Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
File: TZujR0bUSxP2nFOtEl3apkifV5U.mft (raw, json)
Hash identifier: AL2+/PFck9V3o4geetbSytYkVbJ73eN5TII9bt7NfZE=
Subject key identifier: 58:83:D9:A5:5D:5A:5F:8F:EF:32:B3:60:05:29:56:19:04:F5:95:2C
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 01A0C1B1D181075AB5E083342CCFC8BF4956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 02:00:51 +0000
Manifest this update: Mon 21 Sep 2026 02:00:51 +0000
Manifest next update: Tue 22 Sep 2026 02:00:51 +0000
Files and hashes: 1: TZujR0bUSxP2nFOtEl3apkifV5U.crl (hash: dIay+Xz66wyuRIvcrGGgR+3fQc4+gygVUlAwLYJRQ5w=)
2: pYetnom_wA_ScRV12GudzaQxL8Q.roa (hash: mTXvpDjqAr8VlbSF6rMZfNW8ZydFcM0VEr1K9O3/BqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:d1:81:07:5a:b5:e0:83:34:2c:cf:c8:bf:49:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Sep 21 02:00:51 2026 GMT
Not After : Sep 22 02:00:51 2026 GMT
Subject: CN=5883d9a55d5a5f8fef32b3600529561904f5952c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:2a:d1:f1:be:77:ba:64:33:cf:6e:ff:46:
70:e2:9b:06:ba:f6:6e:fe:a8:69:5e:7a:2e:d5:31:
6c:ce:f3:52:05:5b:0c:f2:69:6b:8a:88:33:37:8a:
92:c7:83:e8:bc:c9:a3:b8:41:4e:32:d8:a9:57:fb:
a5:f2:24:91:86:56:c1:9c:86:12:ad:d4:ff:9f:ed:
43:c9:d6:44:58:ef:7e:c2:36:47:1e:ce:8c:16:9e:
15:42:86:70:ba:c3:02:a4:db:33:31:84:7f:74:c5:
64:0d:ee:89:f6:9d:17:93:49:28:44:c5:92:5a:2b:
fe:77:c3:9e:69:82:c6:7e:94:9c:a4:c7:be:7e:29:
77:c2:36:73:d3:4a:b8:ab:39:84:cc:ea:3b:1f:15:
5b:78:7a:10:94:1b:78:a7:11:c3:13:60:fb:48:51:
23:57:7a:38:d0:e0:1c:9d:af:f0:66:de:11:49:5d:
98:9a:34:12:76:10:33:7f:0d:68:f6:43:bb:80:d7:
f0:b0:d9:13:ad:25:d1:e4:d5:f6:6e:90:64:31:19:
02:65:26:1d:56:a5:b5:62:1d:f0:1d:da:ef:f1:bf:
29:6e:e5:d2:37:61:b9:d6:e1:7d:74:66:d3:4e:af:
36:88:5e:6e:75:7f:69:80:00:2d:63:87:50:b7:4d:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:83:D9:A5:5D:5A:5F:8F:EF:32:B3:60:05:29:56:19:04:F5:95:2C
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8f:6c:15:3f:ed:e5:dd:d4:06:41:e1:0f:8a:8d:3d:d2:ad:
ad:20:17:03:43:be:10:cc:e1:31:08:98:e9:00:fc:9e:17:d5:
6f:db:02:b5:e9:9e:0b:0f:f2:b0:38:fe:92:97:53:37:85:ab:
fa:10:ef:5d:c8:f0:d4:bd:fd:11:b9:fa:d8:d5:e2:25:f8:5a:
5e:6e:5a:99:67:b8:9a:dc:09:0d:b8:69:8a:cc:3d:86:bd:83:
eb:e6:7a:59:ba:c2:da:ee:5a:42:e8:0f:42:72:c9:5e:2f:1f:
03:48:0d:ad:be:88:2d:82:ed:7e:10:68:af:ff:13:2d:c4:3e:
f2:98:0c:85:39:45:65:6d:0e:be:75:e3:56:54:20:b7:99:33:
c2:69:30:71:e8:79:7f:5f:db:d4:f8:04:4a:34:c9:e1:31:26:
c1:44:38:54:f6:73:5b:76:89:13:b4:81:0c:e6:a2:10:5b:da:
4b:37:0f:e3:be:6b:be:46:1c:e0:8e:7a:08:03:12:b0:c4:9e:
50:5e:16:59:54:38:9f:88:3f:8c:40:35:45:e4:51:0d:21:96:
e6:27:05:aa:a4:7d:a9:98:24:67:ca:b4:07:df:b9:30:d5:6d:
33:ad:ba:c6:7d:f1:a9:73:04:38:13:20:3f:91:fb:d2:f3:c1:
d2:ad:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:50 2026 by rpki-client