Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: 0RiWbS3HHE5WftXGeWxUoizT3ub1RWPS4LAByVY1fOs=
Subject key identifier: 5C:43:78:21:91:44:BB:4C:67:C4:03:E1:D2:8B:39:76:8A:0F:D6:FA
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 01A0D12445BA5BBAC8D52235DA7A3E057D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 02:00:10 +0000
Manifest this update: Thu 24 Sep 2026 02:00:10 +0000
Manifest next update: Fri 25 Sep 2026 02:00:10 +0000
Files and hashes: 1: 1SMtyrFP6eFZxMb7PZMbKYGMJi8.roa (hash: XxgHh0JzLHhNi3/TyAFFwO5EFUtAwR/nBi3ICijq0Hg=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: szdLqhF/3pBOdObW1MZ/UH6K+F5Kt6b7y+t0B4wKTWg=)
3: Xb_xBMYO16QsavZuo57UMH_pTFY.asa (hash: pTF5yNZXnsPsUoT0zDPJu+l24+9PSGN9YfP8M+7/BDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:45:ba:5b:ba:c8:d5:22:35:da:7a:3e:05:7d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Sep 24 02:00:10 2026 GMT
Not After : Sep 25 02:00:10 2026 GMT
Subject: CN=5c4378219144bb4c67c403e1d28b39768a0fd6fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:ef:9a:ad:3f:d9:5b:31:38:c2:ce:0d:2a:
6f:ed:50:e2:08:e6:ac:01:06:9d:12:54:7c:70:02:
f9:f5:c4:55:d4:0a:f2:b3:ad:ce:d1:2a:83:49:a8:
8b:d9:37:0c:55:c1:91:b5:ca:46:d1:33:98:56:d5:
ee:f3:74:9d:d1:76:f0:ce:b8:82:39:b1:c4:14:34:
73:ec:45:ac:8a:e9:b7:73:9f:de:bb:41:ba:8e:d2:
c9:0a:d3:41:30:a1:2c:31:26:43:52:fa:74:19:1a:
4e:a0:a0:da:29:d9:6a:cf:17:9f:16:d1:e2:93:2c:
61:49:60:9e:fa:6e:a9:66:5e:eb:bb:6d:2c:ad:ed:
64:3c:9d:a1:00:b9:d2:d3:20:aa:e5:d7:55:4f:87:
94:9a:d8:e8:eb:f0:e2:b9:89:11:6d:0b:87:f8:90:
3b:60:e0:99:9e:31:cd:19:56:be:49:b3:80:00:82:
fa:95:02:97:a2:ab:54:32:21:81:54:e3:5c:3f:2e:
bd:f2:06:2b:f0:90:f2:8d:2d:6d:fc:93:23:7c:b5:
14:68:99:32:50:42:fe:4d:5c:a3:d6:f3:84:43:d1:
8a:d4:bc:8f:de:d1:26:31:b4:bd:43:8f:a3:8f:42:
7a:6b:d7:64:35:88:e7:73:f1:38:42:98:4b:f1:12:
77:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:78:21:91:44:BB:4C:67:C4:03:E1:D2:8B:39:76:8A:0F:D6:FA
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:76:41:1d:d5:53:23:0d:10:cb:75:05:d9:93:4a:a7:1a:d0:
36:5d:d7:64:c4:a8:69:c9:27:cd:a3:9c:b0:93:19:6c:0d:e2:
6d:5e:6a:02:35:30:3a:74:72:76:7f:73:e8:86:ee:0f:2a:25:
59:e1:97:d3:9b:f9:9c:19:9c:6d:f5:61:88:c0:1e:3e:59:3e:
ed:40:d2:b9:f5:d6:d3:59:ee:a2:cb:d8:76:bb:ae:29:53:99:
5f:3c:be:71:45:da:b2:15:c2:9e:ff:24:5f:4f:90:c4:9d:6a:
d0:fb:81:64:90:2d:70:bd:9f:80:c0:7f:cf:33:cd:5e:f1:df:
64:8b:f2:9a:e1:c5:78:d2:4b:ca:de:65:a1:b9:24:b5:4b:67:
02:b4:4b:ec:66:91:61:2d:b0:b6:7c:b1:bc:24:20:e8:57:1e:
65:34:b4:29:90:60:4a:69:e0:05:96:e1:59:2b:f1:a0:b2:88:
65:a8:62:f0:0b:42:49:2c:cf:a8:40:5e:c1:28:fd:54:0d:b7:
f1:a7:0b:06:ba:39:34:30:1a:12:93:d4:2b:ac:a7:3e:c3:06:
5f:e9:f3:3b:bc:eb:94:42:fe:58:9f:3f:ad:a6:f7:73:00:81:
ac:15:63:9e:49:7b:54:62:c3:c7:5c:6f:2b:e1:e7:f4:37:af:
b3:33:6d:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJEW6W7rI1SI12no+BX0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTMyMTNkODhmYTg3NGViNDQ2MGUyYzVjZjFiYjFhOTFk
YTkwNzgwHhcNMjYwOTI0MDIwMDEwWhcNMjYwOTI1MDIwMDEwWjAzMTEwLwYDVQQD
Eyg1YzQzNzgyMTkxNDRiYjRjNjdjNDAzZTFkMjhiMzk3NjhhMGZkNmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPvmq0/2VsxOMLODSpv7VDiCOas
AQadElR8cAL59cRV1Arys63O0SqDSaiL2TcMVcGRtcpG0TOYVtXu83Sd0XbwzriC
ObHEFDRz7EWsium3c5/eu0G6jtLJCtNBMKEsMSZDUvp0GRpOoKDaKdlqzxefFtHi
kyxhSWCe+m6pZl7ru20sre1kPJ2hALnS0yCq5ddVT4eUmtjo6/DiuYkRbQuH+JA7
YOCZnjHNGVa+SbOAAIL6lQKXoqtUMiGBVONcPy698gYr8JDyjS1t/JMjfLUUaJky
UEL+TVyj1vOEQ9GK1LyP3tEmMbS9Q4+jj0J6a9dkNYjnc/E4QphL8RJ3KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxDeCGRRLtMZ8QD4dKLOXaKD9b6MB8GA1UdIwQY
MBaAFEyTIT2I+odOtEYOLFzxuxqR2pB4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAt
Y2Y1NmM2NmEwYWMwLzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9lNGU2OTYtOWQ3OC00MTRjLWFmNDAtY2Y1NmM2NmEwYWMw
LzEvVEpNaFBZajZoMDYwUmc0c1hQRzdHcEhha0hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXZBHdVT
Iw0Qy3UF2ZNKpxrQNl3XZMSoacknzaOcsJMZbA3ibV5qAjUwOnRydn9z6IbuDyol
WeGX05v5nBmcbfVhiMAePlk+7UDSufXW01nuosvYdruuKVOZXzy+cUXashXCnv8k
X0+QxJ1q0PuBZJAtcL2fgMB/zzPNXvHfZIvymuHFeNJLyt5lobkktUtnArRL7GaR
YS2wtnyxvCQg6FceZTS0KZBgSmngBZbhWSvxoLKIZahi8AtCSSzPqEBewSj9VA23
8acLBro5NDAaEpPUK6ynPsMGX+nzO7zrlEL+WJ8/rab3cwCBrBVjnkl7VGLDx1xv
K+Hn9DevszNt0Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:36:06 2026 by rpki-client