Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: g8NZU3fDiwvlXIsTLP4B8412IZqxGNk8A4BJ4LwszqE=
Subject key identifier: 4A:B1:12:E5:E4:F8:DF:B3:A2:B4:EF:83:C9:D2:01:66:13:DA:03:D6
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 01A0F34349CD07B14A07EF8DA87370A0AB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1A7F
Signing time: Wed 30 Sep 2026 17:01:08 +0000
Manifest this update: Wed 30 Sep 2026 17:01:08 +0000
Manifest next update: Thu 01 Oct 2026 17:01:08 +0000
Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=)
2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: b/ENIeN3duKje04V1heyU4aKo0t5DxgqSEPwqFqD+M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:43:49:cd:07:b1:4a:07:ef:8d:a8:73:70:a0:ab:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Sep 30 17:01:08 2026 GMT
Not After : Oct 1 17:01:08 2026 GMT
Subject: CN=4ab112e5e4f8dfb3a2b4ef83c9d2016613da03d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:6e:21:ce:df:e0:6b:2b:b6:ff:e3:bd:8c:
62:e5:3b:90:be:76:6e:07:b8:d2:46:b4:29:03:d8:
a6:b6:c1:57:5c:55:27:c2:4f:99:cf:d6:1f:ee:7f:
e2:53:e4:a2:95:eb:35:e4:3d:bb:23:1a:33:61:5a:
7f:c4:fa:72:87:1d:73:6b:cb:a9:59:ab:6b:b8:c4:
1a:b1:b2:d3:4b:b2:6f:07:52:14:be:99:c1:91:91:
18:bf:b4:5a:d5:91:f6:ed:16:fc:20:fb:86:ba:98:
ca:bc:76:a4:92:d5:f1:85:08:71:9f:9c:d7:82:6b:
4e:f8:52:50:d7:54:5a:60:34:2c:f7:df:70:03:10:
80:07:02:17:6d:bc:0a:59:be:5a:0e:f0:20:18:a0:
62:84:f0:d1:3b:73:91:db:87:49:76:16:a3:40:e8:
95:3c:d9:e0:c0:d9:9b:c9:21:49:ea:95:51:04:92:
3c:e3:10:28:c6:4a:12:5e:98:b4:b8:66:23:00:e6:
4e:ab:ba:37:e0:3d:c6:8e:c3:2c:2a:33:7d:94:b8:
dc:c7:8d:40:47:d9:28:f4:a1:85:2c:bd:c5:23:6c:
e9:91:ff:fe:1a:43:74:71:d5:46:ce:6c:a3:c2:fa:
4f:ec:63:63:e1:65:ae:5d:24:61:12:e2:c8:a8:ff:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:12:E5:E4:F8:DF:B3:A2:B4:EF:83:C9:D2:01:66:13:DA:03:D6
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3b:23:ec:0f:2f:71:34:04:0d:f4:f1:e8:5f:8d:09:c0:70:
92:6c:e3:18:e4:a6:8f:7a:59:43:8a:ab:ce:de:73:2d:30:bb:
c9:ce:2c:71:27:55:29:c8:59:4d:3c:e3:8e:e3:19:12:ec:75:
a2:23:df:cd:02:a0:94:7b:aa:4d:8b:23:a3:e0:22:e0:31:a6:
ce:63:fb:80:e8:1c:d7:75:df:29:1a:8c:78:e0:92:35:04:64:
60:6e:e9:09:8a:aa:b6:e3:78:39:12:a5:c8:4b:c4:99:73:a1:
3a:ad:df:f4:23:be:f2:b1:94:25:41:3d:cc:06:53:c7:30:01:
b7:6c:da:91:b9:4a:c3:e6:c3:bb:77:10:73:b3:ed:4b:81:98:
b4:5c:bc:9e:01:1a:d3:0c:65:25:6b:ff:02:d5:60:a8:7f:1a:
86:79:4d:bb:4d:5d:a0:66:cf:2b:75:d2:a4:b1:ec:2e:fc:fb:
f0:27:f0:02:bd:51:c8:b3:85:b1:c8:f6:80:47:00:47:1a:d5:
2f:4b:0f:a6:ed:e1:b5:33:7b:05:bc:46:29:96:df:a3:a3:83:
55:1e:1c:d4:45:d8:1d:1d:33:2f:c7:df:c5:ef:6d:fe:7f:f8:
db:44:98:60:df:31:21:25:b2:8b:98:aa:6e:8d:98:70:35:fc:
1b:88:9d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:36:38 2026 by rpki-client