Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: RoIA6Bh+Ouj3dhX0XUsOe07vwrfiF3Jj9qHhhN0ulEs=
Subject key identifier: DA:08:19:A0:8B:2D:F4:31:E6:A6:0E:06:1E:A8:D2:9D:7F:93:A7:F5
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 01A1DEDE515197A2AF02284976DEE5BD2F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 11:01:14 +0000
Manifest this update: Sun 15 Nov 2026 11:01:14 +0000
Manifest next update: Mon 16 Nov 2026 11:01:14 +0000
Files and hashes: 1: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (hash: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=)
2: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: IKUPsNftFLcCjIyZJZZbCi9s9DEk9ZE9men3ALrhW1s=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:51:51:97:a2:af:02:28:49:76:de:e5:bd:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Nov 15 11:01:14 2026 GMT
Not After : Nov 16 11:01:14 2026 GMT
Subject: CN=da0819a08b2df431e6a60e061ea8d29d7f93a7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:f3:36:9b:35:0d:16:44:69:c9:c8:1e:24:
27:e4:24:92:c5:00:0e:85:c7:a1:e5:04:26:7d:dc:
1b:3d:d3:a3:24:c2:f9:24:03:15:31:ff:fa:1f:55:
b7:df:1f:1f:cb:8e:e6:d4:d8:1e:5f:f4:f9:cf:94:
7c:a6:89:fd:15:4a:c6:56:05:06:90:b5:12:f9:ff:
05:df:bc:2b:82:dc:e5:3c:2a:52:45:35:d7:29:bf:
98:a1:8c:a3:4c:8e:86:4b:fd:ae:ec:16:81:47:9e:
24:b1:74:b0:05:3b:0c:a8:24:68:6b:df:1a:54:53:
73:98:db:67:b3:64:12:1a:3d:3a:c0:b9:5d:87:75:
7f:89:ba:1a:b3:6c:8f:ff:09:c1:9e:6b:a1:77:24:
03:b3:e3:64:69:33:15:80:db:dc:80:ad:e0:1c:12:
08:2e:0e:1c:40:e0:3b:f5:ae:43:a7:b6:36:f6:2f:
f7:40:74:8d:2f:b2:f4:ee:30:ec:67:6e:fd:51:ff:
de:66:e9:0c:7f:06:ed:9e:f4:4a:d6:e2:24:0d:0e:
bf:3e:84:3f:74:c2:12:38:cc:e1:02:b2:e3:4e:a2:
64:48:a4:d4:10:04:64:04:18:5a:a2:9c:fc:f6:65:
1f:9c:c8:59:d3:6f:14:4d:c1:b1:91:9d:92:04:30:
a6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:19:A0:8B:2D:F4:31:E6:A6:0E:06:1E:A8:D2:9D:7F:93:A7:F5
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:fe:38:53:d0:5d:b1:78:09:b6:a2:92:fe:51:0e:a0:4c:84:
ef:f9:08:e5:c0:f0:28:64:f9:62:4e:63:eb:13:cb:e1:5b:dc:
6c:99:34:4b:44:32:6e:81:fa:53:4a:df:c8:f9:f3:86:f2:4d:
22:3e:da:3d:66:bf:3f:6d:00:c2:5b:38:bb:2e:b9:54:7f:ac:
c5:74:66:5f:63:7d:67:6f:0c:6c:46:1e:6f:62:4d:1d:81:09:
3c:71:a8:ec:50:3d:4e:ce:35:61:e4:08:6a:2c:33:5b:36:bf:
f9:be:94:39:40:4d:8c:5e:40:7a:4f:10:be:ae:09:82:20:7c:
f3:bf:61:9f:0f:5b:17:09:5d:19:1b:f5:bf:0d:e8:e1:89:cc:
1e:bb:26:55:57:5a:92:63:f2:9a:dd:7f:5c:5d:a9:e4:1b:b8:
56:c9:97:82:da:b2:ff:bd:e6:1e:83:86:68:34:76:36:29:03:
7c:20:30:70:2c:ac:ba:4b:a2:99:0e:4a:00:dc:54:65:7f:cb:
7f:66:09:77:4c:4f:5b:af:4d:56:bc:45:09:ed:26:fa:3c:8a:
38:d9:eb:4b:b8:45:80:57:81:da:60:e4:5c:11:b8:d5:f5:7c:
d1:07:ca:94:f7:ec:ed:54:40:9f:1d:e1:96:08:62:5e:49:8f:
95:fe:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:10:51 2026 by rpki-client