Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: U+nxSyoNzbsF62ILBTep4ryOCQpNgZNaX0kUtDhXBDs=
Subject key identifier: 3A:AF:10:16:2C:2A:BD:0E:ED:3B:7E:AF:F8:68:62:1E:4A:7E:89:62
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 01A0C58E87AD2A1780F158D0B4AC3061C09D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1A54
Signing time: Mon 21 Sep 2026 20:00:47 +0000
Manifest this update: Mon 21 Sep 2026 20:00:47 +0000
Manifest next update: Tue 22 Sep 2026 20:00:47 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: 0lmOkDdJeICGI/IeSoxXHsIufSsQk8dmwLU0PBdRDAQ=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:87:ad:2a:17:80:f1:58:d0:b4:ac:30:61:c0:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Sep 21 20:00:47 2026 GMT
Not After : Sep 22 20:00:47 2026 GMT
Subject: CN=3aaf10162c2abd0eed3b7eaff868621e4a7e8962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:84:95:58:92:54:7e:e6:9b:3d:10:64:eb:
b8:07:f4:d1:8f:09:95:45:68:77:32:f3:ba:7a:ba:
29:a9:d4:ca:28:43:b6:da:89:d0:22:ab:31:22:41:
33:db:d2:7e:5b:37:a8:38:33:3b:c2:63:75:f0:25:
d7:7b:31:ca:69:16:3c:1a:47:fc:04:51:83:34:2e:
e9:cb:cd:42:f4:2f:31:e1:31:dd:ad:07:9c:a8:56:
f9:71:08:91:b9:5f:f6:41:5f:3c:5b:80:da:90:bf:
c3:9d:4b:f5:d7:f7:57:d1:22:2e:0f:e5:68:eb:a7:
ec:da:05:5e:85:24:23:94:33:5c:96:7f:95:dc:fa:
9a:2f:53:c8:e1:87:49:51:1c:ad:b0:b1:8c:9b:e9:
a6:bf:74:85:51:38:01:b3:8b:88:28:ea:af:4b:82:
b1:3c:e4:3c:9e:70:1e:b5:33:0a:ac:de:1e:64:15:
2a:48:ce:c9:38:30:e4:45:d1:f1:40:db:f7:ba:cc:
f7:35:fc:56:d9:1c:d3:23:9e:f2:57:dd:7a:51:f6:
a9:5f:c0:04:fb:e5:77:09:9c:80:c8:c9:83:ad:03:
cc:8a:2f:4f:d1:22:26:e6:b4:cc:e5:af:1f:a0:ec:
d6:d8:e4:85:c8:23:6f:f7:41:ea:b4:83:2c:d6:b1:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AF:10:16:2C:2A:BD:0E:ED:3B:7E:AF:F8:68:62:1E:4A:7E:89:62
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:59:62:af:b5:62:bb:97:db:a2:26:02:0b:47:29:30:5c:f2:
f6:6f:e4:0c:36:66:73:2d:29:d6:90:ee:e5:38:17:3b:2e:9c:
6a:ad:9c:d7:16:6b:48:71:27:3c:6a:c7:19:a2:a9:35:28:58:
d6:57:95:d0:73:2e:f0:d4:90:83:a3:b6:93:3f:a2:40:d5:56:
64:35:8c:f8:60:fe:35:57:b7:41:00:bd:ad:e1:f0:e8:5a:65:
73:c4:77:20:a1:fb:a7:35:c9:4d:6f:ed:e8:ac:93:59:f0:89:
c7:23:56:11:22:5b:ee:79:50:49:a5:01:43:07:a5:3c:58:60:
64:dc:ee:b4:c8:d1:3c:7c:48:90:90:7a:81:9b:a3:a4:08:6c:
fb:08:65:4b:18:e1:df:7c:8c:9a:25:2e:6a:cf:ad:60:2d:6d:
c9:c2:c6:f0:b2:f6:87:db:0a:97:66:f3:6d:52:a3:76:d1:9c:
b2:49:03:c3:47:e2:0a:46:ac:13:be:77:46:00:fd:c2:32:55:
95:8e:b5:f9:32:fd:9d:d2:e2:7d:70:bb:f5:d9:85:d1:68:b4:
cb:05:3f:58:59:24:d0:7e:1b:b9:dd:a5:18:82:11:32:dc:d9:
f3:1f:a3:ce:c9:c6:48:0e:45:04:85:ac:14:5c:a9:08:f9:0b:
ae:2a:e9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:49:45 2026 by rpki-client