Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier: F1/tS74q8FeKLi+p4Gh6jyIofFp0SflOYd/EPeDvM5k=
Subject key identifier: 12:4D:D5:61:94:69:2E:4C:BA:E2:FC:20:51:36:37:08:12:55:BE:52
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 01A0CA469F3AB290D2EC186AF8A28F8C37BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number: 1A7D
Signing time: Tue 22 Sep 2026 18:00:20 +0000
Manifest this update: Tue 22 Sep 2026 18:00:20 +0000
Manifest next update: Wed 23 Sep 2026 18:00:20 +0000
Files and hashes: 1: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (hash: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA=)
2: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (hash: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw=)
3: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (hash: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc=)
4: IM3Sgf6n85MJ0JQ5zz3x973QECY.roa (hash: RhRSY8YyTjB3zZVDnbDfxNa5aiv4sYD92KtaLzLLg4A=)
5: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: WBS88+D3JG81bsLfM2VuqYOGCSklHPCZQxf/lCzRJVQ=)
6: klIt1NStPul9M_ZMJsdKutacUMM.roa (hash: Bg/ud8VNM1Ut9qaDX4Qy7kRtx9Mw6PMvkK9VqDfBpa8=)
7: mgPMgmO1MnQ710BsaC9GgiUOCyo.roa (hash: cgp58YJUOJU4z8ygbBfP3ejTeYQRwCdmEzfUU9kXBS8=)
8: uFbpcpxOgBzckCeqBpe0f1VxLpw.asa (hash: O4ZnTQf3lD21aw5Srb0h7jxe1YX3MHi6Ea8yrm+gujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:9f:3a:b2:90:d2:ec:18:6a:f8:a2:8f:8c:37:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Sep 22 18:00:20 2026 GMT
Not After : Sep 23 18:00:20 2026 GMT
Subject: CN=124dd56194692e4cbae2fc20513637081255be52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:33:eb:2e:81:05:00:f9:c8:bf:9c:64:ec:ea:
c4:d8:c5:db:47:48:2b:63:5d:ea:94:76:8a:48:41:
83:eb:b2:82:98:69:b8:70:0b:21:1c:fe:c8:3e:23:
fb:53:44:2c:e7:39:94:09:53:1f:f7:6a:37:f5:46:
a5:53:a7:ff:27:77:f4:99:3d:1b:3a:32:6f:de:13:
99:4f:2c:49:2d:44:79:dd:82:ed:32:29:80:f4:e1:
91:d6:40:55:27:c6:37:6f:20:58:7a:64:cd:44:d9:
75:27:19:fd:bb:dd:0e:a5:f7:eb:c5:b3:b4:80:a4:
06:bc:1e:68:6a:bc:37:b4:ac:c5:ca:0c:23:91:f9:
9b:e5:0d:53:7a:ae:54:c5:c4:c6:1d:fc:5f:51:2a:
4e:a9:f7:69:77:a2:e0:fa:47:17:3f:42:97:48:96:
27:37:57:a1:10:de:de:6e:95:cc:28:2b:0f:ab:57:
6b:1a:5a:45:ae:82:9a:12:ea:25:5c:08:ce:b6:0e:
1c:16:70:97:05:11:a5:ab:42:8e:48:f7:75:49:92:
e3:24:52:40:d9:14:40:e8:b8:cd:f8:b6:5e:4a:a9:
77:1d:a6:40:09:0e:a7:52:10:3f:ba:4a:35:a8:5a:
ba:ca:de:e0:3b:db:f2:de:42:a0:3e:c3:24:86:e6:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:D5:61:94:69:2E:4C:BA:E2:FC:20:51:36:37:08:12:55:BE:52
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:16:a4:ca:d5:d6:e1:8a:f4:df:9a:5a:fa:7f:b4:53:75:9f:
76:3f:77:97:e1:3d:3a:3a:cf:37:c0:eb:f9:7d:d6:de:37:1e:
2a:2c:75:49:93:94:3d:28:da:02:45:ad:86:8f:c8:a6:e9:64:
08:c4:96:b9:b2:d0:d4:b1:78:d4:09:01:0e:3d:46:c4:19:83:
7e:bf:53:39:28:cc:4f:11:e5:84:52:b4:f7:15:cf:c0:b7:69:
f8:d7:b8:c1:ad:de:2c:ca:fe:eb:fc:bb:47:08:74:d9:be:7c:
ff:26:7b:bd:1c:25:32:33:1d:42:30:92:ae:a8:c8:ca:e2:53:
76:68:02:e0:01:8c:ec:ab:97:3f:76:b3:24:bb:63:de:06:3b:
22:7b:68:df:86:4a:0b:7d:1a:39:1a:ac:ea:9f:6e:5d:7d:08:
aa:3b:03:22:d8:a4:ee:f3:17:6f:a9:a3:4e:6d:dc:e7:8a:10:
bc:ea:62:28:ea:fd:ad:e6:6a:5c:2a:9c:18:f2:df:57:53:50:
98:64:b8:10:a7:9c:2a:8b:d3:e8:db:e0:5f:34:99:51:a3:4c:
0b:5c:a2:3b:80:86:84:3d:0a:7e:28:a5:4f:79:6f:a9:eb:a0:
45:ce:71:53:38:4b:68:a3:52:f3:22:5a:87:52:39:a6:da:74:
83:aa:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:50 2026 by rpki-client