Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: k9CdU1IeqAP2j58j4IEOLeCBYMVaWcX4yn6jHDTP1ek=
Subject key identifier: FF:A0:CA:E4:F7:9D:6B:2E:72:75:8E:AB:57:68:AA:F9:B3:B6:C4:78
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 01A0C934A73F5011080C2E33750200CEE236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 13:01:06 +0000
Manifest this update: Tue 22 Sep 2026 13:01:06 +0000
Manifest next update: Wed 23 Sep 2026 13:01:06 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: gdmlc2En8p/is4lx0MSijhYstqmoPVTHwG12Sg9iygI=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:a7:3f:50:11:08:0c:2e:33:75:02:00:ce:e2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Sep 22 13:01:06 2026 GMT
Not After : Sep 23 13:01:06 2026 GMT
Subject: CN=ffa0cae4f79d6b2e72758eab5768aaf9b3b6c478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:5c:34:2d:c7:84:0e:83:86:8a:21:9c:63:
4c:75:2f:b1:ec:a7:3d:3f:02:a0:4c:7a:25:e3:f1:
4c:72:8e:b1:5f:37:27:34:0e:fb:60:66:0d:3a:72:
ff:c2:36:c7:e0:2f:c3:ce:0d:23:d1:d3:d5:37:2d:
60:8c:31:ae:c4:fa:55:80:67:51:6d:d0:53:e4:56:
21:e7:0b:fc:3c:6d:d3:f1:22:dd:f7:85:f1:2e:e8:
e7:ee:89:69:0d:90:09:c8:6a:2e:f7:c3:ff:ea:15:
b1:17:f2:46:89:3d:91:d6:fb:a2:0b:ba:d1:33:fa:
c7:7c:67:2e:25:f0:03:52:34:41:a7:06:24:c5:57:
e7:50:97:c3:30:6d:68:0e:d3:ea:5e:7d:c8:91:2d:
fa:1c:f7:05:d4:d7:19:0e:7e:5d:6c:72:f0:4e:b0:
ef:c0:d1:6d:44:b6:b5:59:bf:77:24:93:cc:ae:8c:
fa:7a:20:29:00:8c:bb:d5:a4:b7:14:d0:cb:28:01:
0a:b4:36:78:ee:fb:93:90:4d:f1:98:1e:65:2d:6b:
c7:fa:59:7d:2b:e9:66:d0:db:3d:84:00:85:6e:13:
0c:4e:c6:13:67:8d:81:e5:5a:7d:4d:4c:12:09:12:
f5:44:86:99:f6:9d:d3:7b:93:76:c1:dd:4f:d6:56:
25:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A0:CA:E4:F7:9D:6B:2E:72:75:8E:AB:57:68:AA:F9:B3:B6:C4:78
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6d:db:67:6d:50:f3:4b:6a:12:d6:93:8f:7b:f9:83:68:41:
68:68:17:30:44:c8:85:63:c1:d3:eb:75:06:23:30:a2:73:fa:
29:eb:95:8d:2c:c9:6c:5d:90:39:e4:06:31:4b:7f:ea:6f:df:
22:eb:e3:b8:dd:84:7f:9d:f1:e3:c7:3c:16:a1:84:a4:e6:52:
57:33:81:28:7b:1c:10:4b:6f:81:e0:91:27:1c:96:cd:f9:d1:
aa:a4:20:a7:01:20:f5:d6:f6:11:08:4e:5c:d3:d1:f0:05:40:
84:a7:32:2c:7e:1d:e4:9d:11:27:38:c5:cd:60:95:7c:38:a4:
cc:ad:da:7d:be:1b:1d:eb:95:8e:89:3e:7d:bf:1a:82:4d:3a:
85:fb:ae:a5:0c:9c:44:81:65:ef:b9:7f:cf:cd:be:95:6b:71:
40:8a:d3:9b:5b:b5:bf:05:c5:a3:11:ce:72:6e:1d:a2:0f:f2:
62:48:0b:7b:7e:6b:26:1e:67:74:7a:96:cd:1c:e3:4a:b8:ad:
e5:16:cf:74:ec:9a:21:ca:e5:d7:86:8b:22:89:f0:d5:b5:f3:
56:f5:d9:1a:95:41:74:25:3a:28:af:95:39:99:ee:ac:f8:9d:
e6:4b:60:4a:bd:ce:57:2c:b7:63:5a:8a:29:bb:cf:2f:fd:31:
f7:bf:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:32 2026 by rpki-client