Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: eFVnVYnJYfCUKsOV7bFhhn7XHGrWS7mZB2PuNki8ars=
Subject key identifier: D4:BE:D4:BE:4B:E1:45:C4:09:5E:7C:C5:9B:85:1D:BC:A2:0E:1D:DA
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0BFC38CD4DC196D5A9A08F760E0CA20CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 1285
Signing time: Sun 20 Sep 2026 17:00:58 +0000
Manifest this update: Sun 20 Sep 2026 17:00:58 +0000
Manifest next update: Mon 21 Sep 2026 17:00:58 +0000
Files and hashes: 1: 0W6WQIzjDcN2QynfAKLOrpSzOkM.roa (hash: 4m2Zfu1qr19e5D1S2lHAxMiYJoXvAY42AGwXDavycio=)
2: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=)
3: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=)
4: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=)
5: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: df5jOEfV5PXxS15jsAr2HoslZ+gP1Sl0fUSYegcKcxw=)
6: d7nZe81qaoCdXSImVltE44ElgDY.roa (hash: Is00mekfqV4fXzJ0gbnS7mGZWvbwZz82PUJow+pkSU8=)
7: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=)
8: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=)
9: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:8c:d4:dc:19:6d:5a:9a:08:f7:60:e0:ca:20:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 20 17:00:58 2026 GMT
Not After : Sep 21 17:00:58 2026 GMT
Subject: CN=d4bed4be4be145c4095e7cc59b851dbca20e1dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:1f:25:3e:95:1e:c2:8d:16:f8:bb:a4:52:
50:53:64:34:ff:2b:d3:8b:ae:8e:05:d8:bd:ae:4a:
1e:96:7d:30:f0:22:26:2b:62:93:6b:da:82:59:db:
2b:f1:52:c7:56:0d:3d:1a:08:41:6a:00:7c:1d:93:
6b:ac:55:a9:98:eb:0f:b7:3f:dd:81:d1:eb:a6:f1:
d8:30:c3:ce:00:bd:44:66:b7:39:03:00:37:fb:e4:
2b:62:58:94:7f:cc:18:f7:f9:60:d0:c4:93:82:9c:
88:69:7f:73:08:71:e3:57:2d:e4:b4:cd:65:c2:8c:
9f:7e:37:ed:8a:f8:f8:3b:ca:84:0e:71:6c:58:ec:
e4:c9:04:21:b1:14:cd:ca:e3:2f:34:bc:5e:59:ec:
f8:e5:7c:da:3d:53:1e:8e:c8:f4:4b:90:e9:f2:65:
6d:85:d7:58:18:f2:df:43:58:97:14:8d:eb:5e:d4:
41:4d:e0:21:29:2e:74:51:bc:37:d9:2a:04:d4:1b:
3a:cb:eb:f1:f2:67:0b:20:a6:31:80:0f:80:c5:a2:
7e:54:d4:cc:0c:63:38:1b:ab:12:ef:1e:24:17:e7:
1a:69:a1:74:81:ac:98:06:9c:3b:ca:87:78:90:57:
5f:0c:95:eb:e2:ec:9f:02:45:8a:b9:5a:80:6d:58:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:D4:BE:4B:E1:45:C4:09:5E:7C:C5:9B:85:1D:BC:A2:0E:1D:DA
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:53:a2:35:77:83:74:5d:24:b5:61:82:cf:23:64:3e:e6:34:
bc:21:e8:37:18:2c:4d:58:c3:11:41:94:90:07:f4:b8:87:18:
10:fc:ab:02:00:24:16:ce:44:f8:71:21:39:35:d0:d2:ba:45:
0e:2f:5f:48:77:54:ca:e4:b2:36:85:ff:40:08:49:db:58:99:
64:6f:eb:f8:99:0f:de:fc:77:5c:c6:e0:d2:ae:6d:39:0c:9e:
36:a8:9d:fb:2c:56:f2:78:ff:c3:a8:90:8a:35:db:de:02:34:
72:ac:60:bc:a3:49:b0:38:21:2d:26:31:61:da:27:4d:07:bd:
fb:e6:db:b2:b1:9f:1a:63:1d:ac:1a:e8:e0:03:c5:42:74:2c:
ef:73:07:0f:5c:79:56:f0:33:d9:d3:ef:c9:ee:c8:47:27:fb:
33:f4:b1:20:df:d9:82:c3:80:87:40:02:72:cc:ac:c7:1c:02:
70:3d:d1:38:eb:6c:72:65:cf:ba:d9:0d:bd:1a:66:db:d0:00:
84:94:8a:ce:3f:ec:2a:f3:f3:24:af:57:65:77:0b:3a:b5:3d:
b0:4b:86:46:5b:79:6b:f5:1d:52:00:a9:0c:e7:00:e6:bc:53:
39:ba:c0:16:ff:67:07:4e:b4:e9:ad:52:7a:df:fc:da:6f:68:
e6:d1:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:56:21 2026 by rpki-client