Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
File: tRidnqgtX7tm1sEfGHYzR2A04N4.mft (raw, json)
Hash identifier: WK0t6Hsw/V5jNCGXdVY8gJ3qPYWa47o5RCErdBgbU0k=
Subject key identifier: 8A:3F:1F:33:69:73:2C:E4:3E:51:D0:90:6A:21:57:A7:FB:1F:1A:18
Authority key identifier: B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
Certificate issuer: /CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Certificate serial: 01A0C2FB1FDB836F53046FF6FA548D114970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
Manifest number: 024A
Signing time: Mon 21 Sep 2026 08:00:32 +0000
Manifest this update: Mon 21 Sep 2026 08:00:32 +0000
Manifest next update: Tue 22 Sep 2026 08:00:32 +0000
Files and hashes: 1: 72DmjSMw_29l_MO3IEi6OHdN1xU.roa (hash: 8Q2q436xMShLzuSw0XiF5YubpeOEkzT16ilKpEr4WNs=)
2: PoRIN0dVSAqaAWKn9ELbCUPN7Jg.roa (hash: LsqKFis/T/54SQiHP5UPnUKT29GNEt5RyIpD8UjP9yM=)
3: TeVnupeK_YGYnRPsXm4BzJfTjS8.roa (hash: +to8DEmlcRGaEadfSEWc6hlZ2GarI7KNFF5xKs1DZR0=)
4: UgRQ-S_2_jSMHR28Yfy4B7uMcDM.roa (hash: 2q1tfYfhbbmDrJeuTIKGf6ksnLxn1XENXGZ1v4ftHM8=)
5: a73ilWUc_Nrs3Jl6BZxzTzmJLZs.roa (hash: WvDo87B2C+QVONEixLsbWJGXRyfPQL9c6V0kT+6W0SI=)
6: cwmNk6bauKUzUIBHxMYj4Ucw8iM.roa (hash: h5yQVWC+XIfRSSbHYLwBKmXd6G/qYJCUqPZaJnYQNT8=)
7: gCEAfeGtC7sCDWjwRgdE41W_tBw.roa (hash: shPX6M61gEwMPP1QY1pi1KXBEKTnDFJ7aoQzTSjSFHw=)
8: p3wpRRs-f7GQUm8KtIUlma6wjSs.roa (hash: 90E81RrURGxHLOrJQ2EQ5/Y8TtYWMesX5r41cRtv1NA=)
9: tRidnqgtX7tm1sEfGHYzR2A04N4.crl (hash: OSv929h4oIUcFDpXx9zm+8nEtW6ERvQ7jpEAhLuccVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:1f:db:83:6f:53:04:6f:f6:fa:54:8d:11:49:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5189d9ea82d5fbb66d6c11f187633476034e0de
Validity
Not Before: Sep 21 08:00:32 2026 GMT
Not After : Sep 22 08:00:32 2026 GMT
Subject: CN=8a3f1f3369732ce43e51d0906a2157a7fb1f1a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b6:7a:89:9d:91:68:33:d2:a3:0c:5e:77:04:
c2:6a:20:a3:85:2b:63:45:36:40:3a:ce:28:cf:eb:
f8:e5:9f:6d:4e:27:e0:c8:36:f6:fe:85:6c:1b:11:
50:14:f8:d5:b9:06:ac:2e:96:a8:75:c4:45:53:39:
c2:00:0e:35:bb:14:c5:a4:29:94:4e:1c:b3:41:6a:
4f:d6:de:8a:1e:a0:d4:ba:c3:ee:b6:d7:c2:b6:f6:
a3:d2:96:4f:9e:77:2b:12:d5:98:d4:49:b1:c2:8b:
b4:68:d0:4a:92:a9:65:22:0a:71:d5:94:3d:25:71:
26:9f:28:3f:e0:00:d7:64:42:01:22:16:c7:05:c7:
81:bb:2e:e0:b8:ca:db:c0:e2:79:12:82:75:b3:23:
e8:1c:b8:5d:93:d8:ae:bd:1e:66:dd:df:a9:ce:c6:
89:e3:01:35:51:9d:32:b3:af:05:2f:d5:67:1d:10:
28:36:fb:80:1c:e4:10:35:72:61:c6:98:08:33:6e:
62:be:3d:c2:8e:c0:aa:6c:f9:6f:e5:4c:47:a4:ac:
53:22:5c:d3:cd:ff:b9:30:20:c2:59:f9:00:cf:f3:
5b:d1:f2:79:69:e5:92:ee:7e:88:ba:70:3a:66:85:
53:16:18:6c:11:82:41:3c:03:d3:6d:bb:e1:20:d6:
7d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3F:1F:33:69:73:2C:E4:3E:51:D0:90:6A:21:57:A7:FB:1F:1A:18
X509v3 Authority Key Identifier:
keyid:B5:18:9D:9E:A8:2D:5F:BB:66:D6:C1:1F:18:76:33:47:60:34:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRidnqgtX7tm1sEfGHYzR2A04N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5e61d8-d1bf-4f2a-a32e-f5d6b752ae34/1/tRidnqgtX7tm1sEfGHYzR2A04N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fd:aa:24:31:9c:2d:c1:7f:c5:29:7c:61:d9:90:90:8f:05:
9d:5b:ee:aa:0f:4e:dd:71:65:e9:2f:e9:49:d5:a1:ce:68:5f:
65:0c:ba:25:16:7a:ef:c6:a9:e8:8e:2f:40:f2:2b:e4:8e:ba:
c8:15:d8:9d:f3:37:65:d0:f9:79:5e:d1:3c:01:dd:02:5e:80:
d5:9d:9b:af:17:9f:c4:06:de:6e:43:12:e1:03:8a:48:b0:99:
6b:f6:6d:db:39:3f:2d:b7:af:00:52:aa:78:57:d7:fd:e2:f0:
6b:ef:45:17:d6:ab:e7:a4:5f:e6:5f:5e:91:9c:62:5f:6a:14:
cf:bb:8c:35:13:0d:ce:fd:d3:b9:5f:7a:a6:14:d8:3a:28:bd:
df:8a:f3:f6:fe:b2:24:67:dd:20:b0:0d:08:5b:65:fe:cf:42:
b6:fe:eb:7c:f3:bd:8d:05:6e:fb:a3:4f:6f:49:a7:84:24:36:
7b:d5:a3:3f:a0:73:21:4c:a2:74:92:74:8b:1d:bf:a7:14:5a:
17:d4:ce:63:e3:d7:e6:10:cc:fe:47:89:62:f3:ef:dd:05:60:
77:a3:83:99:50:ef:5c:fa:c0:ba:a4:e2:6d:13:56:2d:69:d4:
05:51:e4:ae:bd:8a:77:19:fe:51:7d:6f:ad:b5:20:8d:ab:bd:
8b:dd:3b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:52:16 2026 by rpki-client