Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
File: TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft (raw, json)
Hash identifier: cjnNZSl02L0Gl/J7i3ARUnuy+n5axPTqMwo6r8f5Xl8=
Subject key identifier: 30:51:1B:FC:1F:0E:AE:62:19:4B:C7:95:EB:44:7A:E5:06:C6:D6:92
Authority key identifier: 4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
Certificate issuer: /CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Certificate serial: 01A0BE0BACBAAFEC63B1CE1462464599262C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
Manifest number: 8E
Signing time: Sun 20 Sep 2026 09:00:31 +0000
Manifest this update: Sun 20 Sep 2026 09:00:31 +0000
Manifest next update: Mon 21 Sep 2026 09:00:31 +0000
Files and hashes: 1: 03isWsmaGVRk9tqcdmDKk9uA_-I.roa (hash: ScrT5FCc9rPEYk5wCLCQ97IXUmvu4SWDxXf7fq4zp6c=)
2: 226OYCKUmdi1S_3Pe-3PZ-iCAAs.asa (hash: X+ewLeQEwgG8XlmiwNHRk1JnO20h3xlra7zQCCYsiQo=)
3: TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl (hash: 9kEHNUaZxSkq+tWPr+w9s/+hYUg/8Pkhxmdcy17NJFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:0b:ac:ba:af:ec:63:b1:ce:14:62:46:45:99:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Validity
Not Before: Sep 20 09:00:31 2026 GMT
Not After : Sep 21 09:00:31 2026 GMT
Subject: CN=30511bfc1f0eae62194bc795eb447ae506c6d692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:72:e9:6f:b7:70:bb:ad:07:75:da:41:76:2b:
47:1d:3f:d7:9a:4e:6e:7a:3a:5f:29:77:78:40:a5:
ae:d3:2c:c7:09:db:2c:9f:22:e2:a4:14:25:e5:cc:
0a:ca:18:9a:d4:cc:18:0d:b7:22:3c:95:ba:23:58:
15:98:bd:bd:0c:91:18:b0:d6:d0:62:87:0f:fc:a0:
8f:e4:a9:e4:f1:9c:d7:dd:85:84:39:3f:d8:b7:7d:
9d:fa:af:dd:f7:e6:ab:9e:39:61:6c:6d:bb:cc:9b:
78:e8:64:73:d3:cd:94:52:ab:08:9b:92:d5:28:87:
39:c5:bc:17:64:d3:43:f7:5f:d6:fe:39:57:19:08:
3c:45:b2:01:40:bb:6b:b2:62:6d:69:0b:ec:b4:4b:
68:9a:dc:15:41:a9:1b:ef:cd:af:3d:75:84:02:13:
c5:5a:5a:49:30:f5:8d:c6:32:f6:81:fa:22:33:13:
ed:63:5f:3e:fb:4f:84:45:5b:ae:74:00:07:de:3c:
86:cb:ce:56:9a:18:ae:47:24:46:e1:de:e0:40:4f:
ff:c6:e2:c8:38:cd:1f:a3:a5:3f:b6:fc:05:39:80:
e9:10:96:ea:85:0f:39:43:b8:b8:d1:c5:28:d0:d7:
fe:96:50:98:c6:a2:84:40:f8:13:97:f6:53:2f:94:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:51:1B:FC:1F:0E:AE:62:19:4B:C7:95:EB:44:7A:E5:06:C6:D6:92
X509v3 Authority Key Identifier:
keyid:4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:78:21:4d:06:cc:c9:f2:ab:27:d6:b3:7e:30:b2:ac:7e:cb:
f6:ce:c6:75:79:f3:7b:a8:14:64:18:79:f9:25:78:06:34:02:
c8:e4:76:82:1a:38:eb:5a:5c:47:d9:d8:27:e1:be:84:d5:44:
95:a4:a0:4a:f0:ea:f7:c6:3b:ad:9f:21:86:90:5d:34:2a:a3:
c5:10:eb:0c:e2:b6:7a:f2:80:d8:fc:e4:aa:c1:ed:05:1f:7e:
42:d5:0c:3f:7b:6e:83:6b:a3:9e:7c:73:57:a2:fa:c8:e3:5b:
0f:60:af:3b:52:a6:e3:c4:33:b0:91:95:db:64:fd:9c:3a:5e:
38:29:05:74:83:01:6f:ef:dd:86:2e:d4:10:03:f2:19:e7:d5:
a0:28:2e:9e:f2:67:cc:50:85:dd:b7:6d:3c:07:b7:b0:19:bc:
e0:50:3f:5d:ab:30:69:89:da:5f:4d:21:fc:13:a9:bc:34:8d:
72:ad:b9:5a:b4:1a:94:77:eb:68:e4:0e:2a:cc:fc:11:94:cc:
89:7c:dc:d4:43:36:95:d4:59:e5:76:d3:a2:67:2b:f7:1b:73:
59:b0:79:41:6c:4a:2c:5c:fd:bf:46:2d:c1:bb:92:79:1d:14:
90:e0:3f:76:7d:c3:73:00:3f:bc:b3:cc:b8:55:bd:02:92:5c:
14:53:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:20:57 2026 by rpki-client