Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: JCylux+f2LVMGdpWMPp5Nj3J8CvBBrhjx9mJo7mfcRw=
Subject key identifier: F9:3E:0D:C1:7B:20:BE:B1:48:06:A2:41:4B:5B:85:D1:D9:05:EF:19
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 01A0C9D9AFBA3346A707F51E4217BEFEAC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 16:01:21 +0000
Manifest this update: Tue 22 Sep 2026 16:01:21 +0000
Manifest next update: Wed 23 Sep 2026 16:01:21 +0000
Files and hashes: 1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: xf+oL/1JESva/pikQHzNTavTJxVxVJS+UCL9isBSJ1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:af:ba:33:46:a7:07:f5:1e:42:17:be:fe:ac:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Sep 22 16:01:21 2026 GMT
Not After : Sep 23 16:01:21 2026 GMT
Subject: CN=f93e0dc17b20beb14806a2414b5b85d1d905ef19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:e4:ec:78:30:79:19:66:c4:47:79:6d:2e:
96:ba:e8:3b:a4:fe:4c:13:48:4c:c1:62:db:f5:b0:
ea:85:ef:06:89:96:47:6d:dc:52:a3:90:ee:eb:e8:
67:95:55:61:9e:09:78:8a:de:30:2c:66:7b:d6:b8:
9e:8d:79:cd:8b:f9:80:91:ac:b5:74:c9:c0:8b:f3:
e6:ee:e7:4c:cf:c2:45:da:49:74:52:77:aa:fa:88:
1f:a2:a9:9a:28:86:0f:ba:0c:85:30:3b:fc:e9:7e:
64:a9:2a:bd:86:01:f0:72:39:d6:97:a1:63:64:83:
c8:f0:f8:45:96:45:80:05:1b:2a:fc:3e:25:c6:86:
51:56:09:47:68:e9:c6:08:48:4b:cc:87:ef:e3:f3:
6e:ce:05:60:2b:e0:c9:58:cc:5a:d1:70:b9:a5:72:
14:9e:07:cf:76:ee:59:14:2d:61:3b:67:9f:11:5a:
9c:8a:28:07:e4:0d:b2:85:00:1c:2a:74:59:ce:68:
87:e5:74:9c:b8:7b:d9:19:42:1d:a7:e3:1a:2e:9b:
a1:ab:76:37:55:9f:1e:e3:01:f4:0d:6a:1c:33:bd:
e9:e0:16:56:a8:15:93:cb:05:a8:f8:74:63:81:f6:
a8:69:1b:b5:5a:ee:35:88:52:3c:b3:41:67:af:62:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3E:0D:C1:7B:20:BE:B1:48:06:A2:41:4B:5B:85:D1:D9:05:EF:19
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bc:a6:d9:72:c6:60:60:71:e4:f0:b6:c9:11:c9:0b:cd:0e:
c4:20:bc:14:4e:d3:d5:43:9e:aa:f2:54:09:5c:61:c5:d5:5b:
b7:dc:5f:52:18:53:af:49:7d:36:d5:bb:71:f0:16:94:32:64:
a8:b3:94:b7:c4:87:f8:fb:5f:6e:c8:f3:c4:b0:e4:37:12:ee:
08:29:d3:53:b1:cf:cb:5f:ab:c0:30:c5:82:a4:12:e4:83:44:
c2:d0:95:f8:64:06:31:ad:93:f6:e9:e1:af:9e:57:1b:76:69:
1e:71:f7:4d:b8:b1:5c:14:0c:2d:98:8c:f0:47:da:29:37:04:
de:35:06:34:50:58:e7:f8:b2:f7:b6:73:9b:a4:ab:ca:bb:94:
95:cd:8f:2b:b1:e9:6f:d7:2d:f6:d3:cf:16:24:73:29:cd:2a:
91:67:ec:73:98:ba:ba:20:b5:df:e0:c1:87:39:9e:71:41:14:
cb:0a:b6:73:6c:25:7b:20:ea:36:ff:32:a2:bc:e2:dc:30:5f:
13:90:0c:87:bd:28:6e:21:22:8f:77:3f:23:a2:42:68:3a:3c:
0b:72:89:e8:9f:7a:01:3f:ce:22:ed:ed:4d:b1:a3:c4:9d:7e:
52:77:2e:71:40:b0:7c:52:55:56:b9:35:f6:62:9a:46:54:99:
0a:46:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:44:20 2026 by rpki-client