Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: pk29K8ylcObkQg4yN3NLfTSve6Qfd+VZilIhU914+Sc=
Subject key identifier: AC:48:4A:44:DC:D1:DD:C3:99:A0:A6:D1:C6:C0:5B:6C:D9:51:2A:A3
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 01A0DF4ED470B37C08D5050C4992EFA45BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 08CF
Signing time: Sat 26 Sep 2026 20:01:20 +0000
Manifest this update: Sat 26 Sep 2026 20:01:20 +0000
Manifest next update: Sun 27 Sep 2026 20:01:20 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: GhBLEkATznQvaKTLq+vfb7WoKy11Kmf9aaasjwxqP0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:d4:70:b3:7c:08:d5:05:0c:49:92:ef:a4:5b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Sep 26 20:01:20 2026 GMT
Not After : Sep 27 20:01:20 2026 GMT
Subject: CN=ac484a44dcd1ddc399a0a6d1c6c05b6cd9512aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:50:b3:4b:db:d1:5f:64:02:93:d0:92:ca:
59:8c:4e:98:2c:da:5d:57:c6:66:73:26:09:ac:db:
58:b8:45:68:62:db:70:fb:5b:b0:a6:bf:b8:7d:00:
28:79:6f:ec:f4:e6:60:c9:32:f7:88:fc:d6:55:cb:
2e:d8:34:f2:7d:f6:63:74:b0:6e:b8:77:a5:81:17:
9d:f7:80:97:52:be:c6:94:7f:ed:26:8f:f5:9b:9e:
5d:54:46:11:9b:2c:46:9e:71:00:02:ee:4b:b0:cd:
85:f3:cb:dd:41:fd:6a:71:53:c3:fe:3a:23:ac:df:
fb:65:94:2d:8a:5c:05:52:db:e3:a7:52:53:14:f0:
3d:16:5d:23:6c:1c:67:49:0a:30:23:c4:b9:a6:8f:
30:a8:94:6f:8a:9c:59:d7:86:9a:61:b9:a6:7c:e7:
c1:5c:5c:ce:a2:cc:02:10:4b:44:75:6f:a9:13:97:
f6:84:fc:da:12:09:24:65:6b:20:59:ca:3c:b1:af:
fc:e7:98:cc:08:2f:55:e8:42:69:3b:27:bb:e3:5b:
4b:26:fd:2e:fc:5e:cd:0d:5e:cc:51:8d:8f:74:ef:
50:0f:bd:72:b7:c1:6b:61:82:76:5c:ed:ae:c8:36:
e4:c2:87:b9:4c:3e:ba:f2:e7:cb:01:8f:06:f4:ff:
07:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:4A:44:DC:D1:DD:C3:99:A0:A6:D1:C6:C0:5B:6C:D9:51:2A:A3
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:55:cc:4a:84:4c:a3:2f:79:5d:7d:6e:4e:60:03:05:cb:cf:
fe:0a:6e:9b:d7:fb:b9:ca:85:37:80:d9:f8:90:cf:e8:a3:46:
34:70:11:5b:a7:94:9f:03:4e:c3:9b:a1:70:2b:3b:b0:05:25:
81:98:46:a8:b9:a2:e6:3a:43:91:84:28:16:ae:fe:a8:ed:8d:
7f:8c:74:f9:dd:8a:66:c9:db:4b:a2:bb:ba:34:33:08:42:69:
32:db:e8:4a:41:06:4f:30:f9:be:fb:fc:71:44:66:01:06:69:
79:c9:e7:04:2a:e5:28:ab:97:89:fd:61:6a:bb:4b:f6:94:c8:
ea:b9:15:05:a4:0e:73:48:05:47:da:61:3f:db:ea:b2:05:ec:
65:2c:a2:fa:ec:fa:8c:c7:67:2e:f4:05:f9:57:be:12:a8:c0:
7e:a2:f9:2e:7e:18:d4:1e:66:29:1a:3c:0b:3f:46:97:bb:bd:
0b:ea:91:f7:3e:0b:97:f1:4f:50:8c:05:f1:5a:bb:a1:bc:de:
27:d9:b3:47:95:65:c5:46:fd:c5:33:00:30:6b:c3:92:1b:12:
03:59:58:ff:93:60:04:a1:5e:3b:61:34:cc:ee:2a:3a:8b:00:
f5:30:e7:85:76:57:d9:88:15:9f:d4:8b:78:5b:d7:8a:38:62:
d0:f6:c0:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfTtRws3wI1QUMSZLvpFvMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw
Y2RmNmEwHhcNMjYwOTI2MjAwMTIwWhcNMjYwOTI3MjAwMTIwWjAzMTEwLwYDVQQD
EyhhYzQ4NGE0NGRjZDFkZGMzOTlhMGE2ZDFjNmMwNWI2Y2Q5NTEyYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH5Qs0vb0V9kApPQkspZjE6YLNpd
V8ZmcyYJrNtYuEVoYttw+1uwpr+4fQAoeW/s9OZgyTL3iPzWVcsu2DTyffZjdLBu
uHelgRed94CXUr7GlH/tJo/1m55dVEYRmyxGnnEAAu5LsM2F88vdQf1qcVPD/joj
rN/7ZZQtilwFUtvjp1JTFPA9Fl0jbBxnSQowI8S5po8wqJRvipxZ14aaYbmmfOfB
XFzOoswCEEtEdW+pE5f2hPzaEgkkZWsgWco8sa/855jMCC9V6EJpOye741tLJv0u
/F7NDV7MUY2PdO9QD71yt8FrYYJ2XO2uyDbkwoe5TD668ufLAY8G9P8HGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxISkTc0d3DmaCm0cbAW2zZUSqjMB8GA1UdIwQY
MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt
ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1
LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolXMSoRM
oy95XX1uTmADBcvP/gpum9f7ucqFN4DZ+JDP6KNGNHARW6eUnwNOw5uhcCs7sAUl
gZhGqLmi5jpDkYQoFq7+qO2Nf4x0+d2KZsnbS6K7ujQzCEJpMtvoSkEGTzD5vvv8
cURmAQZpecnnBCrlKKuXif1hartL9pTI6rkVBaQOc0gFR9phP9vqsgXsZSyi+uz6
jMdnLvQF+Ve+EqjAfqL5Ln4Y1B5mKRo8Cz9Gl7u9C+qR9z4Ll/FPUIwF8Vq7obze
J9mzR5VlxUb9xTMAMGvDkhsSA1lY/5NgBKFeO2E0zO4qOosA9TDnhXZX2YgVn9SL
eFvXijhi0PbAmQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 00:38:52 2026 by rpki-client