Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: 93cNOJaNwNgV33MElJmk1VwtRjRBkgL36xaFVt1aD4Q=
Subject key identifier: BD:D8:1A:C8:A8:70:55:5B:5E:17:8E:B2:D8:70:AD:E6:F7:7D:61:96
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 01A0BDD4D02F7B2D06A38764008B060D6E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1A75
Signing time: Sun 20 Sep 2026 08:00:35 +0000
Manifest this update: Sun 20 Sep 2026 08:00:35 +0000
Manifest next update: Mon 21 Sep 2026 08:00:35 +0000
Files and hashes: 1: KFywMW4737-JPpo7ntDdVjcljY0.roa (hash: y+0Jhvx7MYfdfSZW5SGIaISfaSBvz9VuHqmA13RqQx0=)
2: K_yCMW3gEKPx-UvDR4vcUDQfi04.asa (hash: 5ltTYL5p8Fw8k0ASnDZeUNbyyXbm27rjjhji8a6UNc0=)
3: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: B+nsLPhfpEqO139Biii8HQ2URGrpIVtHl1AftWDr72U=)
4: fhNDpez0tEXT55T0FQuT3YRDXos.roa (hash: +VEaHjpilB4sNBhuKG3GgrFbP8VWjeNr6HEMkdwaBYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:d0:2f:7b:2d:06:a3:87:64:00:8b:06:0d:6e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Sep 20 08:00:35 2026 GMT
Not After : Sep 21 08:00:35 2026 GMT
Subject: CN=bdd81ac8a870555b5e178eb2d870ade6f77d6196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:98:bc:24:84:6c:21:c8:e9:f9:13:e1:5b:
9c:4a:f7:b8:8b:af:4b:70:e7:7c:ae:51:08:15:e2:
1d:df:e1:5c:28:5c:8d:b2:e1:cd:0b:a1:a1:9b:52:
12:5c:76:22:b2:4f:82:ec:87:cf:9b:e6:7c:b3:68:
ad:f5:fd:30:11:c5:9b:7c:53:29:f9:ba:eb:ff:07:
76:0c:1d:7d:a5:49:3e:3d:ff:39:de:59:4a:97:fd:
d6:8c:1d:1b:8c:1a:c3:4e:4f:96:76:c9:24:a1:71:
2e:30:b4:25:cc:17:34:22:b2:9e:3e:63:01:99:ee:
3d:2a:14:6a:69:68:13:41:06:92:e2:1a:05:e8:58:
3c:30:6e:b9:0d:e5:84:2e:2a:97:a2:d6:1a:82:b8:
dc:2c:ee:e2:dd:8b:43:b8:4f:e1:e6:06:89:68:73:
8e:f1:f9:a1:4a:b4:ec:90:25:68:82:c6:f4:3e:5e:
e0:a6:9e:fc:9f:52:f4:13:f4:fd:2f:bd:95:56:30:
45:eb:2d:e8:0b:29:22:a7:85:c2:23:7d:e6:3a:56:
ab:9b:75:0a:a6:49:18:6c:cf:da:c3:aa:fb:f8:b2:
7a:54:f8:c6:c1:52:4d:89:11:6f:21:4c:c1:7a:12:
08:50:95:bb:ec:b9:e0:41:1f:32:f4:0f:93:57:3b:
c6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D8:1A:C8:A8:70:55:5B:5E:17:8E:B2:D8:70:AD:E6:F7:7D:61:96
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:12:2d:b7:48:d1:45:b1:6d:ff:a4:39:14:bf:fa:38:e7:90:
a1:75:b9:31:6f:6e:65:f7:41:55:74:32:c9:33:05:7b:cb:0f:
b2:2d:35:e8:66:4b:65:52:1c:ed:47:49:71:78:d9:0d:de:ba:
79:62:53:8a:03:c3:3d:e2:95:0b:90:d0:f4:1e:14:2c:be:71:
b6:4d:a8:2a:9d:4a:6e:e7:1c:de:0d:73:43:81:98:f4:19:70:
78:75:78:4d:96:e2:d5:b1:b6:81:9a:e2:cd:f3:0d:45:1c:4c:
5c:cd:90:c5:cb:05:56:09:f8:36:b5:95:c8:62:64:aa:33:db:
db:86:8b:a9:42:14:3a:2e:45:80:a6:0c:1c:cd:09:9a:f1:d4:
26:f4:7c:25:ad:65:01:1c:85:5a:1c:32:a1:15:af:9c:8c:44:
e6:ab:e7:3b:fc:3b:3b:31:b3:07:d6:10:2b:11:a5:7c:64:92:
f7:a3:8a:d7:d7:01:bb:13:5a:56:8f:69:52:af:81:42:17:31:
d1:71:8c:ae:be:af:8a:da:19:00:6b:a0:cb:49:68:49:6a:34:
b3:36:64:eb:f0:11:67:c5:00:e0:c2:5b:28:c2:24:2d:c6:df:
6a:f8:43:4c:75:24:bd:ae:f9:e6:5b:28:79:69:31:f0:ec:e1:
7a:1e:37:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:50:59 2026 by rpki-client