Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: yHRjJ6Z3+M0bsIJBVAoAn0DnnYljQtKnZB4hmbJ9DpM=
Subject key identifier: B7:BC:86:53:62:B7:DA:37:3F:8D:BE:69:0C:81:0D:E3:B0:8F:F3:4E
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 01A0F90F0947AD3859856192961C7A6DA10B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 20:01:47 +0000
Manifest this update: Thu 01 Oct 2026 20:01:47 +0000
Manifest next update: Fri 02 Oct 2026 20:01:47 +0000
Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=)
2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: F8mc8VMbpXSpEdtsjjswg0CxDr/VpUsHGLSL0QGitjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0f:09:47:ad:38:59:85:61:92:96:1c:7a:6d:a1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Oct 1 20:01:47 2026 GMT
Not After : Oct 2 20:01:47 2026 GMT
Subject: CN=b7bc865362b7da373f8dbe690c810de3b08ff34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:51:a5:3d:5b:64:78:ae:0f:45:f0:f4:21:
b9:f6:32:df:e1:43:b3:32:d5:cb:b5:ef:19:c9:46:
9d:66:f7:d3:e4:c6:d3:49:f2:9d:26:52:92:5d:e7:
6a:96:95:6e:14:7a:6d:00:84:08:48:78:6a:4e:ff:
bc:86:40:e5:27:70:0f:54:30:3f:eb:68:f8:ae:72:
20:42:f2:15:1d:b5:2c:5b:18:3a:96:a8:49:76:5f:
21:24:c3:6d:2f:31:cd:83:d0:d2:a4:59:25:a9:10:
de:5b:22:49:71:1e:cd:ac:db:2e:68:1e:7f:b6:54:
1e:fa:62:1a:1d:6c:12:cf:89:a3:78:eb:20:00:14:
ba:a2:6b:42:68:26:90:76:47:b4:1b:b3:72:f6:ac:
bc:53:00:ad:ac:df:3e:cc:1b:2e:6e:ec:1a:69:46:
95:77:d3:bc:64:ab:72:82:e6:70:64:1e:ce:0c:4c:
1d:f0:7c:9f:71:3e:2c:3f:3f:d2:d7:21:13:01:02:
bc:6f:46:ea:2a:64:cc:a7:b5:f2:09:f9:b0:80:4f:
9e:0e:c4:42:e0:c8:6f:b9:dd:e2:cf:c6:e6:ea:94:
11:61:61:cb:36:a7:74:bd:c1:19:66:2c:59:60:06:
81:e1:92:e3:c1:5f:cc:38:78:07:16:04:b5:62:2c:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:86:53:62:B7:DA:37:3F:8D:BE:69:0C:81:0D:E3:B0:8F:F3:4E
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e2:50:1d:38:47:61:7a:f0:87:c4:94:7a:e3:33:f8:3a:23:
4f:8d:b6:6c:86:c6:88:b0:62:48:e2:53:5f:49:ae:ac:9a:60:
18:4e:19:91:b2:4d:83:c2:b1:9a:40:98:87:3f:d3:fe:b6:16:
5e:f5:d3:a7:27:65:30:a8:01:3f:b8:db:50:c9:0b:48:8b:dd:
06:63:7a:87:79:7c:6c:46:47:0b:a8:67:e3:de:9e:0f:c0:02:
f0:f9:ef:6f:f0:4d:94:82:8f:b5:0b:f5:e3:93:80:c6:a6:38:
94:5d:75:e7:3f:58:03:85:3c:71:56:4f:ff:b9:62:b3:05:66:
b1:7e:e2:79:86:df:cf:1f:87:3a:7d:43:eb:67:8a:d2:aa:92:
9f:60:79:63:e8:71:ea:05:2e:c2:f6:37:98:ee:d0:98:ab:c4:
51:32:91:b6:d3:e6:8b:dc:a4:fc:fa:81:78:49:21:9b:67:4f:
9b:51:11:4d:ac:3b:c8:7d:74:35:30:16:41:db:59:14:4d:20:
1b:a8:0e:96:93:03:ab:78:2a:59:90:33:8e:21:cb:d6:0d:e9:
5e:bc:61:0f:50:9a:ec:ff:bd:85:67:ab:f3:aa:0c:32:84:1a:
8d:c1:4c:eb:eb:bd:42:1d:d8:a1:20:1f:df:97:89:d3:c8:89:
f7:5f:4b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 01:11:31 2026 by rpki-client