Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
File: TZkZWi_leH1dYCYBjDUY88HlABk.mft (raw, json)
Hash identifier: hedF7EFJaSMJHbq5tjPsSPxZ8p4apLXMtHcYYqw//jk=
Subject key identifier: 2F:D6:A1:26:D8:A3:E3:A8:D3:C1:77:C4:91:D7:B8:A3:C9:9C:01:88
Authority key identifier: 4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
Certificate issuer: /CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Certificate serial: 01A130A2C2CC691D964C0A929033B4CD3C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
Manifest number: 0117
Signing time: Mon 12 Oct 2026 15:02:15 +0000
Manifest this update: Mon 12 Oct 2026 15:02:15 +0000
Manifest next update: Tue 13 Oct 2026 15:02:15 +0000
Files and hashes: 1: TZkZWi_leH1dYCYBjDUY88HlABk.crl (hash: RtPEcgIQR4mDP6bge1mluf/QQato0cpXqdOuTRxjM9M=)
2: iZEmjwEPRyx8QyyQn4gnbiaigT4.roa (hash: I3dS4NuQKJEmxy0uXjJxX1xrNFM+VLP6Pll5fzdeVhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:c2:cc:69:1d:96:4c:0a:92:90:33:b4:cd:3c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Validity
Not Before: Oct 12 15:02:15 2026 GMT
Not After : Oct 13 15:02:15 2026 GMT
Subject: CN=2fd6a126d8a3e3a8d3c177c491d7b8a3c99c0188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:30:45:2a:18:80:7d:9b:52:8c:94:91:3c:
45:e6:2f:f1:44:55:7b:ad:05:da:98:9d:75:ed:5e:
89:4a:41:12:7c:d8:78:15:9e:7e:9b:6c:d0:4a:e7:
bd:f9:83:50:f4:07:d8:e5:d5:7b:d0:b0:96:9d:85:
8b:e3:30:47:9d:50:53:70:ee:4d:d2:fd:ea:e1:00:
9f:6d:4c:57:90:67:82:b2:8a:80:9b:33:ed:a3:65:
81:02:ff:2a:56:9a:e7:04:67:80:f6:6f:8e:3a:c1:
9e:21:c7:2b:3c:6b:2e:90:f6:6f:f9:d9:35:80:a0:
d8:f8:01:e9:57:ac:55:96:09:20:af:ff:ba:f5:1e:
5f:bc:e5:4c:a6:cc:8d:ba:db:84:79:ae:9d:8b:a5:
bd:84:df:76:ad:23:75:b9:39:47:0e:d2:a9:15:c4:
29:b1:ff:3e:98:64:f6:69:13:57:bb:92:eb:38:c0:
e7:a8:0b:0c:71:65:7d:d4:5e:6b:04:6a:34:8b:e8:
8a:22:3c:0b:57:2f:54:2a:60:ba:4a:15:55:e0:01:
91:63:50:ed:5f:ff:e4:a6:f9:07:10:ab:c1:4a:05:
f7:c8:50:56:75:44:22:f3:01:f5:64:41:00:fd:48:
c7:c6:0a:49:0b:4b:5c:10:b7:70:07:62:a2:70:06:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D6:A1:26:D8:A3:E3:A8:D3:C1:77:C4:91:D7:B8:A3:C9:9C:01:88
X509v3 Authority Key Identifier:
keyid:4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:71:e8:24:20:b4:3a:2b:2f:d9:a6:80:04:65:ca:10:b5:9b:
d0:7d:79:28:62:a9:31:b2:d7:e0:91:d2:88:71:10:3a:37:e3:
cf:d7:4c:3e:a0:85:fc:ce:47:60:77:d6:65:52:5e:9e:a0:20:
df:45:34:10:fb:2d:55:c0:48:4b:01:41:c2:43:96:93:8f:3b:
f4:70:9d:31:a4:29:ea:1f:16:a1:b8:0b:5e:3d:c9:ee:0d:7d:
9b:0f:ba:30:f3:38:53:a5:40:7b:e1:88:59:02:c7:5a:68:db:
0a:21:fa:6f:d5:d4:36:46:ee:38:5b:01:13:85:a5:86:54:82:
2c:b7:0f:a9:5a:ad:42:6e:5b:cd:c0:65:d7:0b:2f:dc:be:8d:
ed:8e:67:64:50:27:f7:ed:a1:95:b5:27:0e:00:b4:83:8d:15:
ce:44:13:85:72:6f:9a:dc:88:c2:3a:9a:84:c1:6f:ca:fe:3a:
2c:03:33:4e:48:63:0c:9b:8b:18:e3:61:64:38:23:24:ee:15:
31:f6:92:0e:99:3c:00:ae:5d:aa:6d:92:bc:ac:6b:2d:4f:e3:
f9:ce:d1:f2:5d:ca:c2:84:7c:f3:56:c6:64:f4:cb:81:dc:f2:
c0:88:ce:8f:dd:eb:c9:b4:1d:71:7b:0d:e4:b5:42:59:52:de:
1e:5c:17:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:12:13 2026 by rpki-client