Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: nFdwhQyiTab9zJ3sLYfPTx9jMc1TV/F0NOhquhtMbSA=
Subject key identifier: BD:46:EC:EE:56:3A:15:A3:B1:DA:08:C4:C1:7B:A5:4F:C1:23:1C:60
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01A0DD29B5F8C91D740DBE6A25291B6B1CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 10:01:33 +0000
Manifest this update: Sat 26 Sep 2026 10:01:33 +0000
Manifest next update: Sun 27 Sep 2026 10:01:33 +0000
Files and hashes: 1: RCP333K4MJtEO3BsITmh9W8rq7w.roa (hash: il0tlrgTDYLWI+q67CvBvdEJyRCFhOmSDTdmlbLDngA=)
2: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: NUYMh60UfkfvkPVYOrAv7l9rjXNCfzzLvstAG+m8rA4=)
3: Tly1X20kmC9GiMtlAywnR5v42sY.roa (hash: H0lTeyRZMkF4/Jmp2AkeMpiPxuOj8j30tsvE9r36xSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:b5:f8:c9:1d:74:0d:be:6a:25:29:1b:6b:1c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Sep 26 10:01:33 2026 GMT
Not After : Sep 27 10:01:33 2026 GMT
Subject: CN=bd46ecee563a15a3b1da08c4c17ba54fc1231c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:c6:7c:86:d3:8d:67:63:66:02:c4:76:71:
90:8b:50:2f:04:44:13:d2:a5:42:91:90:69:e5:de:
7c:f1:89:38:e8:fd:a4:9b:5a:3f:a1:42:e7:43:46:
af:63:59:5d:8f:60:37:4b:05:ce:f6:fe:05:c3:b5:
5b:94:ba:ba:05:be:1b:7a:9d:81:27:1b:85:1a:6e:
8f:0a:02:6a:50:af:02:05:f8:80:9e:0b:4e:93:06:
86:0c:d9:62:18:0a:5f:72:25:9c:6f:06:d0:a5:48:
50:da:61:94:e7:ae:3e:e6:61:85:71:0e:2f:59:5f:
9a:8c:92:35:a4:db:ac:85:3f:c2:c6:d7:98:61:1a:
98:3d:8f:16:13:8c:81:84:d5:90:8b:54:21:ae:8d:
50:a8:b6:91:2f:84:57:72:5c:62:be:52:4f:df:3c:
16:24:a3:15:40:11:5a:e9:9c:d7:3f:cc:d7:00:93:
b4:b1:ed:a3:bf:15:c1:e9:8d:08:78:d8:32:6b:f2:
df:41:35:e6:86:77:0d:8d:c9:4d:69:81:bf:4d:42:
52:60:8e:be:f3:37:c9:ef:9d:1f:b9:e3:cc:83:16:
aa:30:b8:e3:9c:22:3f:32:d8:d7:43:49:91:5d:08:
99:e3:81:5d:7b:36:9f:4e:e8:2a:7a:ee:4b:ca:ac:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:46:EC:EE:56:3A:15:A3:B1:DA:08:C4:C1:7B:A5:4F:C1:23:1C:60
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:9c:ab:af:57:5c:4d:53:13:8a:a7:fe:7c:0d:1e:7c:74:c0:
10:fc:d1:34:a3:99:f2:28:cc:c8:a2:ba:7c:63:19:c1:fa:68:
b8:03:b7:a5:ed:56:41:58:a3:52:de:5f:e5:60:c4:5c:6a:25:
34:ba:d4:1a:7a:9a:cb:85:88:40:a6:19:38:48:07:f0:4b:e5:
31:4f:18:f7:1c:05:11:2b:81:0d:0f:11:3b:26:85:6b:61:88:
da:d1:33:03:ce:c8:98:05:b4:ab:7a:88:55:6b:03:43:b9:29:
15:ad:99:8e:e7:12:54:cc:ad:e5:36:b3:29:83:93:03:8a:8b:
2a:ef:d3:b1:fc:c2:2a:66:b9:0b:7b:35:2c:a2:b3:cd:b0:5a:
9a:1b:62:c3:46:20:86:5e:5c:00:cf:f3:28:26:d1:91:98:ca:
ab:f1:07:03:87:8c:be:6c:d7:df:e9:12:f8:b9:6c:a2:b1:aa:
53:fe:c0:d4:c6:a6:d9:63:cf:ff:02:31:07:84:93:ea:b8:cf:
32:ec:88:c9:18:e6:a8:41:d2:5d:46:f8:30:61:18:30:e7:08:
3b:d6:f3:bd:d1:d3:53:50:b4:2b:31:fc:48:ef:24:e3:c0:27:
59:f4:ab:83:13:68:11:9f:1e:46:51:ac:1e:6a:6b:f2:92:7d:
cd:18:65:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:01:58 2026 by rpki-client