Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: 9KrXnKc2SbJ12Lt1yKkoxaYOIjmI0NqmB6/HHOc7yw8=
Subject key identifier: BD:15:94:EB:49:62:1A:61:02:5B:78:CD:E2:30:43:7F:25:F9:64:0D
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 01A0DA5F470694DD042AD5E0E97143E7CCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 06F9
Signing time: Fri 25 Sep 2026 21:01:12 +0000
Manifest this update: Fri 25 Sep 2026 21:01:12 +0000
Manifest next update: Sat 26 Sep 2026 21:01:12 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: pjCU558jwEZ1cAJwr3IsYDjce/ABc6P9u3MbrlhZA3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:47:06:94:dd:04:2a:d5:e0:e9:71:43:e7:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Sep 25 21:01:12 2026 GMT
Not After : Sep 26 21:01:12 2026 GMT
Subject: CN=bd1594eb49621a61025b78cde230437f25f9640d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:5f:ae:96:33:ce:85:e1:59:78:cc:47:27:
c4:a2:6a:24:21:8e:a1:b7:82:ea:d8:7b:15:75:fc:
42:29:d8:70:37:da:70:a6:85:8e:b5:33:89:0a:4e:
ab:6a:b0:9d:dd:26:0a:b6:6e:f4:61:5c:71:ec:3c:
83:a1:7e:00:b7:98:2e:4f:49:43:45:54:88:aa:0d:
f2:90:a0:c8:b5:c1:f0:ca:eb:da:cc:ad:6a:eb:12:
ed:e0:74:af:ff:14:c1:ac:1b:2b:7c:6d:1b:2c:8f:
02:81:87:3b:65:61:53:6d:ed:df:b1:41:ff:cb:b6:
d0:32:21:6e:df:bb:04:c6:29:bd:7d:03:19:e4:01:
5e:9e:8c:24:32:cb:13:0d:60:e4:06:ee:1a:34:d6:
8a:86:ec:83:67:63:ae:b1:ce:43:0a:25:15:b5:aa:
f1:28:ce:be:da:0f:f4:ed:8c:3a:46:de:e9:92:60:
3a:17:c6:10:86:de:e7:a4:07:af:af:24:28:31:74:
55:1b:e7:ba:95:0c:65:b3:4b:c0:eb:93:b3:06:9b:
2a:34:f5:29:51:e1:49:49:91:d5:43:01:e2:da:ff:
f0:b0:31:17:ef:5b:54:58:b4:79:39:9e:7d:0c:f1:
3c:5f:02:3f:41:ae:ea:f3:31:24:f9:97:d1:39:e6:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:94:EB:49:62:1A:61:02:5B:78:CD:E2:30:43:7F:25:F9:64:0D
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c7:6f:c7:85:a3:24:d6:07:07:a9:c4:ba:bb:1e:06:c7:0d:
31:28:96:f5:00:91:29:43:63:d8:00:44:e1:ba:17:f0:b5:f4:
ad:f8:53:dd:45:62:67:59:21:df:09:b0:f3:4d:25:1d:9c:8e:
87:51:cb:df:53:83:ee:81:70:1d:db:d0:f9:26:33:2f:47:84:
bd:dc:2f:db:45:c8:d9:be:90:c5:57:c4:2c:22:0f:50:fc:85:
b5:d0:72:27:1b:21:e6:b4:ba:1a:05:7c:a1:bb:fe:7d:ea:06:
db:11:30:72:7d:fb:82:34:97:98:bd:8c:dc:f3:07:8c:e7:fe:
4d:80:91:62:1b:e6:23:02:d4:4d:8c:0c:65:a8:37:a2:7b:3a:
65:64:6f:bb:de:bd:6f:61:4e:e0:05:87:a7:fc:77:1e:72:47:
0e:1b:b1:91:e2:ca:a6:92:d6:6d:9a:be:27:61:7f:d6:77:9f:
64:c5:11:d0:a5:f1:47:83:3f:4e:13:29:bf:01:be:d8:e6:63:
dd:fb:05:4f:89:7b:3e:e5:50:bd:49:30:58:cf:78:19:9d:ac:
2e:b9:b8:dc:68:29:3c:35:6e:6e:2f:4c:49:34:17:c5:74:46:
5d:b6:8e:4e:02:2e:37:51:a7:fb:3c:bb:e1:2e:01:2e:0a:f3:
2b:b2:54:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:24:58 2026 by rpki-client