Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
File: TOdM9jcjwCadUoOxBlghrzhKmiY.mft (raw, json)
Hash identifier: kMgI/x/+nsBoVmn1hHemZcjCiyIb1Kpu4jBOGFqaikA=
Subject key identifier: B9:B5:8E:A6:8D:D6:4E:34:F6:8A:08:CB:5F:C5:AC:76:21:BD:11:C8
Authority key identifier: 4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
Certificate issuer: /CN=4ce74cf63723c0269d5283b1065821af384a9a26
Certificate serial: 01A0C5FCFAE9348A7101988CBBE0EAD38F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
Manifest number: 0AFE
Signing time: Mon 21 Sep 2026 22:01:25 +0000
Manifest this update: Mon 21 Sep 2026 22:01:25 +0000
Manifest next update: Tue 22 Sep 2026 22:01:25 +0000
Files and hashes: 1: 8Q40PlY6cpiTHKi29S26G9DdZhI.roa (hash: ZDmF+D6x42sRt1+OHh8Qa/2IzhhfYVV5gqAu2bLK1o8=)
2: TOdM9jcjwCadUoOxBlghrzhKmiY.crl (hash: W7HGbxNG4G/N1gUHYEwU6H7FJ9H/uasESCGag5viDx4=)
3: Wla3v2HAl7YCNyUXL50o6i7nRog.roa (hash: meyhssm1okIyg5CgskQZwTUohcxxkQ3loQU928lQacE=)
4: mJxvlVesYFyqMGJZoVjJ6H8bytQ.roa (hash: VwZ3L7NHL8vXYsjYAD8iL+X2hR9DNXoNspGIhoXBzzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:fa:e9:34:8a:71:01:98:8c:bb:e0:ea:d3:8f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce74cf63723c0269d5283b1065821af384a9a26
Validity
Not Before: Sep 21 22:01:25 2026 GMT
Not After : Sep 22 22:01:25 2026 GMT
Subject: CN=b9b58ea68dd64e34f68a08cb5fc5ac7621bd11c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:cf:88:6b:2f:8b:5f:95:36:5f:32:af:9e:
34:9f:69:76:4b:03:63:fc:5e:47:0a:f6:f0:27:db:
7f:a0:14:29:95:d2:ac:77:46:c2:c8:3f:ef:ae:da:
4f:f1:5c:29:64:67:fe:60:45:1e:c2:b9:cc:f5:54:
ef:c3:0d:1a:5a:54:1b:d0:24:25:93:25:ce:3f:5a:
85:29:e0:bb:ac:75:e0:15:65:a2:39:ae:08:4d:10:
7c:79:97:c0:3f:41:de:3b:36:5b:c2:86:67:fc:e9:
35:a6:a4:45:c4:96:f5:14:36:8c:b6:dd:3e:e7:8d:
d0:c6:2e:62:f4:8f:47:0d:99:d2:61:b9:f6:90:2b:
48:c5:f4:6e:43:8d:d7:c5:97:57:ca:b7:91:af:6a:
19:3d:d5:27:5c:8d:01:3c:32:2d:e0:1a:8c:47:19:
d3:7c:54:1c:8c:cc:59:81:7c:fb:bd:49:af:34:76:
26:4d:22:8d:a2:a5:03:d6:f2:97:fc:39:0d:4b:7e:
07:64:86:67:a0:e8:5e:54:f3:d4:e3:28:f0:4c:ab:
8c:02:11:71:79:2c:5b:d4:d9:28:3a:eb:e3:96:3f:
a8:6a:68:c6:d4:b8:92:f6:85:c3:9c:a0:00:3a:d1:
47:df:d2:b9:28:e6:fb:36:83:bd:8a:3f:40:35:5c:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B5:8E:A6:8D:D6:4E:34:F6:8A:08:CB:5F:C5:AC:76:21:BD:11:C8
X509v3 Authority Key Identifier:
keyid:4C:E7:4C:F6:37:23:C0:26:9D:52:83:B1:06:58:21:AF:38:4A:9A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOdM9jcjwCadUoOxBlghrzhKmiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5a0f81-31e2-4db2-8339-9241ff6ec3bf/1/TOdM9jcjwCadUoOxBlghrzhKmiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:09:c2:5d:73:fd:76:03:86:7a:54:a1:4e:97:ab:ef:1d:6b:
4e:32:64:f7:01:40:e1:63:ac:ea:5d:e1:d0:fa:b0:27:22:e6:
3f:a7:42:0d:41:3c:d8:19:80:42:40:0f:db:1f:89:a2:1a:06:
3f:01:a0:30:51:e1:f8:f1:b6:a9:5d:73:89:c6:e5:37:56:41:
7e:22:10:54:d9:ae:5f:5e:14:3e:e3:5c:dc:d1:7e:64:b7:3c:
34:11:1d:7f:dd:b8:8a:4d:cb:4c:94:4f:ed:b6:15:fe:1f:b6:
dd:52:da:22:da:af:89:bf:42:1a:35:d8:50:58:a9:67:23:f9:
1f:5c:3f:d2:3e:e9:7f:0e:58:35:c2:cd:43:b3:77:13:87:8e:
c3:28:02:6e:81:d3:10:8a:e8:8d:ec:a5:9e:da:ae:22:b5:29:
c5:c6:e7:6a:ed:55:d5:0e:1e:52:df:c2:42:6f:3e:67:a5:73:
d0:27:8c:86:f9:3f:6c:10:31:ba:c4:40:4f:63:e9:84:45:1d:
3d:68:de:51:88:02:a4:3c:af:8c:b3:4e:d0:49:93:20:4d:1f:
61:55:f4:ab:0e:6a:95:28:38:42:9e:d8:22:ad:f2:61:1f:94:
cc:c7:29:91:64:84:8a:ec:1b:1a:c1:50:ea:13:a5:0d:15:c0:
e6:74:66:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:26:21 2026 by rpki-client