Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: mb/Rib+3DHvFqXm2kcwUigARGEFV/rFtCqqp+ayngY8=
Subject key identifier: 07:D1:CE:4A:69:A8:2A:71:25:8A:15:6B:62:A0:4D:D4:D3:AC:58:82
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01A1DF4CB0D94F837C327A62CC9075DE4BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0FAE
Signing time: Sun 15 Nov 2026 13:01:47 +0000
Manifest this update: Sun 15 Nov 2026 13:01:47 +0000
Manifest next update: Mon 16 Nov 2026 13:01:47 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: 7om3+oEliPfLV2NvakUQZk2Y152SCLV61BkJxD8/d9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:b0:d9:4f:83:7c:32:7a:62:cc:90:75:de:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Nov 15 13:01:47 2026 GMT
Not After : Nov 16 13:01:47 2026 GMT
Subject: CN=07d1ce4a69a82a71258a156b62a04dd4d3ac5882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:52:aa:33:bf:a7:1d:ce:99:29:57:80:3f:e7:
13:fd:45:0d:2d:c1:30:24:f2:74:f4:28:79:13:c0:
d3:c3:a7:48:bf:bc:c1:f5:84:7a:8b:11:62:a9:b6:
95:1e:94:dc:8b:15:a5:a5:03:03:ec:e4:5b:b9:7a:
83:d5:d0:ed:d4:bc:7e:d2:67:1d:f8:60:88:6a:a3:
a0:6d:c0:2a:4f:a9:9a:16:64:b8:26:97:fd:58:07:
a9:75:59:54:4a:4e:bd:b5:de:ca:7d:8a:5e:0f:00:
07:82:c6:db:35:e9:99:78:c8:bd:4b:66:16:09:88:
ad:0c:60:05:19:6d:80:a1:a2:2f:b6:18:bc:7e:f7:
08:04:63:57:d3:d4:22:69:78:33:69:a6:62:d9:f1:
55:de:35:fd:fd:26:b8:d2:01:b2:97:f8:10:36:f4:
89:e5:3d:1e:58:43:c0:1b:f7:7f:db:ba:6b:d7:03:
24:31:37:72:34:e5:ea:c0:18:28:c2:5d:60:a5:5b:
ec:73:91:79:a9:5b:f4:38:2b:bf:30:c9:e3:ec:d6:
cc:be:72:9b:85:eb:3f:81:cb:8a:b2:40:09:b1:78:
2a:5f:44:0e:66:fa:7b:33:d4:20:cb:55:0d:58:59:
fe:29:2d:2c:a4:39:96:41:55:eb:52:62:1a:04:c1:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D1:CE:4A:69:A8:2A:71:25:8A:15:6B:62:A0:4D:D4:D3:AC:58:82
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:18:57:9f:43:0c:f0:fd:89:3b:92:85:7e:69:13:4e:29:9b:
db:b5:2c:ec:c1:d3:da:ec:5a:8b:7a:7a:32:bd:fe:56:4d:69:
0c:98:91:f2:9e:59:c5:81:58:b8:8b:02:3a:f0:46:7a:c5:e6:
7d:9c:39:8c:e0:f7:27:f8:09:33:cf:b9:ec:25:97:38:8e:1f:
af:64:b0:c4:e9:c1:4b:95:c5:61:7e:ba:75:a1:a5:03:af:27:
04:1d:a9:42:09:44:b5:8a:e9:29:f2:09:86:00:f1:05:9c:84:
e7:9e:e2:22:31:75:c5:03:39:4a:b5:08:6d:13:62:6a:6a:0b:
f2:97:88:27:5d:7c:4d:57:60:38:78:da:d6:5a:71:f1:85:32:
2c:a0:8a:15:74:bf:87:96:19:d3:c5:9c:6d:18:07:7f:56:d3:
5a:fd:50:4b:d4:52:18:6a:fc:b0:50:dd:31:a9:18:a9:0b:10:
6d:6a:26:17:0a:74:24:6b:cb:cb:62:64:b5:a5:50:92:7e:23:
d7:9d:56:b2:16:e5:24:f8:0d:cc:83:2d:ae:49:3a:f4:a2:ec:
f9:69:b2:91:56:0b:84:e9:6f:42:c4:58:02:0e:69:3b:89:21:
92:70:9e:f0:2f:47:6b:e6:8c:b1:7a:ca:9e:16:d0:2b:95:fc:
a0:e2:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:34:13 2026 by rpki-client