Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: EL2Oul+BaQUNm5CKPLVVJID/9d70BSLRw7VgoFoVXQA=
Subject key identifier: 0B:B3:D9:EB:B5:DE:E0:29:56:DC:6F:F7:A0:EF:CB:57:F6:83:4E:EE
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 01A0CC6C75FE79B0A41563C3D5E86A1FA59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 0891
Signing time: Wed 23 Sep 2026 04:00:55 +0000
Manifest this update: Wed 23 Sep 2026 04:00:55 +0000
Manifest next update: Thu 24 Sep 2026 04:00:55 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: PlAkR0p6EUeUMVaXR5uOjtXXDhg.roa (hash: GmzVV0u4SOKyF7bQ648PPO4x0f48XGEC/CDH+VzyXi8=)
3: t4HkSR49kbnH3Md8VLmkvowwv5c.roa (hash: PlMc98JPUnLzb7As5Be/OWrN/vV15yWuIzHBD4KUiKQ=)
4: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: Nl0v3esg+PGhiafMhscScEQqnN0m0n3PNtL5b+dzeCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:75:fe:79:b0:a4:15:63:c3:d5:e8:6a:1f:a5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Sep 23 04:00:55 2026 GMT
Not After : Sep 24 04:00:55 2026 GMT
Subject: CN=0bb3d9ebb5dee02956dc6ff7a0efcb57f6834eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ef:b8:3b:70:65:cd:3a:6f:33:56:24:6a:3d:
55:e8:03:11:7a:77:f6:1d:a5:c9:1c:f7:a8:0b:ba:
dd:be:85:d4:40:cf:fa:ae:24:9d:91:f7:fd:d3:12:
3b:66:65:1d:f6:b0:d4:0a:f3:f5:f5:fe:e2:49:f6:
3d:18:9d:83:c4:18:f8:dc:43:5e:0a:b9:2c:e0:47:
2e:3c:c8:d5:83:95:54:31:2a:58:7d:c9:a3:f0:42:
73:44:41:dd:b7:0c:5c:d7:0c:02:00:91:37:1c:71:
36:81:fc:99:d9:2b:b6:66:6a:05:82:4b:62:d4:07:
71:7d:49:b4:23:d1:01:44:a6:9c:2f:06:8a:73:4c:
c9:bc:51:d2:26:52:2d:78:fc:7e:48:bb:f2:fa:ec:
f7:db:e3:99:8e:0c:36:9b:3a:dc:5f:78:e5:17:7d:
e0:e4:6a:4b:85:06:f1:32:e8:57:ef:d9:88:66:3d:
69:0a:e1:fa:69:34:6a:8b:5b:0b:e9:15:58:be:68:
05:31:7d:e6:53:ef:ac:f5:47:15:e7:62:86:ce:c8:
7c:dc:2a:e7:d8:96:c8:7b:ec:3b:78:8a:5f:e6:90:
d9:68:0c:96:cd:50:fa:eb:3f:a7:ee:fb:ea:b1:0c:
9e:72:7d:95:95:11:bf:c4:e0:52:da:a9:21:97:4f:
6b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B3:D9:EB:B5:DE:E0:29:56:DC:6F:F7:A0:EF:CB:57:F6:83:4E:EE
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6a:07:5b:da:68:7e:1e:64:fd:eb:e9:a3:63:a1:2a:86:a7:
cc:fc:ab:c4:73:8a:b4:a1:30:56:f8:a9:4a:fe:ab:36:fc:71:
f7:c9:2e:e1:23:52:b2:b8:75:10:e6:db:f4:57:99:c2:66:10:
ed:00:e8:72:e4:ad:27:96:6e:dc:fd:c8:34:b8:e8:70:3d:38:
29:de:44:22:d9:df:e6:5a:fd:02:08:c8:79:83:63:d9:a3:6d:
cd:6c:39:38:7d:ec:10:79:b3:34:51:62:33:23:3c:5e:3c:43:
f6:a3:a5:e5:21:44:34:29:30:73:e6:c4:c5:00:9a:c2:66:10:
ee:e8:b3:5d:27:0c:9e:09:25:f0:f2:07:78:46:81:2f:18:58:
6d:5c:cf:5e:4f:5b:ac:2c:27:9e:c5:71:c9:5a:05:b8:f6:9b:
68:3d:94:81:d5:6b:b8:f5:a3:b5:82:d9:bb:09:a1:fb:a0:3e:
f0:59:6e:b4:37:aa:5b:76:08:b8:42:f4:fa:2f:1b:84:72:a7:
97:dd:42:99:00:fa:ed:63:ab:36:85:d3:ce:ba:f5:77:4f:6b:
da:56:2a:34:e1:88:dd:ae:19:4a:c1:fa:d8:2f:40:88:ea:68:
f1:f7:6c:ff:ea:5a:5f:7c:35:90:14:e5:79:30:39:8b:4e:e5:
2f:0f:56:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:09 2026 by rpki-client