Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: /CSPKN66pFafCBW+uHMIf8xlklc7EXTEi1cUrGEGaEw=
Subject key identifier: 94:FD:1A:10:23:A7:43:FC:2F:14:5D:87:13:3D:34:36:AA:9A:69:D1
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 01A12A9FC39D637722541395EC0D16834D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 11:01:15 +0000
Manifest this update: Sun 11 Oct 2026 11:01:15 +0000
Manifest next update: Mon 12 Oct 2026 11:01:15 +0000
Files and hashes: 1: 2k317uytVg1LgjGnM4csFnuL6uw.roa (hash: X5Q8tV/hqbcuK15v8loayY7mcbXwTofvZ2nrjL9ZwFs=)
2: RQBMarFkU3OrDTBkZypKiOwxqg8.roa (hash: WhhYg2h0zkcqk2yaFPJERRYww67tY59hAk64ZXv/RAg=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: QjKnWtiP7cDYoYKmJ5Q01GmeanI3U3/+sb44R9v8/lA=)
4: v9i47anpnbrdLEZ-n1nwTrZVjyg.roa (hash: z6aINaroQHvMvD3JovJtp4EHLXzys7G2ZYIjVrJrEgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:c3:9d:63:77:22:54:13:95:ec:0d:16:83:4d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Oct 11 11:01:15 2026 GMT
Not After : Oct 12 11:01:15 2026 GMT
Subject: CN=94fd1a1023a743fc2f145d87133d3436aa9a69d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:11:6a:68:1a:4d:88:be:19:7c:cb:3d:cb:fc:
1b:32:dd:2c:e1:1a:b0:d4:4b:23:db:70:ec:c1:40:
70:54:fe:86:76:95:8b:e6:34:b7:da:dc:e1:bc:c5:
e5:70:cf:d4:5f:33:42:8a:66:f7:d5:85:11:b4:18:
af:38:e1:07:03:af:72:48:bd:43:1b:5b:b4:48:35:
b5:69:99:43:d8:84:fd:ae:a3:e4:36:eb:d1:f6:3a:
29:78:c3:2d:40:d3:2b:c8:93:40:eb:b9:8a:04:a8:
d5:58:fb:fb:04:28:ff:2f:2f:b3:e8:a4:31:a8:6d:
5e:d7:85:92:10:fc:2e:0a:20:fc:c7:87:c5:71:a7:
e0:8d:86:5b:fb:f0:29:5d:bb:bf:63:b5:0c:25:3c:
fe:ad:e0:4b:00:c1:df:a8:d8:3a:82:7d:3e:19:a5:
fb:f0:a6:fe:1b:85:32:da:11:80:92:82:bf:f3:1e:
15:e8:9e:f2:e9:a1:9e:77:15:fd:4e:b5:bb:70:63:
5d:ba:8d:83:91:61:26:c3:28:22:33:79:ec:48:1b:
7a:a7:b3:97:f5:ba:d3:a8:7d:d9:89:1f:ef:00:cf:
6a:a5:15:e1:9f:fb:29:e3:4a:27:ec:ad:5f:08:ca:
0d:f7:4f:63:66:64:ae:7a:de:27:f5:f5:99:6a:33:
3e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FD:1A:10:23:A7:43:FC:2F:14:5D:87:13:3D:34:36:AA:9A:69:D1
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:05:bd:cb:eb:91:b8:4b:04:22:10:23:fe:0e:0a:88:15:
15:57:c3:e9:23:91:39:67:35:1c:41:ee:1b:e9:d9:33:90:a0:
42:ea:7f:bc:52:8c:4d:9e:fa:2c:a0:3e:8d:8d:66:45:6f:61:
89:bc:91:79:40:b9:97:cf:20:34:a3:52:b7:9e:f1:53:8e:9b:
b4:be:97:f6:07:e5:db:14:8c:9a:86:27:42:ec:58:a4:4b:d2:
7d:f8:41:4b:04:2f:b6:6b:0a:1a:88:6f:8c:80:80:1b:43:fc:
3c:8a:f0:0e:82:fd:a0:af:5f:62:80:f5:1a:c1:6b:67:99:e2:
88:92:c1:e7:b3:df:1a:dc:f1:d6:59:44:82:d9:dd:56:95:83:
0e:8b:d9:d9:ce:31:7f:c1:26:29:32:af:0f:17:a7:ce:58:dd:
39:34:af:58:9c:64:03:1e:16:ae:33:8c:4e:09:cc:56:6c:d6:
3c:18:03:1a:e0:21:0b:ec:f3:0a:42:30:35:a2:76:39:7d:4f:
17:f8:88:d1:ee:e4:c1:13:e6:e8:ef:32:64:f3:8c:f6:b4:d8:
22:6b:05:2a:29:9f:23:a1:78:f5:d4:5a:65:ab:a3:72:be:8f:
43:9a:74:74:9a:28:fb:bb:bf:bd:bf:8e:ac:55:8f:ab:9d:19:
01:ce:6d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:44:38 2026 by rpki-client