Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier: Y4dk19gDxAtTS/7KT5WH45ukW1AofZAu0NRw2z2YkEg=
Subject key identifier: 3D:02:9D:4F:35:8A:98:F4:5B:D9:B0:BC:19:14:D1:B5:82:DE:09:95
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer: /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial: 01A0DC173C6106349E364141EA9E8A2ED78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number: 1A89
Signing time: Sat 26 Sep 2026 05:01:45 +0000
Manifest this update: Sat 26 Sep 2026 05:01:45 +0000
Manifest next update: Sun 27 Sep 2026 05:01:45 +0000
Files and hashes: 1: 3nUsl4RKj2z8CbMrvpcEfFCm3Ec.roa (hash: xOzepGbNFbatCq0zjXI/FXTlrydlg5FPTLxwydIci84=)
2: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: MNrX21Ap2tgmXi0/o/qAL2z0bdksf9NQpe/3Zpzqvbc=)
3: ac39p23Mlso4QNH8cdOzO3mni7Q.roa (hash: zNEIIVv/2x4DKy5eI3kHXbKd5gO+/WjIv8WvcZ4JDUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:3c:61:06:34:9e:36:41:41:ea:9e:8a:2e:d7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Validity
Not Before: Sep 26 05:01:45 2026 GMT
Not After : Sep 27 05:01:45 2026 GMT
Subject: CN=3d029d4f358a98f45bd9b0bc1914d1b582de0995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:74:a2:5b:5d:52:e4:d6:95:8b:1f:10:26:15:
82:3b:9b:08:58:3b:2d:9e:df:aa:03:2f:09:01:59:
ef:ba:91:07:71:42:3d:cc:25:1d:6c:66:6a:f6:c4:
67:c6:26:dc:37:b1:ec:42:c8:f6:e4:a3:8c:de:fa:
d0:5a:1a:75:83:35:db:b3:7e:b5:78:05:cb:55:b9:
7f:67:a8:70:78:df:cc:13:d8:47:81:c2:67:34:21:
07:62:4d:c2:08:1a:09:67:23:49:f8:99:f4:2f:2b:
98:54:a3:94:41:cc:2d:e0:65:ce:16:3f:ea:b9:1b:
3f:b6:ba:d7:22:ec:15:27:49:59:d5:3e:e2:ff:a2:
5b:bf:bf:36:e1:2c:9a:df:64:bd:8a:73:d7:0c:a4:
bf:3f:ad:e5:b8:9c:5a:81:d3:c9:37:73:79:bb:d2:
f6:70:35:da:aa:f3:79:ea:28:ed:76:47:8f:d3:0e:
69:f9:81:13:86:b7:73:29:07:4b:6d:f4:e1:62:f0:
54:c2:72:45:9d:69:41:9d:30:70:ec:e3:fd:32:05:
8a:53:2e:9a:92:31:25:e9:ee:e0:28:60:3b:38:dc:
d1:a4:db:48:95:fe:5c:98:cd:fb:bf:91:51:cc:94:
c3:18:a2:21:89:dc:cd:22:56:a8:0b:46:32:d1:eb:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:9D:4F:35:8A:98:F4:5B:D9:B0:BC:19:14:D1:B5:82:DE:09:95
X509v3 Authority Key Identifier:
keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:4e:cd:1d:3b:1e:ca:35:98:b6:32:31:60:fb:22:d1:4f:96:
87:e1:f3:2b:75:bc:25:46:57:aa:03:24:2f:e1:bd:79:d3:9f:
d9:56:b5:95:99:24:58:e0:71:a3:79:3e:04:c1:00:54:6a:a3:
0a:8c:68:c6:35:ad:35:67:7d:d0:fe:50:2c:89:ef:8c:94:2f:
7e:fd:31:47:e3:f8:71:9d:bd:d9:20:86:2c:18:1e:46:2c:65:
4a:07:c1:8a:9d:79:bb:c9:0f:d0:2e:43:c0:0a:e7:b2:68:95:
cb:0b:68:61:73:ed:79:3c:ff:d7:17:2d:c1:5c:ab:62:f5:c2:
31:3b:59:a5:62:f0:39:6e:92:7e:58:c1:a4:3d:af:7f:f7:67:
8f:a6:93:e9:bb:ce:54:c5:2b:3c:2f:b7:42:80:28:6e:52:93:
da:ef:08:de:70:16:af:52:8e:49:e9:84:b4:d6:07:e0:be:39:
ba:29:30:bc:c1:46:8a:99:08:c8:ae:5c:67:54:31:23:7b:10:
a7:bf:48:71:95:70:0f:2e:7d:53:ed:ee:a7:1a:35:ac:0c:25:
69:1a:fe:9b:ae:69:11:67:01:cd:94:c5:89:8c:b5:e8:a6:1c:
d1:0e:9f:3c:39:c2:82:30:64:ef:ac:e8:c7:f2:f0:79:a4:f0:
ce:5d:91:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:20:07 2026 by rpki-client