Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
File: TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft (raw, json)
Hash identifier: /8UjGKSysVQLzZQmiE8mtsHUnvmmbR+c3Eq4phsSUWg=
Subject key identifier: C1:84:B2:23:B8:3E:21:14:2B:1E:E5:81:20:15:C0:85:97:E3:05:8C
Authority key identifier: 4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
Certificate issuer: /CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Certificate serial: 01A1AB94E5F153E5C1CCB3DCD060CA51ABFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
Manifest number: 0109
Signing time: Thu 05 Nov 2026 12:00:24 +0000
Manifest this update: Thu 05 Nov 2026 12:00:24 +0000
Manifest next update: Fri 06 Nov 2026 12:00:24 +0000
Files and hashes: 1: 03isWsmaGVRk9tqcdmDKk9uA_-I.roa (hash: ScrT5FCc9rPEYk5wCLCQ97IXUmvu4SWDxXf7fq4zp6c=)
2: 226OYCKUmdi1S_3Pe-3PZ-iCAAs.asa (hash: X+ewLeQEwgG8XlmiwNHRk1JnO20h3xlra7zQCCYsiQo=)
3: TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl (hash: sBRcl/czYf+Dtz5r7+P5uVJnb6GIyiWizrjxnhkA9Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:94:e5:f1:53:e5:c1:cc:b3:dc:d0:60:ca:51:ab:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Validity
Not Before: Nov 5 12:00:24 2026 GMT
Not After : Nov 6 12:00:24 2026 GMT
Subject: CN=c184b223b83e21142b1ee5812015c08597e3058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:b7:67:c8:ad:e2:43:e9:0c:71:86:4c:35:
7a:67:49:da:6e:7d:eb:7b:1c:a2:68:74:b7:42:2f:
3f:24:97:66:27:61:8b:16:c9:8d:e8:1f:5a:d7:26:
74:3a:7d:50:a1:4a:9e:92:7a:7e:36:55:c8:7a:c9:
26:24:79:d2:1f:97:38:69:0d:10:af:51:09:7d:d4:
06:4c:34:e8:fd:5f:43:7e:66:a3:5e:df:d6:4d:45:
d4:c7:44:da:fc:39:26:69:8a:81:32:e0:98:4b:a4:
c8:df:3d:cb:bc:44:69:84:62:e3:b2:0f:68:c5:9b:
11:e0:12:e7:a4:17:7e:af:01:5e:a4:ae:c7:f7:fa:
fc:90:06:1d:7b:f2:df:99:f1:1b:a6:e2:08:7c:77:
9a:eb:2e:65:09:b1:a4:7b:3f:ed:e5:6c:20:a5:cc:
8d:cb:07:34:18:7e:a6:a3:da:c4:ef:94:bb:54:dc:
ce:22:2b:61:85:08:1b:6d:d3:63:fe:d7:21:a2:a3:
3c:ad:ff:a0:63:c3:66:d3:e8:b7:10:67:b1:d1:81:
19:01:18:92:80:5c:3f:59:8f:77:4d:d2:be:c2:93:
0d:bf:40:2c:a9:f7:90:0d:89:ae:7e:b4:6c:a4:9b:
f2:07:d2:b3:5c:53:da:14:e0:6a:d3:d5:e2:93:99:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:84:B2:23:B8:3E:21:14:2B:1E:E5:81:20:15:C0:85:97:E3:05:8C
X509v3 Authority Key Identifier:
keyid:4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c9:c7:f7:57:2b:10:c2:69:ae:b9:03:76:d7:00:c7:35:a8:
75:c7:5e:6e:37:22:58:6c:56:53:94:17:a8:a9:ee:18:78:2e:
50:7f:73:8b:35:7f:1f:a9:d4:e4:38:be:59:d1:37:76:53:d7:
99:db:9d:35:42:32:94:ba:f4:2b:e9:83:39:f6:8e:57:0e:b9:
65:40:8b:0b:5c:d3:77:ca:57:02:c8:c8:61:39:30:fe:9e:5f:
74:3e:3c:ce:7f:13:8f:67:0e:de:46:48:dc:7f:40:fa:61:90:
21:34:46:98:3b:75:56:42:37:3c:10:ca:e0:67:42:55:86:40:
55:d5:2f:2c:a6:93:cc:29:7b:e9:7c:17:7d:78:23:c5:ec:7b:
23:f7:9b:06:ad:30:66:27:ea:74:b7:b4:e7:c1:22:7e:c5:49:
aa:ce:cf:58:6f:7f:a6:10:18:b1:2d:5f:07:7e:b8:02:9e:be:
79:45:01:84:da:fd:c8:1c:07:f6:e7:49:73:5a:7d:94:25:67:
f6:97:1f:fc:fc:27:d8:86:13:1c:9b:d8:dc:71:83:69:23:81:
1d:22:68:cc:7f:bf:24:45:75:bd:83:ca:58:b7:24:e9:1d:ff:
81:25:81:87:67:c1:54:50:36:c3:e8:2a:03:b6:51:5c:49:a0:
28:f9:85:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:37:00 2026 by rpki-client