Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
File: TC9Y05SvcD-57w_FN77Q6X23Wo8.mft (raw, json)
Hash identifier: GjzJ2A11zR3vaK3zlZebEVyEh0DMUe/JXKsqolqiZWU=
Subject key identifier: 38:6F:D3:23:87:94:32:C2:CD:A3:FC:7E:0C:C0:16:DE:D9:4A:66:BA
Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Certificate serial: 01A0BEB02CF9069E00EDCC83F76CF2E58DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
Manifest number: 19F7
Signing time: Sun 20 Sep 2026 12:00:11 +0000
Manifest this update: Sun 20 Sep 2026 12:00:11 +0000
Manifest next update: Mon 21 Sep 2026 12:00:11 +0000
Files and hashes: 1: TC9Y05SvcD-57w_FN77Q6X23Wo8.crl (hash: 7gcOBARvmFPjmxExvC8zEFjGHvgKgEW0WI4NupGsIJ0=)
2: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (hash: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:2c:f9:06:9e:00:ed:cc:83:f7:6c:f2:e5:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f
Validity
Not Before: Sep 20 12:00:11 2026 GMT
Not After : Sep 21 12:00:11 2026 GMT
Subject: CN=386fd323879432c2cda3fc7e0cc016ded94a66ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:fa:e9:25:35:15:9e:96:f7:b9:de:fb:35:27:
fe:7a:3c:89:4e:5f:65:ef:b0:e5:2b:e7:4f:e2:42:
25:73:d0:5c:2a:00:3f:83:03:9f:ad:f4:44:39:94:
bd:22:a1:de:25:55:48:e7:27:92:f5:48:65:b8:f7:
67:71:72:14:24:66:e0:dd:df:00:6e:f8:61:b6:ed:
b8:f6:e4:77:0e:ec:d8:62:ef:2f:25:5e:6d:a6:8c:
5f:36:37:73:cf:4f:bb:62:b2:aa:c3:8d:d0:49:05:
51:ba:e0:89:d5:19:de:2c:f1:26:a2:0e:48:5f:4d:
c6:29:31:10:c0:93:95:af:86:ea:2b:34:85:4d:9d:
61:81:c6:5f:de:57:12:fd:f0:ea:cb:71:10:bf:f2:
3a:75:9f:af:c4:d7:7f:38:a7:37:bf:e4:f2:8b:73:
0f:d1:d8:10:21:5c:88:40:99:4f:0b:ca:34:cf:da:
55:07:76:8c:12:da:30:61:56:c2:75:ec:12:ac:6b:
bf:62:c4:ef:09:c7:3e:c4:48:58:cb:ce:9e:0c:c8:
9b:5d:20:e9:ec:4e:79:2a:79:e5:cf:27:57:0e:34:
6b:34:af:ee:5f:db:cf:dd:0c:f7:3b:8a:5a:f2:cb:
87:a1:87:5d:12:68:1c:54:9f:b9:ca:c6:00:c7:72:
06:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6F:D3:23:87:94:32:C2:CD:A3:FC:7E:0C:C0:16:DE:D9:4A:66:BA
X509v3 Authority Key Identifier:
keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:7f:96:05:2b:f0:1d:cd:2b:24:da:1f:36:2f:35:ee:5f:a9:
b1:80:32:a5:6a:91:f5:d2:2d:05:70:7f:16:18:47:07:91:27:
73:97:91:eb:57:e0:97:c2:9f:da:0d:ca:d9:1c:e1:f8:8e:18:
4f:a6:2e:93:a4:41:35:0c:64:67:2e:da:46:03:5f:d0:09:f7:
18:77:57:16:71:45:6a:d2:ff:b6:4e:e0:43:cb:cf:02:c2:1c:
e5:cf:8a:2d:0b:66:9d:c2:f5:eb:05:49:32:86:50:82:de:ce:
53:2e:48:04:57:ca:6b:69:39:92:de:0b:34:a2:6e:42:ca:e1:
76:85:bd:f1:63:d8:aa:6c:6b:e9:c6:18:8c:ca:14:ea:cb:40:
42:16:66:28:14:a1:38:e3:e9:5a:36:2e:ac:52:8b:5b:19:05:
ec:65:84:96:22:6e:92:6f:94:58:2e:6e:7a:a7:fb:3f:e8:03:
80:14:42:b9:31:b5:b3:c3:14:9a:ea:11:10:56:f3:70:4c:f5:
d3:de:67:3b:9e:c9:7f:b7:e3:c2:cd:1f:81:da:9a:f2:94:a7:
85:29:f4:64:5f:19:fc:51:8b:af:e8:f7:36:f9:53:d0:70:cf:
5d:b7:dd:2b:02:0e:82:05:ba:5d:02:b5:23:28:24:5e:82:c3:
f7:75:38:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:56:00 2026 by rpki-client