Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: HEFjfEMR03qrK5YG1xypHgdMw1mXNaTsqPMIWzfBZTU=
Subject key identifier: 53:F0:18:52:61:A9:9A:37:22:D7:13:C6:11:FA:C4:B3:66:28:C1:76
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 01A0F1C2C5C16271F1B96881B80A107E4AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0AD2
Signing time: Wed 30 Sep 2026 10:01:08 +0000
Manifest this update: Wed 30 Sep 2026 10:01:08 +0000
Manifest next update: Thu 01 Oct 2026 10:01:08 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: Rb4apyFnLdg2wH9djhYKxe3pcPY5qANtWwZWK1XJzR8=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:c2:c5:c1:62:71:f1:b9:68:81:b8:0a:10:7e:4a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Sep 30 10:01:08 2026 GMT
Not After : Oct 1 10:01:08 2026 GMT
Subject: CN=53f0185261a99a3722d713c611fac4b36628c176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:4a:f1:f1:95:92:76:7e:d3:3b:f2:38:7d:
4d:40:4e:18:fd:29:8a:61:e8:18:d3:a6:6c:ba:e6:
a2:58:6d:a0:99:c4:8a:db:77:b5:d0:25:2a:5e:af:
f9:03:bf:51:97:3e:a1:19:ae:14:e9:2b:2a:95:40:
c0:aa:29:dd:bb:78:e6:c2:76:ff:47:ca:32:21:02:
ed:be:f9:67:3d:0c:82:9b:80:6c:ac:f7:76:a9:df:
b5:73:67:d1:37:e8:0d:37:57:de:cb:dc:31:95:08:
1c:19:a7:f4:e4:d1:02:fe:d8:01:c5:33:4b:26:a7:
e5:a5:b2:94:8c:2c:a0:df:80:d8:28:c5:a1:0d:34:
bd:ac:35:e2:eb:25:3a:e1:70:9a:de:55:90:cb:38:
02:c3:8f:e0:eb:92:77:b1:7d:d3:c9:3b:62:e8:67:
a2:4c:87:55:2e:dd:5c:5e:db:da:ba:6d:8e:03:24:
57:0c:41:76:29:b2:15:aa:f5:69:1c:e9:98:e7:f1:
44:d9:fe:1f:fd:f9:0e:00:78:2f:66:34:4e:9f:40:
c6:ed:eb:09:ff:d5:cf:60:a1:cd:e4:8b:ab:ca:95:
bf:c0:8c:74:02:d6:33:5f:b0:65:10:e3:f0:cf:0d:
ef:90:46:2b:5c:92:3b:df:06:df:6e:26:d5:67:29:
e7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:18:52:61:A9:9A:37:22:D7:13:C6:11:FA:C4:B3:66:28:C1:76
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3f:12:14:7a:9b:30:cb:d5:ce:b2:77:56:fd:62:06:ad:c4:
e3:c9:fc:bb:57:e7:85:be:23:af:ea:7d:ce:f3:71:d6:12:d8:
86:15:cb:37:f5:62:50:65:da:24:b6:d7:80:26:e5:48:eb:f2:
4d:5e:87:6a:c7:d7:26:e5:80:0c:e3:25:fe:cd:31:56:56:17:
8c:9c:e9:a9:f0:11:d6:71:f6:fb:86:4a:76:e5:c1:cd:fa:82:
78:8b:02:b3:8a:c4:7c:ae:11:72:ee:35:46:26:6a:c8:c8:26:
7b:e0:95:ee:6d:19:7c:84:80:53:b4:90:c6:0e:e0:68:3a:e7:
b8:82:2f:d5:fe:9f:15:bf:f2:46:c3:89:e3:56:cf:51:f6:d0:
c6:85:e5:d8:64:41:81:de:a6:38:5e:22:a2:81:1c:b3:0b:e9:
9c:22:a2:47:89:93:80:55:34:a1:76:53:8e:fd:68:2b:41:74:
c4:8f:c5:20:a2:72:61:46:f1:6d:63:68:63:1d:14:58:e3:d5:
e3:95:f0:9e:37:60:84:36:de:76:3a:16:0c:26:10:33:07:22:
17:ad:33:e0:e0:1e:20:79:85:5b:5d:0f:9e:d5:ac:1e:e1:e3:
2b:66:0f:a9:17:15:0c:8b:95:4c:b2:53:c5:8a:17:a6:c4:3a:
37:ff:bf:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:13:57 2026 by rpki-client