Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: 4qs0hMx6fxlvjGei4ushh+2VYM4VLhISFM2eehMByms=
Subject key identifier: 9C:CC:5F:F9:ED:E5:A5:5F:9D:80:DE:DB:3F:90:EC:7F:BF:94:86:48
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 01A0D45D7F1FAC0FC31DE8D443909EA76B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0C68
Signing time: Thu 24 Sep 2026 17:01:32 +0000
Manifest this update: Thu 24 Sep 2026 17:01:32 +0000
Manifest next update: Fri 25 Sep 2026 17:01:32 +0000
Files and hashes: 1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: wpszYq7Md++1g6w4JRURAMRUZwJicOE6NMGldQwHkDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:7f:1f:ac:0f:c3:1d:e8:d4:43:90:9e:a7:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Sep 24 17:01:32 2026 GMT
Not After : Sep 25 17:01:32 2026 GMT
Subject: CN=9ccc5ff9ede5a55f9d80dedb3f90ec7fbf948648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:0b:6f:30:0c:0a:62:42:2c:f4:c1:c0:ba:
97:92:0b:25:a8:30:05:51:f8:42:72:6e:3e:74:ff:
2d:80:f9:cd:1f:b7:23:79:10:4e:c1:9f:4f:3a:ca:
6b:1b:95:32:e9:48:a2:c8:18:ec:2d:a3:c9:13:5a:
4c:ac:d6:59:41:e1:be:f2:44:a0:07:80:30:02:9e:
96:c0:20:6c:df:5a:99:66:67:13:7f:e2:51:70:77:
9f:5a:4c:dc:6f:79:40:c4:7a:0f:cf:49:d8:a7:f7:
1c:94:c4:88:e9:19:02:ff:8b:70:f0:30:a2:39:38:
4b:7a:03:43:27:14:5c:72:2f:16:1f:e4:a2:5c:65:
86:de:72:fe:1a:b5:65:be:55:75:b5:46:75:4a:1b:
2a:bd:19:be:76:e9:79:68:d6:30:e2:8f:88:f9:a5:
20:df:21:b3:df:0b:49:aa:42:ac:14:a7:99:84:06:
70:97:d5:a7:05:6e:d8:70:8d:aa:5e:76:55:6e:44:
9e:f9:68:9e:50:53:99:6b:56:e4:d9:ff:76:1d:4a:
50:8a:67:73:5a:47:6f:e3:fe:45:d4:dc:fd:fc:b4:
02:8d:6a:0e:b6:ba:f9:39:f9:7f:36:eb:c2:e1:d8:
3b:2b:77:ab:80:a3:b3:48:60:4e:d3:47:76:00:1d:
29:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CC:5F:F9:ED:E5:A5:5F:9D:80:DE:DB:3F:90:EC:7F:BF:94:86:48
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:98:d0:61:6a:80:d3:8a:43:d4:33:1b:9c:98:4f:f2:2a:e6:
e8:b7:fc:c8:23:62:f1:05:0a:dd:9b:6e:40:30:6b:27:f8:df:
44:5f:03:1f:a2:82:90:a8:27:7c:1a:0c:01:f8:5c:25:06:4b:
1a:f7:3c:f1:c9:ec:11:fe:8f:cc:81:dd:22:d2:a2:27:1d:6e:
89:91:21:da:51:2b:a5:57:a7:b2:99:f6:ce:1e:e5:c9:80:bb:
52:dd:46:a9:c0:57:db:c7:95:f7:9a:1f:47:79:ec:dc:26:09:
22:a5:1d:92:99:6d:1f:6a:d6:25:21:40:04:fe:86:8f:e3:de:
61:7b:cb:3d:b4:d9:06:87:65:53:b2:64:a1:d1:e2:e9:8f:62:
99:ba:e5:69:e0:06:b9:af:fb:32:0f:ed:ff:5f:93:95:68:70:
e6:e8:d1:79:38:8c:e4:57:22:29:04:08:c4:5b:32:7d:a2:38:
d5:40:b1:d3:6d:34:20:52:9e:7a:21:05:0f:f7:bc:26:a6:6b:
ec:b7:7f:a6:47:19:56:bd:bb:76:82:f4:41:41:1e:b7:13:06:
80:ec:ee:65:4b:ce:dc:25:12:dd:ef:40:90:cc:99:c9:b3:3f:
a0:13:ea:78:f4:7c:ea:83:89:eb:50:ea:88:3f:56:c9:fe:e4:
2b:7b:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:33:17 2026 by rpki-client