Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
File: Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft (raw, json)
Hash identifier: 9gIVo83Fl1+GYW/RLWpCsKs7BtkK1TQeiPHgdldHTq4=
Subject key identifier: B9:02:78:66:68:9C:54:21:52:05:16:8A:CE:56:86:C1:2A:B4:C7:2D
Authority key identifier: 4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
Certificate issuer: /CN=4e6977890273797dfcc4022b90c04617eb1df129
Certificate serial: 01A10813F4F1EF23ABC2172A2B249DC1BB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
Manifest number: 0102
Signing time: Sun 04 Oct 2026 18:01:27 +0000
Manifest this update: Sun 04 Oct 2026 18:01:27 +0000
Manifest next update: Mon 05 Oct 2026 18:01:27 +0000
Files and hashes: 1: 76fuJqCnyM96XEK3XxGjc6ze908.roa (hash: th/ZnBNOEGf6s4sOu5GgwpSyFXSOhHyXMejJbNorthU=)
2: Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl (hash: oFkru1M088L4G5lW9hPYoMn4VWi3cLUbKZrGE+b2THs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:f4:f1:ef:23:ab:c2:17:2a:2b:24:9d:c1:bb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6977890273797dfcc4022b90c04617eb1df129
Validity
Not Before: Oct 4 18:01:27 2026 GMT
Not After : Oct 5 18:01:27 2026 GMT
Subject: CN=b9027866689c54215205168ace5686c12ab4c72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:a4:eb:d7:4f:08:27:77:61:d5:e1:0e:42:
c4:ac:bc:a4:11:f9:4b:47:30:06:05:16:11:44:c0:
7b:5b:6c:b3:9d:b1:53:9c:a9:ee:33:29:5b:85:0b:
7e:e4:b0:2d:83:de:f5:ae:22:e8:8e:48:d2:b8:80:
72:4b:12:d3:af:69:b4:5f:f4:d9:fc:e3:4c:7a:57:
ed:e9:7d:9b:b3:b7:6d:b2:99:c1:84:e5:7e:77:1c:
8c:70:62:4e:e7:8d:a9:d1:62:43:9a:95:14:e8:9a:
92:c4:fd:be:41:a9:a1:b7:12:7d:0e:47:db:7c:2e:
0b:ea:6c:9f:5d:3f:7a:66:69:d3:34:4f:cc:d1:aa:
f8:7e:5f:db:ae:b0:d2:09:de:c6:49:65:9f:ed:69:
e5:e8:b9:7c:1b:e0:1c:19:01:c7:db:aa:17:a2:05:
7e:24:db:ed:a8:e5:3a:01:dc:6c:fd:6d:25:42:60:
ce:fe:57:61:55:b2:14:ad:08:b8:2c:c5:48:6a:75:
3e:b3:13:14:6b:b5:21:b2:e4:02:cb:ff:dd:6b:1b:
49:62:03:d3:a8:89:b9:78:4e:73:77:e5:ab:e5:58:
65:04:03:0c:47:0b:c7:d2:ba:73:f5:40:0d:a7:40:
89:11:ba:e8:3d:7c:d4:bc:8e:2e:bb:51:a5:d3:a6:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:02:78:66:68:9C:54:21:52:05:16:8A:CE:56:86:C1:2A:B4:C7:2D
X509v3 Authority Key Identifier:
keyid:4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e8:b1:42:b8:92:16:e2:60:d5:8f:f3:09:ec:8f:c4:24:ec:
d9:21:73:41:78:6c:96:01:be:77:4f:f3:b0:d1:d1:5a:36:54:
d8:49:f5:c3:ec:3e:4a:b9:db:4e:0f:5d:58:de:ed:4c:ee:b0:
0f:cf:cd:55:2f:79:94:2a:72:17:a5:5f:4b:c9:a2:d0:f6:a5:
4a:c5:ae:a3:8f:4d:12:21:b1:18:3e:21:c7:65:8a:1c:ba:ed:
72:2d:3e:44:b9:2a:d5:95:79:dd:ee:d5:d1:8f:fe:21:26:a7:
3b:00:b2:f5:d5:dd:53:9a:ca:bf:63:29:79:52:50:0c:0f:d8:
43:f5:1d:b9:68:a3:d0:a3:f2:88:47:3a:20:c0:d3:f8:3b:67:
72:9c:72:9e:9f:59:73:76:1d:c7:da:73:c6:de:16:f7:0f:aa:
37:90:3b:b0:70:12:c9:8a:41:25:48:1c:df:f5:7f:67:01:a4:
a9:da:8a:1d:bb:e7:da:99:4d:6d:fe:5a:c4:bd:5e:5d:f3:ce:
43:f7:0c:95:5f:07:fe:f0:46:ae:c3:ea:39:e9:cf:14:17:1d:
74:da:93:d6:12:7e:d0:f4:f9:3e:17:78:64:ea:5a:05:2d:9a:
de:dd:d1:2c:93:32:12:c1:75:08:80:a0:2c:de:c4:52:a6:d3:
30:ee:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:15:50 2026 by rpki-client