Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: IgaHLiUUA//VqfI80lQwyBN91XorLrRi4d4ZDjuZ3ZY=
Subject key identifier: 2D:46:E0:34:D1:C7:DD:06:8E:CB:91:94:A9:4E:DD:E7:94:73:2B:10
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 01A0C4B2C3CDDBA5A3EC354E045207A88AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 16:00:44 +0000
Manifest this update: Mon 21 Sep 2026 16:00:44 +0000
Manifest next update: Tue 22 Sep 2026 16:00:44 +0000
Files and hashes: 1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: eEkR7I8zoleMN6DAm8vgQbtSTaDRfwOWxNrJW5QlIyA=)
4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:c3:cd:db:a5:a3:ec:35:4e:04:52:07:a8:8a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Sep 21 16:00:44 2026 GMT
Not After : Sep 22 16:00:44 2026 GMT
Subject: CN=2d46e034d1c7dd068ecb9194a94edde794732b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:fe:d9:26:e3:36:7f:7e:5f:12:7c:dd:e8:
c2:86:0f:73:9b:39:cc:44:33:04:c1:45:e5:e3:bb:
b0:6a:54:30:ad:2b:2e:b7:8c:dc:14:b9:b0:70:51:
7b:10:a4:b8:44:b3:e9:75:d1:c8:60:1c:f7:e2:61:
9b:3e:f6:84:fa:50:f1:ac:2c:0a:0a:4f:cc:18:e6:
31:bd:17:49:df:73:e7:90:ec:ee:f6:ca:76:21:d2:
bb:e4:1a:c1:e7:93:38:9e:c2:98:12:a5:85:cb:47:
47:54:c5:ad:38:84:a2:c7:11:c7:de:8b:1f:3b:03:
c1:d8:3a:40:87:d5:bd:b9:cb:af:29:e1:d0:11:88:
ac:a5:9b:e2:6b:55:4c:81:cd:1b:83:8b:ae:6c:27:
96:ff:f4:95:a4:56:e5:91:e8:45:63:00:ed:ed:30:
13:65:cb:07:9d:71:34:0e:7d:ec:41:de:91:8c:39:
bd:39:1e:da:74:4e:95:a0:13:8e:44:37:79:d8:10:
d1:39:fa:8a:79:30:d5:9d:ac:57:1e:73:af:f3:8e:
14:e0:4a:4e:36:bb:79:71:95:12:61:f9:90:2e:7a:
90:64:51:2d:c2:80:07:53:56:d8:25:0f:b9:eb:25:
b2:46:65:a1:31:1c:5d:04:15:c4:3f:ec:34:81:09:
c9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:E0:34:D1:C7:DD:06:8E:CB:91:94:A9:4E:DD:E7:94:73:2B:10
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:aa:74:77:93:62:e0:9e:7b:f5:8b:dd:89:76:05:7a:8e:05:
fe:41:26:5e:21:f8:54:f4:13:6a:ec:96:fc:18:0b:2c:ad:34:
d9:5c:0e:0e:77:61:36:bb:0f:77:79:01:1b:fd:96:3c:41:cc:
68:00:f8:a4:05:9f:75:c1:08:74:26:f1:9b:2a:65:ab:f6:3c:
c7:51:46:c0:44:06:1e:83:67:9f:9a:2f:a8:79:de:66:60:c5:
32:47:e2:95:cd:4a:0b:2e:90:3b:e9:24:28:8c:c6:a7:e7:c3:
25:ac:42:e6:85:44:47:1c:ec:60:f8:ea:b0:00:f1:e9:c9:bc:
9b:e1:11:55:a9:db:37:39:7e:69:54:5e:14:40:8b:d3:99:37:
77:15:66:05:7a:c2:61:cb:88:29:7e:82:a4:ae:35:1d:b8:fb:
36:9b:d2:3f:1a:68:d1:5f:6b:31:d5:aa:a9:03:5a:cf:3a:9d:
59:54:38:9e:11:1c:80:97:6c:dc:63:0b:4f:67:38:9f:e4:4d:
4c:98:21:a9:22:c6:3f:38:03:5d:ab:b7:d9:9f:fe:2e:b2:56:
94:72:3e:1b:7d:e6:6a:41:97:d5:f8:53:3a:92:28:a7:80:4a:
61:3d:bd:d3:4d:e2:32:5b:4d:1b:ba:f4:19:1c:d4:b4:74:9c:
e3:64:8a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:01:39 2026 by rpki-client