Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: LQTARH/eC2H61jL+iRJNzn6TtVd8oX0EAjN7Jko8OQY=
Subject key identifier: 4E:C3:E6:B2:C2:44:6B:70:95:FE:EC:B8:70:91:F9:D2:65:56:AA:42
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 01A0D5DEB2CAD4BA3F5C14430CE7A96BC210
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 0CCF
Signing time: Fri 25 Sep 2026 00:02:16 +0000
Manifest this update: Fri 25 Sep 2026 00:02:16 +0000
Manifest next update: Sat 26 Sep 2026 00:02:16 +0000
Files and hashes: 1: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (hash: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ=)
2: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: wKaPEXCOXm1iqUoZ8ZKZRsp9mn471DbrvL8dYJe3cIU=)
3: ttNXspnBYOBylc9inYKHFOll37k.roa (hash: RLGAiX60Eg9+/H6cmMZLT7RRPoDY5hArHpeHbk6ZQf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:b2:ca:d4:ba:3f:5c:14:43:0c:e7:a9:6b:c2:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Sep 25 00:02:16 2026 GMT
Not After : Sep 26 00:02:16 2026 GMT
Subject: CN=4ec3e6b2c2446b7095feecb87091f9d26556aa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:27:80:ec:cf:8b:1a:27:64:d7:90:8f:d6:9a:
b8:c7:82:93:65:0d:2f:d1:b0:25:71:4e:f5:c6:6a:
03:74:88:0d:9a:b2:45:64:f0:1d:d3:a4:e2:c0:18:
37:59:f5:bd:ca:3d:b7:a5:d8:09:c4:09:25:fe:70:
97:6e:34:8d:b9:38:70:18:aa:ed:7e:c0:ec:43:ee:
6d:7b:7e:26:d5:db:71:dc:28:02:f3:a1:6c:13:f5:
61:d3:c0:1a:c0:70:15:8c:73:ac:b4:27:2b:33:d6:
e7:73:aa:b5:be:09:01:b8:75:4f:d4:11:b0:52:0e:
e2:14:01:96:ee:fc:dc:de:c5:86:00:ba:93:6a:a3:
62:14:06:8f:9e:0c:11:b2:02:4c:bf:d2:ab:9f:a8:
54:e6:d6:7a:f1:a9:9c:b3:38:5e:0a:ce:c8:d9:bc:
c8:d2:54:77:fa:75:a4:b7:53:4d:02:26:24:c5:74:
b3:48:d9:2b:d6:3f:a6:02:6d:ab:60:e1:d6:b7:83:
c2:b5:80:ca:e9:ac:a3:7f:7c:03:ee:44:86:66:f6:
54:75:87:c4:ec:3f:a0:e6:0f:8e:7b:4b:9d:f5:c2:
a6:43:e4:58:34:a2:c0:66:15:05:8b:e6:20:e9:68:
d2:19:a8:f9:b1:5c:9d:d7:21:44:1a:a0:14:ef:b2:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C3:E6:B2:C2:44:6B:70:95:FE:EC:B8:70:91:F9:D2:65:56:AA:42
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:19:94:af:de:c6:66:23:5e:c0:14:4c:20:9a:cf:cf:4f:9a:
4e:3a:a2:3e:8e:0f:de:84:a8:a3:d7:71:a8:f6:cb:f7:16:8e:
0b:46:3c:92:68:b2:07:2a:3e:6d:1c:c1:da:7f:8d:63:a7:24:
76:c0:fc:b9:ac:7c:69:f3:79:a7:57:88:82:df:2b:fa:44:8f:
22:13:be:18:24:1b:db:45:55:ce:92:c7:f4:dd:4c:e7:78:5d:
3e:df:9e:23:3e:dc:d0:9e:e6:cb:6b:ae:3d:11:a0:2d:1e:b0:
c5:12:0d:d6:07:d0:5a:04:46:dd:1b:5c:f3:a4:62:94:44:c0:
a0:33:ec:e3:6e:6e:a5:1a:82:ed:9b:67:84:42:6d:8e:3c:ab:
80:6a:7f:e1:8f:e3:ef:37:17:0c:f5:d5:87:1c:5e:bc:e6:99:
de:88:c1:0e:f8:71:12:53:68:01:4c:b6:ae:30:06:e1:69:ef:
b0:cf:80:eb:54:ee:e3:61:fa:2d:b7:5e:6d:c6:52:33:15:69:
38:e6:19:b5:4d:89:3f:0c:fa:fd:97:ed:b6:64:62:29:70:f7:
4e:96:75:13:6d:26:fb:11:ff:30:1b:93:a8:5f:83:cd:53:84:
fe:97:e5:6e:93:fe:e1:23:28:84:e4:9d:7e:55:96:94:a7:97:
97:68:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:32:50 2026 by rpki-client