Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: 1xlcVdU4B0pxkTev9xamgN5/1WfkTsqWB7+arn7a710=
Subject key identifier: A3:EF:FD:A2:24:03:DF:8D:4A:6F:71:E0:9D:F3:0E:B7:F9:F3:B4:C6
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 01A0D2006C0469A685A4E513CCA5FB90309D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 06:00:38 +0000
Manifest this update: Thu 24 Sep 2026 06:00:38 +0000
Manifest next update: Fri 25 Sep 2026 06:00:38 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: U3gMDTtua22lKgiAA7EkDh+6+3Y3wEzmeswRmvgabaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:6c:04:69:a6:85:a4:e5:13:cc:a5:fb:90:30:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Sep 24 06:00:38 2026 GMT
Not After : Sep 25 06:00:38 2026 GMT
Subject: CN=a3effda22403df8d4a6f71e09df30eb7f9f3b4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:d0:06:93:94:50:bb:0e:13:b0:ad:43:22:
35:75:89:4e:f4:4e:22:b6:83:0c:e8:4b:27:f6:5b:
79:6b:8b:f9:d4:4f:1f:03:ff:d5:74:02:ec:df:db:
9a:4c:13:f9:98:01:be:1a:5e:9e:3c:4f:f7:f6:ef:
38:4e:f7:c7:8a:a6:98:45:dd:01:6c:49:b6:f1:70:
1c:f9:11:75:5a:32:a2:b5:cf:55:fa:e2:72:a8:ed:
3a:38:2d:87:67:a7:ff:68:d9:25:05:d0:ed:39:01:
3d:ff:5d:42:8a:53:79:29:ae:a2:de:5a:6d:ac:d1:
6e:79:e8:96:35:52:c0:28:2f:68:e3:0a:19:0f:27:
e1:c8:31:81:94:dc:a6:76:5a:5d:d5:c0:1d:71:81:
22:ef:a8:9f:82:6a:3d:bc:74:52:32:26:4f:0e:0d:
b4:5c:eb:94:28:7c:44:8b:e7:1f:cf:98:d3:54:4c:
ea:ca:bc:99:ef:ec:2e:10:bd:7a:10:4c:38:f2:1a:
24:a8:a2:09:bc:2e:5b:6b:38:4a:7b:37:6b:ce:16:
03:f9:e1:cf:fd:62:6f:8b:1f:60:4a:35:ad:2e:92:
d0:46:d8:e6:b9:a0:96:02:96:b7:e2:53:ba:71:d0:
c8:11:f3:ac:8f:30:98:36:ea:fd:75:35:e4:11:6b:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EF:FD:A2:24:03:DF:8D:4A:6F:71:E0:9D:F3:0E:B7:F9:F3:B4:C6
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a8:f5:0e:27:1d:33:6f:0c:9e:bb:83:35:db:3c:67:11:29:
b7:ae:03:be:a6:93:1f:3b:30:be:71:cd:28:8a:43:e9:95:c1:
9c:40:fa:84:90:4a:40:ef:40:c3:4e:88:a1:09:1e:05:0d:a0:
5d:82:3b:73:28:12:d5:ac:ee:0a:5b:b1:10:d9:f0:5a:a9:f4:
2d:a1:86:82:a4:4f:11:97:39:4d:2c:f3:49:42:70:6b:db:19:
91:b8:41:6d:17:75:ea:ff:5a:59:4a:11:ff:bb:63:56:cb:62:
6b:32:cd:5d:f6:9d:88:f8:ea:2b:3a:37:51:27:6a:1a:f3:78:
67:f5:4a:a2:e1:d6:7b:c5:da:ed:76:58:13:6b:d1:c1:1c:6f:
d8:d8:15:ca:45:ab:4e:6d:12:21:b0:92:d0:76:91:6b:88:b3:
53:ee:62:3a:3c:16:2e:c2:ee:ad:48:10:95:b8:ea:0f:80:c9:
33:47:43:be:70:4e:6a:e0:b7:f3:7a:7b:fa:9a:b6:34:93:a4:
a3:28:72:80:1c:54:c4:e7:67:fe:54:d8:e1:a9:95:bc:cc:b5:
70:34:32:47:70:a3:2a:19:b6:39:1b:a2:68:a2:24:fe:5c:be:
ed:2c:2e:23:63:44:d7:2a:82:2e:b9:cf:7b:6d:b2:80:33:42:
21:af:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:35:40 2026 by rpki-client