7:6F:D5:AC:2B:F7:B0:80:C9:E9:DF:EB:9F
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:db:5d:94:f2:fb:72:66:06:0f:9e:75:9c:d6:a5:07:08:68:
12:6b:7b:30:7b:35:3f:16:26:7e:f5:f8:1a:2e:0e:14:8f:91:
d8:d2:f9:6f:d7:de:0f:e2:69:9c:6b:38:2b:9d:e5:62:71:c5:
5e:b9:bc:9f:ef:f0:2d:15:54:23:fa:1c:16:c3:25:6d:33:82:
db:67:10:1b:c6:ca:79:e4:66:7f:2d:b2:7a:82:75:74:14:2c:
ce:5a:1a:95:50:27:2f:44:5d:09:c5:cc:7f:ac:40:73:74:3c:
d9:1b:a6:4b:a3:ad:90:7b:72:5f:8c:22:7e:86:d4:b8:f8:f5:
62:11:c4:59:17:60:78:c1:a1:03:05:50:7d:4b:b4:6e:45:93:
99:9e:06:86:1b:d6:4e:31:52:32:22:38:de:b1:b5:95:4d:59:
d4:27:0a:0e:9c:15:48:00:71:c0:4e:14:0b:d1:30:cc:2d:5f:
1d:80:ee:ac:d0:e8:1d:81:0a:55:00:3b:ac:0a:61:0c:f3:14:
e4:65:cf:25:72:51:f7:63:fc:3b:08:f9:f6:0c:d9:e8:ae:29:
96:1d:4b:fb:a3:9b:85:65:e3:57:0c:28:c0:5a:91:de:65:50:
df:71:00:c5:2b:ca:d1:d1:44:97:c9:b5:04:a9:4f:da:05:e3:
f5:30:12:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1beMYE2xpEB93EVmGOisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjYwOTIwMjIwMDI2WhcNMjYwOTIxMjIwMDI2WjAzMTEwLwYDVQQD
Eyg0Y2I1ZDMwOTBjMjM2OWE3NmZkNWFjMmJmN2IwODBjOWU5ZGZlYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFjmP+XZnaQBBxuEs8B60KQe4BA2
23ApcBrTQgd9C50X49Ut3Gkne0z3lW6abS5u73ErxRi44f8PUCRUAMoidH1gBrbk
rMNDrpnpKRjpJUW6KTcRNtZiZQNN403kSivHnY0aoVTS+OSJhRYTyV/b8q3xiexh
MzM3ngcCHw1ifVPdeShhhcM6HEqU9IZ60oeehEbdWZGLCQqk8jDCPvaTOp5n6u/G
yD/QiRCWJPVBTuf7of/X5eMutJ8FQnE0LGCns7KALBq39sCI9FOAf+iX5CQNI28W
DSFUJZFMgvxBMzfLoJ/msVhs8qCdpti1pP5A1qtu8nDiDXdc83AxHzIcfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEy10wkMI2mnb9WsK/ewgMnp3+ufMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbttdlPL7
cmYGD551nNalBwhoEmt7MHs1PxYmfvX4Gi4OFI+R2NL5b9feD+JpnGs4K53lYnHF
Xrm8n+/wLRVUI/ocFsMlbTOC22cQG8bKeeRmfy2yeoJ1dBQszloalVAnL0RdCcXM
f6xAc3Q82RumS6OtkHtyX4wifobUuPj1YhHEWRdgeMGhAwVQfUu0bkWTmZ4GhhvW
TjFSMiI43rG1lU1Z1CcKDpwVSABxwE4UC9EwzC1fHYDurNDoHYEKVQA7rAphDPMU
5GXPJXJR92P8Owj59gzZ6K4plh1L+6ObhWXjVwwowFqR3mVQ33EAxSvK0dFEl8m1
BKlP2gXj9TASPQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:33 2026 by rpki-client