Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
File: tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft (raw, json)
Hash identifier: yIE2AN3Jb96g+vqopyF3WxZtqGOl918vcW0jeQGa5jk=
Subject key identifier: D5:6D:9D:B9:D3:51:11:E4:18:7F:E0:35:6B:52:45:40:A6:AE:56:7E
Authority key identifier: B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
Certificate issuer: /CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Certificate serial: 01A0CA0F96254685FE452AA7F3B1499131EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
Manifest number: 17EE
Signing time: Tue 22 Sep 2026 17:00:14 +0000
Manifest this update: Tue 22 Sep 2026 17:00:14 +0000
Manifest next update: Wed 23 Sep 2026 17:00:14 +0000
Files and hashes: 1: 7zP-vrGMSLLfqRfiE-wgv93MQnc.roa (hash: RFbWknjP21J0ZtXdcY+/jqdLrNcb7a87Mqd1uXals1g=)
2: GmKON0n4q41F09JbkIeSWlYg2vg.roa (hash: MA8HRllJQ5XTGjB4uhWUi8OdDfPzCM6iy7P4PReIInE=)
3: XP6_BAcYWa5WMtXOqsr8Nd4YOXQ.roa (hash: koRMWG7PfVh3x7ZWhsKfazhU/Y927qVy5yPx2a20iGM=)
4: tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl (hash: /tMfD5Y6GHxYsm/yVOZar3R6if6/R/f4+7BZ6k/hw+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:96:25:46:85:fe:45:2a:a7:f3:b1:49:91:31:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f57e49ebf098bc53e8db388881c92369d9bf8c
Validity
Not Before: Sep 22 17:00:14 2026 GMT
Not After : Sep 23 17:00:14 2026 GMT
Subject: CN=d56d9db9d35111e4187fe0356b524540a6ae567e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:66:cc:0a:f4:a2:7b:16:7d:3a:fc:ca:7d:
4a:63:e2:d4:33:a1:9b:81:a3:1f:f8:d0:ef:4c:aa:
08:81:36:de:64:4b:b2:9b:fd:2d:e8:4b:0d:15:ee:
d9:38:23:07:b4:f7:e3:34:9f:b1:2e:db:39:35:f4:
47:6a:2b:a6:60:c1:ca:8c:7d:95:6b:f3:26:6c:df:
f3:ac:a7:e9:de:a7:2d:b5:a1:4a:47:1c:2b:0f:ec:
c2:f2:cb:aa:55:9a:e6:4d:01:88:71:d1:ce:c1:3c:
4e:69:f8:ba:a7:ca:85:c5:fb:3e:11:4d:bf:d3:84:
7f:ac:db:0b:34:76:d7:18:49:90:4d:6a:96:58:8a:
58:d6:18:f2:dd:e8:c4:11:ad:e0:88:d9:ff:c1:1f:
27:1b:5c:6c:af:1b:4b:69:b3:db:fd:91:6d:fe:90:
c5:03:96:ce:1c:c8:c3:57:20:d0:69:e0:00:2e:d5:
a3:27:48:66:03:ec:55:2e:9e:5f:10:91:d2:f2:bc:
fa:74:49:77:d2:7c:f8:4e:08:08:10:a8:ff:f0:fb:
60:1f:d3:3b:cd:6b:1f:19:12:48:12:a1:a4:ea:17:
39:28:df:5b:13:c5:cd:51:a9:af:a0:eb:3a:0d:37:
82:75:83:a6:e2:72:23:14:1c:c2:03:4f:82:18:55:
37:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:9D:B9:D3:51:11:E4:18:7F:E0:35:6B:52:45:40:A6:AE:56:7E
X509v3 Authority Key Identifier:
keyid:B5:F5:7E:49:EB:F0:98:BC:53:E8:DB:38:88:81:C9:23:69:D9:BF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfV-SevwmLxT6Ns4iIHJI2nZv4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9e9122-bbff-48d9-98c6-0a4286f3cfbe/1/tfV-SevwmLxT6Ns4iIHJI2nZv4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8c:3d:d2:11:66:99:85:ce:f9:ed:c7:97:14:ea:37:bc:07:
4c:22:dc:8e:71:c7:e0:92:96:b5:5e:8d:49:d5:f0:38:af:81:
3e:d7:a2:3e:88:f0:b2:5d:9c:63:e8:04:a1:1c:90:94:eb:71:
59:ea:6b:20:b6:d0:b2:09:b8:bb:ac:28:a0:eb:ce:c8:6f:13:
a1:e6:27:a9:04:2e:40:a0:5e:f1:fe:6a:36:ba:1f:1a:8a:70:
e8:0f:82:22:6f:ab:4b:ee:46:1c:24:af:ee:78:a2:13:f1:45:
af:2a:01:db:21:92:a7:20:df:6c:b4:3c:0e:77:03:28:a8:08:
ca:19:20:7b:a1:92:a4:95:48:74:bc:c3:44:f8:4e:12:e4:b6:
75:4b:4f:76:c7:ab:e8:f5:d7:59:eb:3a:d7:e1:c1:2d:5f:b0:
c6:8a:a8:24:bb:42:10:4a:56:8d:62:f3:7a:a2:9a:c1:15:26:
e8:35:b1:1c:89:be:26:69:51:0f:02:0e:aa:b4:81:50:87:07:
03:1c:8a:a9:b3:e5:5d:9e:bb:0d:60:fd:a1:b7:04:00:f5:0c:
0b:03:53:ac:48:c1:ce:14:c0:25:7e:dc:17:1b:b2:4c:53:ed:
6b:4a:75:a5:4c:c3:0d:e7:08:0c:1e:7f:f2:ac:6d:3d:93:e0:
32:19:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:19:39 2026 by rpki-client