Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: XdFp1gkKnr3rMc8gtuXk+c4OGxNYigiiz8L2gm2dI5w=
Subject key identifier: AC:AD:FE:32:72:FF:71:A6:0C:1C:13:63:0E:4D:08:CA:6B:D4:7E:EF
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0C4052938C8299374AC17ACD3165B7587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 1289
Signing time: Mon 21 Sep 2026 12:51:07 +0000
Manifest this update: Mon 21 Sep 2026 12:51:07 +0000
Manifest next update: Tue 22 Sep 2026 12:51:07 +0000
Files and hashes: 1: 0W6WQIzjDcN2QynfAKLOrpSzOkM.roa (hash: 4m2Zfu1qr19e5D1S2lHAxMiYJoXvAY42AGwXDavycio=)
2: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=)
3: KD1T37rBD1mdbuhwYzQ3lu95Qdg.roa (hash: u5ZlddFSl4jtgRZ+O1bJZW7EJNoYKmcnlz1h7PQrlfQ=)
4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=)
5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=)
6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: zLPH/ahJGerFc9ehL+AiycncPjNJa/I8vGW3Xb9mshM=)
7: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=)
8: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=)
9: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:05:29:38:c8:29:93:74:ac:17:ac:d3:16:5b:75:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 21 12:51:07 2026 GMT
Not After : Sep 22 12:51:07 2026 GMT
Subject: CN=acadfe3272ff71a60c1c13630e4d08ca6bd47eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:cb:19:80:8a:21:a3:ad:79:ee:e2:e8:d4:
38:3e:ef:e2:8b:31:83:53:f7:3d:85:75:c6:f6:53:
a0:7e:06:50:83:45:27:51:16:a9:f7:20:33:bf:55:
64:f0:a9:b8:b7:74:ca:7d:82:38:d4:71:4f:59:81:
88:3a:de:87:c3:b4:5d:78:82:f8:01:b5:3b:7d:ba:
df:df:05:2c:30:51:2b:65:cb:80:4e:e3:bf:ff:47:
88:d4:0d:3f:de:66:df:11:65:09:ba:4a:2b:68:04:
8b:5b:d0:d9:e6:4d:7b:9e:a8:61:c8:40:07:01:c5:
ed:d3:5c:bc:cd:ea:21:3d:c9:bb:9d:7b:58:22:19:
cc:ef:15:dc:e2:a7:47:b7:f6:5f:db:0c:a1:57:da:
06:5a:35:37:3b:b3:91:5b:91:bc:2a:52:ad:b2:e3:
6c:6e:26:d4:af:6c:85:37:07:5c:a2:d8:7f:78:ee:
5d:a8:d4:c7:f8:37:26:6b:c9:3c:0a:9f:12:f2:f2:
e8:49:63:98:ef:ef:43:9c:3f:25:b1:27:2c:d0:03:
05:e1:ce:a4:30:a2:46:c1:b8:38:6d:d4:35:92:df:
50:3a:66:d6:0d:c6:36:c7:8c:1b:ab:53:07:20:ce:
43:2d:98:68:e9:5b:f2:d8:8e:d6:7e:1c:c0:a5:36:
dd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:FE:32:72:FF:71:A6:0C:1C:13:63:0E:4D:08:CA:6B:D4:7E:EF
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:5a:65:64:df:1f:9f:2a:60:e5:12:d5:14:d1:ef:57:36:20:
a7:e7:f3:6d:eb:3c:6a:28:42:bc:34:df:f4:93:05:05:18:ee:
26:6d:53:c5:34:72:13:40:28:2f:c5:3c:d6:71:e7:31:7e:74:
87:17:89:57:cb:15:be:24:ae:40:65:c7:65:f9:4e:14:8d:d1:
c3:01:05:a6:44:49:3b:ae:84:00:64:27:89:97:1e:31:7d:cf:
41:f1:71:1f:88:60:11:fc:e1:96:2c:f5:5b:69:0d:5b:f1:c3:
62:4b:76:52:f9:e2:6b:7d:6d:e3:41:75:85:c1:30:81:59:e6:
8f:e1:27:0b:e8:5b:ea:56:59:ba:e1:14:6c:22:96:ac:5a:ff:
ce:bc:0e:b4:45:a4:fc:ee:bd:f0:5a:12:69:3e:9f:d0:e9:b2:
35:c6:73:5b:63:bc:75:7d:e2:26:fa:af:08:4b:35:37:01:4b:
d4:e1:b7:c9:b4:d9:46:a6:29:29:f7:86:61:ae:f9:d8:b6:71:
58:71:f6:df:f7:9c:6e:ab:a1:62:35:c2:26:08:bf:ee:91:23:
4c:3d:3a:4d:f0:88:a8:cb:03:80:7b:08:86:78:06:d6:4e:8d:
e6:89:76:8d:42:31:9f:96:6a:ae:27:b0:73:14:d4:ef:4b:0c:
20:01:e5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:02:30 2026 by rpki-client