Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
File: TsTzl1j2BWug1JKloEudaGbGApI.mft (raw, json)
Hash identifier: dOux/L+1K+OHyocRqwGFLDZt9NkxqW9bJzkxAHrSJCY=
Subject key identifier: 95:EE:60:3A:A6:47:FA:21:62:60:A3:57:D3:CE:B0:36:B3:98:F3:94
Authority key identifier: 4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
Certificate issuer: /CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Certificate serial: 01A0DBA9E3CFFC7587458AC028F7BA964B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:02:19 +0000
Manifest this update: Sat 26 Sep 2026 03:02:19 +0000
Manifest next update: Sun 27 Sep 2026 03:02:19 +0000
Files and hashes: 1: HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa (hash: m3qcvytC4O+9pABPedPudw1QdoZyvWEqd2L9LP+DeoM=)
2: S8ku3gf4vWkmxFBDkBkEiAy9So4.roa (hash: DxiREQgQfDk48dsaRbdhgiH4PUmwi+B75L8QRMAKRYY=)
3: TsTzl1j2BWug1JKloEudaGbGApI.crl (hash: 6x7XiCyySwblPmR04BMeFi7oDrFjksGCk+j1/mefC4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:e3:cf:fc:75:87:45:8a:c0:28:f7:ba:96:4b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Validity
Not Before: Sep 26 03:02:19 2026 GMT
Not After : Sep 27 03:02:19 2026 GMT
Subject: CN=95ee603aa647fa216260a357d3ceb036b398f394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:cc:e3:82:33:7c:67:80:cd:f1:55:9a:3c:
8c:19:8a:88:7e:10:e4:18:5e:0b:b3:a3:55:ed:11:
91:a4:9d:c3:2b:fe:84:50:71:4b:95:c1:b1:74:b6:
f3:d9:8d:ee:84:61:93:e4:34:59:ba:c4:33:ed:d8:
fb:6d:19:bc:74:ab:a0:4c:4b:5d:63:f9:7c:b9:88:
12:5e:af:77:82:1e:f8:95:f8:0a:78:45:bc:ba:70:
a3:34:3f:4e:57:11:70:c6:1c:74:61:c3:f3:c6:1c:
db:59:d2:5a:06:be:a0:20:a2:45:4e:bc:29:d3:3d:
15:43:08:c2:bb:f9:8a:b9:73:fb:ad:ec:0a:ff:a8:
67:5e:cc:0f:96:ed:0b:89:4d:b1:e3:05:7f:03:bd:
07:aa:19:f9:79:0d:20:b1:05:ad:76:06:8a:64:4a:
da:bd:b1:42:d1:b7:d5:f5:c3:d3:d5:e6:a2:01:3e:
17:13:54:5d:fc:3f:58:55:1f:b3:28:53:da:0e:d7:
25:11:8f:0a:26:ad:ad:70:ec:ab:ab:c8:64:9a:44:
b8:d7:77:e8:81:2f:b2:3c:ef:b4:df:4a:43:0c:67:
df:7f:ce:cf:c1:c0:91:18:3d:17:31:0a:e9:05:9a:
7e:f2:26:a2:66:eb:35:fb:5e:39:e4:f6:23:77:fe:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EE:60:3A:A6:47:FA:21:62:60:A3:57:D3:CE:B0:36:B3:98:F3:94
X509v3 Authority Key Identifier:
keyid:4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d8:0c:0e:6d:1b:e5:a9:0a:85:56:50:7d:ff:a8:d2:b3:4b:
d9:b1:fb:56:b5:27:9d:2c:ca:66:a0:d8:95:d7:e3:71:3c:36:
27:f9:db:89:0e:b9:29:d6:cf:ec:9f:27:66:77:54:65:35:b2:
eb:af:a0:a9:6e:d6:5c:82:37:9d:57:03:78:b4:14:e8:16:72:
d1:a6:2d:b3:b9:9e:bf:70:b2:b6:e2:5a:c5:72:bc:d6:53:34:
c7:09:c8:13:e5:68:00:73:fb:17:40:9f:26:e3:07:2a:68:79:
33:cd:9b:98:9d:1e:66:97:0e:14:7c:bb:da:4e:c9:2a:d9:06:
d7:99:b1:de:46:3f:08:74:8e:88:c3:73:ed:0c:9e:cf:ef:69:
2e:d5:67:d6:8f:17:02:61:32:e1:b3:74:5b:86:0a:14:c7:b1:
fb:44:7d:7f:85:3f:31:8b:13:7a:7a:ba:07:53:56:af:43:41:
19:52:41:3d:a3:ec:78:4e:1d:bd:63:ae:b1:d2:8c:5d:ef:c4:
47:04:c0:5e:81:54:cc:30:30:7a:af:f5:1d:1a:86:91:8e:40:
b6:c0:5c:3f:f4:35:da:58:a9:c2:94:cd:63:11:77:d8:c6:73:
a1:21:c5:86:a9:ac:2c:b8:07:fa:31:10:02:68:2c:48:9c:ec:
32:8d:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:18:53 2026 by rpki-client