Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
File: Txf-YMOq5IFd21vYFp7wiLD_iAA.mft (raw, json)
Hash identifier: vcn3bC8E7/kpfH0u/asXJzolkCbdBYxTsQsLYibpYrU=
Subject key identifier: 4D:F1:C5:34:FA:CE:46:42:B2:2C:CB:B4:42:0E:B2:24:56:4E:59:AF
Authority key identifier: 4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
Certificate issuer: /CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Certificate serial: 01A0BEB0FB786085FB59562B18C98546A292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
Manifest number: 0163
Signing time: Sun 20 Sep 2026 12:01:04 +0000
Manifest this update: Sun 20 Sep 2026 12:01:04 +0000
Manifest next update: Mon 21 Sep 2026 12:01:04 +0000
Files and hashes: 1: 8QmLJNa-_EnzDtcCcd2zqbb73Z8.asa (hash: E1mQECWPw1tiHBtWESa7EJB6He3X4+7LGeXYc5u2GM4=)
2: Txf-YMOq5IFd21vYFp7wiLD_iAA.crl (hash: g8oEybGKeN85h2gMicdm5+c00hp4k8E3UCPQuk5wbfU=)
3: sfOsjn-CrEsbuGZfo_GU02Seuc0.roa (hash: QuCtUcV2rfjyf/avZCog8Qa9or52pG6qZ7ZDsQCk2sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:fb:78:60:85:fb:59:56:2b:18:c9:85:46:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f17fe60c3aae4815ddb5bd8169ef088b0ff8800
Validity
Not Before: Sep 20 12:01:04 2026 GMT
Not After : Sep 21 12:01:04 2026 GMT
Subject: CN=4df1c534face4642b22ccbb4420eb224564e59af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:0f:24:b5:68:aa:df:c6:d3:97:3d:f7:5d:
6d:90:40:91:a5:75:a4:3c:fa:e3:4a:11:4f:66:83:
73:06:50:77:12:11:ca:88:98:10:60:0f:09:97:9c:
06:a0:49:fb:49:66:47:02:da:55:17:92:30:a2:95:
33:71:8a:7f:30:ba:be:b2:74:33:9c:39:32:7f:3a:
93:21:43:16:27:78:5d:bd:05:c3:00:18:74:bf:1e:
6a:de:b7:61:5a:ea:62:32:11:93:fc:9e:93:12:be:
70:15:0d:5f:22:5e:32:bc:a6:b2:3d:c7:48:b0:da:
a9:78:ad:94:3a:5e:81:46:3e:9b:6a:82:8d:2b:67:
98:28:9d:07:d3:81:d2:18:70:94:56:1c:fa:a2:79:
a1:ae:4a:4a:fa:50:e5:e6:bb:be:70:a5:bf:88:91:
f7:0c:69:6e:d7:0e:e2:d7:5f:37:55:db:c0:18:25:
29:a3:ab:7b:19:a7:f1:d3:9a:c1:b7:af:5a:cf:72:
e4:46:cb:49:d3:7d:63:8c:24:8c:27:97:72:23:0c:
bd:5f:5c:a9:8a:03:b5:b6:bf:77:39:18:db:22:56:
ab:8b:9b:80:ba:78:b1:5e:35:ff:52:9b:59:64:9e:
8c:4c:50:48:3a:fd:cb:41:b7:03:81:0d:c9:48:84:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F1:C5:34:FA:CE:46:42:B2:2C:CB:B4:42:0E:B2:24:56:4E:59:AF
X509v3 Authority Key Identifier:
keyid:4F:17:FE:60:C3:AA:E4:81:5D:DB:5B:D8:16:9E:F0:88:B0:FF:88:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Txf-YMOq5IFd21vYFp7wiLD_iAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c58d4-7a73-4d62-af86-26f0666590ed/1/Txf-YMOq5IFd21vYFp7wiLD_iAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:de:eb:38:fa:28:7f:78:13:77:d7:90:9c:15:f0:ca:ef:54:
b4:a1:fc:5c:7f:ce:06:17:7a:9d:86:1c:68:7f:b1:c6:fe:71:
29:be:d8:e1:2d:44:14:13:77:54:72:aa:42:47:2b:d7:2a:cf:
2e:a4:cb:4d:ef:09:98:dd:57:b1:2a:93:5d:74:12:48:09:d8:
e2:4d:cf:74:f9:1c:6a:5c:d8:1a:03:7a:88:b0:76:87:5b:c3:
f6:af:98:45:60:30:e6:9f:1d:34:de:e7:61:c5:bc:75:0a:89:
86:ea:b2:f1:9c:43:92:14:7b:af:df:3a:7a:6c:00:80:d2:d8:
a7:c3:fc:37:21:18:3e:fe:ee:b4:8a:3f:0f:b1:33:31:cd:01:
9f:98:01:2c:e5:ad:8a:db:f1:bb:ab:c6:60:d3:f2:8e:44:cd:
1f:58:e2:25:1b:b5:b4:b9:fb:dc:21:be:6a:55:ab:15:65:2c:
a8:5c:73:73:d6:b1:15:d4:6f:33:c5:5b:67:fc:2f:de:69:2c:
61:7e:83:43:07:04:af:15:fc:b4:0e:f1:fa:93:bc:9b:0e:37:
51:3d:d4:7b:29:2f:d6:a8:61:72:02:82:e5:1a:d5:c3:b9:7e:
3a:7e:37:f3:e2:b3:b5:e6:96:a3:67:53:90:d4:6c:db:0c:2d:
6b:39:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:49:41 2026 by rpki-client