Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File: Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier: u8kGE2GY40IzbgzX88cEMSEqChm1ZMOJE1omGwWTvhM=
Subject key identifier: 9D:A2:1B:F2:1F:B9:09:B9:CD:D9:23:46:D1:64:01:EF:50:1E:F0:FD
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer: /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial: 01A0BEE73AF0E1D3BDEFE0CF984CEA8140C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number: 148C
Signing time: Sun 20 Sep 2026 13:00:19 +0000
Manifest this update: Sun 20 Sep 2026 13:00:19 +0000
Manifest next update: Mon 21 Sep 2026 13:00:19 +0000
Files and hashes: 1: 0_1M3WwnEVZKS87X1cA2tjjxW-A.roa (hash: DCfHrS2KuDkhYZyMLPand/Ej/KXNXkFM/sCAdbzOarQ=)
2: 9aSqAQcmoN2g2ZBcTNHTApttx4g.asa (hash: Kb0ToC2/MP2f01Ifkul/qi5eKO/zR/3pP3dFhvYFaR8=)
3: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: G6+x71w3rkLAAfegOI3+WYvvPTP84Aw1PPIPlUcAThs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:3a:f0:e1:d3:bd:ef:e0:cf:98:4c:ea:81:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Validity
Not Before: Sep 20 13:00:19 2026 GMT
Not After : Sep 21 13:00:19 2026 GMT
Subject: CN=9da21bf21fb909b9cdd92346d16401ef501ef0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:1d:9a:b2:29:f5:9e:51:9e:5a:c4:0c:6b:
d7:49:8d:f8:b8:24:df:0f:f9:4b:14:7f:5f:5a:ea:
62:61:3f:1d:45:d6:d0:6f:ec:36:b5:4a:81:f1:18:
bd:84:de:7d:f3:7f:19:33:c2:4b:f2:c7:1f:47:88:
bf:a0:92:db:78:2b:d1:24:7b:fc:f7:69:57:52:5b:
c3:41:6b:3f:6a:97:66:aa:69:00:d5:5b:b4:ea:9d:
98:bb:57:0c:f9:55:80:4a:b8:46:13:2a:47:eb:45:
31:61:1c:86:18:72:98:10:bb:2a:5b:9e:45:f3:8d:
ca:21:b1:c6:26:bc:a1:60:80:b2:73:1d:3e:87:5d:
e0:44:a0:b8:74:ae:59:77:48:52:a9:bb:eb:66:87:
3b:a3:5a:77:00:73:cf:6c:c3:94:4c:47:b8:3c:83:
b6:c4:66:53:1f:57:eb:f9:a6:36:a4:e9:9a:52:08:
01:2c:64:9e:9d:91:53:62:3e:f3:a7:59:ac:ba:83:
a3:25:d9:a4:47:c4:30:3c:11:20:05:9a:de:79:ab:
88:44:53:dd:af:ab:a8:c8:4b:8d:09:6f:f9:a2:4c:
c9:86:59:aa:a9:a9:0f:56:8b:48:61:07:84:0a:bb:
2e:eb:d1:5c:eb:33:4a:61:1a:89:f0:a3:09:01:1e:
d4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:1B:F2:1F:B9:09:B9:CD:D9:23:46:D1:64:01:EF:50:1E:F0:FD
X509v3 Authority Key Identifier:
keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f6:46:d6:29:b6:ab:ce:ce:d4:7a:95:22:53:74:f5:c9:9d:
f8:10:9e:e7:c1:ce:c2:bf:a4:ca:d8:1f:1c:0c:45:e5:75:11:
ab:43:61:5f:a5:c9:c5:38:a8:3a:23:1d:ef:79:76:fe:89:41:
2e:3f:b9:bb:79:54:79:fb:3c:26:fa:66:d3:fc:78:20:36:cb:
ab:0f:59:10:4c:87:0a:ea:e0:fa:8e:a6:eb:3d:81:ab:38:27:
17:58:00:b7:6e:c4:59:0f:01:51:09:7b:60:b3:c0:2e:45:67:
46:24:3c:58:d7:08:75:d4:97:a3:a5:b5:c2:35:b0:27:5f:d2:
b0:1e:ba:42:32:30:78:f1:4c:b1:e2:c7:cc:69:b3:31:ed:e6:
d3:22:68:c4:0c:64:12:be:a0:54:4d:87:8c:b4:8f:32:10:71:
09:33:b6:26:e0:7f:df:6b:44:af:28:47:7d:c9:fa:74:4b:4e:
5b:6f:bd:f5:d6:43:10:76:9e:42:76:c5:85:e9:e2:16:d1:71:
5a:ce:16:f0:99:d6:4b:f7:f4:45:71:58:9a:f7:a7:4b:d7:11:
d3:4f:0b:02:41:07:02:a2:ff:73:3a:13:84:4e:8c:d3:ef:11:
1a:3e:10:e7:38:15:60:0c:94:be:7b:03:60:5d:5f:a0:5e:fb:
e3:6b:3b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:49:08 2026 by rpki-client