Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: R6KilYgdgV7l0hU/8+T//UtwZc+wxbc6IiUr6IbyIVc=
Subject key identifier: 9C:94:84:CB:4B:5B:96:A2:7A:96:88:5A:C4:A7:64:79:75:DE:32:D8
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01A0DBAA09141AEFC26539395A63985DD8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 03:02:28 +0000
Manifest this update: Sat 26 Sep 2026 03:02:28 +0000
Manifest next update: Sun 27 Sep 2026 03:02:28 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: 4DG7f257JMBom2k2G2kkova7o4eg30NFL241CgXNtlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 03:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:aa:09:14:1a:ef:c2:65:39:39:5a:63:98:5d:d8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Sep 26 03:02:28 2026 GMT
Not After : Sep 27 03:02:28 2026 GMT
Subject: CN=9c9484cb4b5b96a27a96885ac4a7647975de32d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:4c:e2:96:50:17:a1:b5:d4:f6:97:b9:9a:
a1:a3:4c:18:13:17:6b:ea:6b:83:f0:85:f1:b7:89:
be:02:00:db:f8:9c:d3:1d:93:d8:cc:36:7f:f8:1b:
ff:36:87:0d:fc:51:0b:dc:61:46:cf:94:e2:3f:3e:
97:42:65:ea:4d:f8:6b:a0:1f:8c:44:50:f2:a8:00:
e6:2a:27:e6:bc:4e:ec:25:ec:ea:49:f6:8e:f9:8e:
c7:7c:fc:a6:4a:a3:64:be:b4:69:88:73:a7:0c:6b:
35:f2:23:69:b0:53:7a:f0:db:ff:32:b4:1f:8d:f2:
87:18:0c:55:26:e8:4f:30:d4:db:e4:84:7e:cd:fe:
e7:a4:70:a6:ea:0e:b2:a0:48:31:4f:2c:db:99:50:
bd:84:ad:ab:08:6c:69:95:6d:ae:18:95:c2:62:e0:
f1:1a:2b:4c:2e:d7:0d:de:ea:03:00:61:3c:ef:ad:
a9:b9:2f:7a:a0:ff:a3:f1:e2:33:bb:74:33:96:41:
be:20:c6:cb:39:94:e2:64:64:bf:c7:32:4d:1e:62:
ee:d9:68:2a:1c:10:5f:92:d2:6f:fb:e2:48:09:90:
8b:d3:c6:d4:b0:7c:58:c5:67:e5:1a:68:b7:c0:58:
3f:56:f4:92:32:47:3d:e2:11:36:e0:bc:ba:0d:29:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:84:CB:4B:5B:96:A2:7A:96:88:5A:C4:A7:64:79:75:DE:32:D8
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:87:6e:3c:e5:31:b7:84:e3:d3:97:2c:13:ec:83:7b:2f:65:
19:10:53:f1:2f:a2:8c:b6:d5:42:b9:48:d7:7c:98:96:c2:18:
a4:8f:da:1d:2e:92:05:d7:da:18:c5:ee:48:9b:c1:38:a3:e4:
5d:4b:fc:8b:50:fc:80:a7:33:ed:ef:5a:5c:ef:4b:b3:9c:31:
ce:9e:1c:33:c8:b6:c8:3a:a3:00:b4:e2:06:f5:22:56:6b:9c:
dd:f1:ce:51:f4:d9:92:a4:fe:c1:cb:6c:7b:e5:6d:ac:7b:c1:
6a:b1:2d:ee:96:35:c9:0e:ca:ed:74:0e:c6:20:28:90:16:be:
95:d6:ca:8a:05:3a:a5:10:88:7d:0b:bf:6f:c7:a8:6f:90:21:
a7:d2:94:9d:eb:74:c2:05:a8:53:41:a0:4f:e1:0d:05:6b:97:
31:8d:13:a9:f6:ce:2c:9f:dd:f3:46:ec:c3:0d:a3:91:86:6b:
53:44:d4:a6:69:42:99:30:e4:74:07:d6:8e:ee:a2:4e:3e:91:
75:04:e7:d6:ee:8b:c6:3f:51:be:96:36:74:f6:57:7d:19:76:
ea:fa:69:b0:17:13:ca:8c:c6:38:44:46:d5:3f:ba:78:73:02:
99:77:98:16:e1:1d:fb:55:8c:d3:d9:6b:63:e4:0e:16:d8:e2:
95:04:9e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:35:15 2026 by rpki-client