Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: QlRR1jophbJV0HNoDpBOEoXYIjHYcSwWjG/J6w4z8d0=
Subject key identifier: 34:09:C3:F0:23:20:9C:9E:03:50:52:1F:FA:50:39:69:F9:76:DD:E9
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 01A0C4B3071D2A689CA5650DB91C19FA93FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 1A6A
Signing time: Mon 21 Sep 2026 16:01:02 +0000
Manifest this update: Mon 21 Sep 2026 16:01:02 +0000
Manifest next update: Tue 22 Sep 2026 16:01:02 +0000
Files and hashes: 1: VIjK-dF1RkU8oL9JO5ackgQvQqk.roa (hash: EuZj5CNsImrt381xNpJVt+ICs2RyaQvBUySYpPa5Un8=)
2: tBz0by2NzKIkh_m261Gzm8WL1fA.roa (hash: HsCmK+FnFFM5EN4UPd625pAFTouSWoOu/R7Evk3aoN0=)
3: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: f9nNPtD6F7sOvdXpPTmvu8ITmTdm9hMZtGL2wfMelXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b3:07:1d:2a:68:9c:a5:65:0d:b9:1c:19:fa:93:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Sep 21 16:01:02 2026 GMT
Not After : Sep 22 16:01:02 2026 GMT
Subject: CN=3409c3f023209c9e0350521ffa503969f976dde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:22:c9:25:d8:db:82:ca:8d:2c:ce:7b:7c:02:
ad:50:58:02:89:b2:54:49:7c:0c:4a:a3:d9:43:2f:
b9:26:31:12:62:6a:8e:1d:cc:a7:65:cd:e7:df:db:
d3:30:07:88:1a:cc:c7:14:be:9b:06:c7:46:f1:f9:
e6:45:76:16:6b:cb:d8:c8:b2:6e:b8:2a:7d:b0:ac:
39:08:40:f3:6b:32:1a:14:1c:cb:68:91:e0:ea:17:
d1:51:f1:df:de:12:83:9f:d5:ed:2d:43:4e:d4:72:
64:67:cb:d0:38:b7:b5:93:61:96:1b:c9:ff:f1:4f:
9c:65:26:93:cf:4e:81:3c:2b:17:7e:69:35:b2:04:
e0:c9:b1:e4:cb:d7:15:85:c0:a6:46:57:d8:dc:74:
78:04:3c:6b:df:15:40:d0:fb:39:d1:df:36:d2:f8:
b5:34:a8:07:1d:d8:54:69:06:ef:49:c0:93:5a:ce:
62:39:b6:b7:36:49:20:92:d3:8c:48:92:e1:02:ea:
5b:79:5f:35:e8:96:69:a5:49:d7:07:27:77:40:38:
e3:43:80:a0:5f:b2:4c:cc:fa:2d:a1:86:62:8e:6a:
13:30:b7:d5:0d:f0:59:81:b8:f7:4b:7f:86:28:e8:
38:3f:12:2a:dc:fe:93:a5:3a:0d:c7:17:97:61:b5:
08:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:09:C3:F0:23:20:9C:9E:03:50:52:1F:FA:50:39:69:F9:76:DD:E9
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:cc:c9:ac:cd:1e:d4:16:01:c2:19:98:fc:78:28:82:80:12:
6f:a7:d2:3c:53:72:50:5b:3b:da:10:07:7a:d3:8c:4b:45:86:
91:9d:65:64:3a:9a:a3:d5:f9:10:cc:e4:8e:69:8b:a8:d3:78:
68:49:af:35:5b:f1:ca:6d:a5:42:e1:66:2e:40:cf:b8:e9:20:
10:9b:5c:e3:9d:90:4e:ac:6c:fc:20:ba:46:c7:ae:c8:34:c9:
2b:3f:30:db:eb:1e:56:3c:93:14:e6:03:f9:21:ec:3e:80:9a:
f7:e5:d1:2b:4b:f4:e1:59:91:9f:e0:b3:88:eb:d6:de:b9:19:
d9:56:68:96:45:24:2b:67:a2:44:bd:b0:94:95:d2:c7:ca:bc:
04:18:62:13:97:9a:30:8a:ea:31:14:e2:8b:bb:91:95:51:1b:
9a:f6:f0:a3:21:3d:97:db:89:8b:5d:8d:8d:a1:bf:8b:13:f6:
e8:f5:cf:fc:4c:e1:80:f6:c4:f7:28:83:00:00:f9:b6:a0:a3:
fb:90:f0:44:06:c2:08:be:7f:e8:d0:14:97:67:36:47:7f:a1:
50:b8:64:3d:6b:59:3a:05:3f:f7:cc:b6:0a:fa:20:30:2b:1d:
a9:3d:84:8c:60:e5:17:a1:5c:f1:25:e1:40:8f:d9:ee:37:56:
1e:d2:00:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:44:56 2026 by rpki-client