Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: dKwSrlpRJwxTmW9Ez635FfFtRtAL3HeaoEUB71bPaAw=
Subject key identifier: 9B:2D:9B:09:28:3C:93:4E:90:DB:94:5A:F8:0C:9F:A8:2F:F3:C6:FF
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 01A0BC8AFB226FFC62A1A5FCDD0FF3B21B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 022C
Signing time: Sun 20 Sep 2026 02:00:19 +0000
Manifest this update: Sun 20 Sep 2026 02:00:19 +0000
Manifest next update: Mon 21 Sep 2026 02:00:19 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: q0pKh7ovbVWD99OG2uvWzKFMX3ed3Jh1jxN03sEE0eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:8a:fb:22:6f:fc:62:a1:a5:fc:dd:0f:f3:b2:1b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Sep 20 02:00:19 2026 GMT
Not After : Sep 21 02:00:19 2026 GMT
Subject: CN=9b2d9b09283c934e90db945af80c9fa82ff3c6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e3:91:23:eb:a9:f0:ee:63:07:ee:50:e6:bd:
22:9c:8e:c0:a6:51:b1:f7:3d:0c:25:a7:1f:de:06:
05:96:b3:68:75:86:bb:d9:7d:c4:c7:5a:ba:21:f8:
f8:3f:70:d1:4f:b5:fc:b9:41:f1:cf:f7:c2:85:1b:
94:fc:93:0a:db:47:9b:9d:3b:be:e7:26:9d:71:04:
f5:38:f6:71:07:6f:f9:42:b1:80:c1:c2:47:7b:eb:
24:94:8b:25:76:5a:d3:e4:4d:91:08:1b:b5:56:b5:
34:92:a7:b9:88:53:d6:fa:e2:29:3f:a7:0b:00:63:
3c:ea:e5:e7:74:61:22:79:c3:fe:6c:4a:63:ba:34:
66:8b:6c:d0:a6:c4:f9:49:9e:8b:2f:86:52:29:65:
8d:33:77:df:d1:c3:24:1f:b8:40:1e:fb:fc:4a:76:
2d:5b:d1:47:5a:e8:52:fb:ca:08:62:6e:30:da:1f:
ab:35:7e:c3:f5:6e:9f:b8:00:28:26:51:93:a3:32:
47:9b:70:b9:bc:a2:73:45:3d:14:c4:e3:3c:4c:75:
69:9d:ed:cd:28:53:7e:dd:c7:66:87:b9:ff:ef:8b:
30:fa:d4:ad:cf:14:89:5a:11:52:f7:bb:94:6c:23:
f2:09:ee:f5:d3:9a:2f:8a:cf:81:1b:6a:9e:0b:a1:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2D:9B:09:28:3C:93:4E:90:DB:94:5A:F8:0C:9F:A8:2F:F3:C6:FF
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e8:8b:b7:08:ba:f3:dd:85:fc:78:8f:f9:f7:76:7d:e5:1e:
8d:63:35:42:e7:f0:32:9f:a2:be:bc:84:10:de:03:36:70:f8:
23:27:b9:2e:16:4c:bc:5b:ea:b7:18:a3:03:59:84:33:7b:ee:
48:b5:3b:28:b9:40:51:67:39:d2:9a:e4:04:1c:e6:45:fa:4e:
e4:db:dc:53:67:c1:46:a1:26:e7:31:10:83:19:a5:4e:11:07:
ca:47:32:4f:3d:02:77:f9:ad:a9:8b:37:6b:e4:7b:59:2c:b6:
2d:78:98:12:a6:35:8c:ee:30:04:25:bf:a8:65:f9:0c:be:98:
8f:62:ec:cd:09:06:09:69:2d:b4:b3:05:12:d1:a0:e9:94:67:
60:04:8c:f8:a8:09:f0:21:7f:2f:38:7c:ca:52:a7:02:0e:b8:
70:d3:15:fd:23:b4:24:a0:96:87:ff:fb:5f:80:37:32:14:fd:
c6:8a:29:b9:9f:b3:8c:92:56:0d:2a:c7:31:91:19:9d:a7:78:
4c:ff:28:e8:63:ce:46:a8:47:0b:0e:0c:09:76:a6:19:2e:01:
55:f1:93:7d:24:41:65:02:58:6a:46:fa:a3:78:8f:a8:15:a3:
52:c7:7c:8b:67:0c:6b:bf:6c:8f:ed:bc:58:b3:99:c6:8b:51:
b3:76:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:43:21 2026 by rpki-client