Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: Fu9nylIuR5YpzgMV2d1P5slkcVwxaVchrJm/m6Cod7g=
Subject key identifier: F1:FC:B6:1E:51:3A:55:CE:7F:37:44:52:69:AC:BB:98:30:24:A6:55
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 01A0EB53B0B3DA51585DCF82C3E6EB93B4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 092D
Signing time: Tue 29 Sep 2026 04:02:05 +0000
Manifest this update: Tue 29 Sep 2026 04:02:05 +0000
Manifest next update: Wed 30 Sep 2026 04:02:05 +0000
Files and hashes: 1: 1-dWw94LOwYVb6Z8yvlC4x7hkhMc.roa (hash: e7q0PiGn+nkXQe803oPBPZRnyfk/0arkshZocK67CGw=)
2: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: gkn51i9aagY/Y2j86zq9tBityYEvEWinRx4XR3BW8/I=)
3: V4jhpHULY3kG-luzllvrbKQbZ9c.roa (hash: EMpkHgy+YsqyHIc2Gv/c4Vt6RakehqzKDgK4RNxTwag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:b0:b3:da:51:58:5d:cf:82:c3:e6:eb:93:b4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Sep 29 04:02:05 2026 GMT
Not After : Sep 30 04:02:05 2026 GMT
Subject: CN=f1fcb61e513a55ce7f37445269acbb983024a655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:93:a7:c6:58:90:4c:09:31:26:46:5a:73:
c1:74:a6:cd:29:77:6a:64:be:35:69:b3:e2:bb:95:
fe:b9:32:8d:c6:ab:67:fc:40:1d:13:5f:37:be:08:
25:42:17:03:0c:08:e5:42:41:b3:d9:80:a0:8c:3b:
ac:cd:7e:55:0c:91:83:74:cc:b5:27:63:9c:a3:0e:
f4:16:26:ae:ce:17:ea:6c:7d:4e:8c:2a:6c:2b:a0:
53:60:37:19:98:02:b0:24:d1:9f:06:cb:27:02:be:
88:5c:fb:70:f9:4a:ea:4e:36:f0:f5:ea:5c:95:f3:
5b:e1:1f:0b:d3:e3:84:f1:52:4e:b3:79:0b:9f:89:
07:42:70:b3:a0:88:d2:cc:75:ee:50:82:1b:ac:ac:
87:ec:25:9c:7e:e8:6a:d2:82:f1:ee:89:38:31:a8:
35:e8:db:98:7c:d6:21:cb:f9:bd:31:f2:99:6a:01:
25:bd:2a:55:56:33:b8:ae:5d:5a:e4:1d:a3:cd:cb:
b2:97:5e:34:a7:b9:ed:f6:b6:60:c9:6d:bb:77:61:
17:88:4a:09:6c:ad:5f:50:c2:35:fe:d5:a0:42:76:
ec:51:ee:b8:67:86:0e:40:fb:03:cc:42:6a:21:5c:
5e:94:26:73:59:9c:b7:cc:2c:25:ac:19:91:62:d4:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FC:B6:1E:51:3A:55:CE:7F:37:44:52:69:AC:BB:98:30:24:A6:55
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a6:01:f1:f7:25:ec:29:11:13:8c:18:9b:04:1f:e1:6f:f1:
a1:91:82:7e:83:2c:d4:ab:34:da:49:4d:ca:eb:56:1e:04:dc:
d8:ee:3a:04:9f:01:45:84:ce:78:45:e2:02:f5:1b:8d:61:85:
ba:e9:67:db:ea:17:9f:60:c1:db:b8:e9:c5:1b:fd:1a:5e:8b:
21:5b:43:81:32:e2:30:07:6d:0d:8b:91:39:d0:a2:b5:4e:b8:
6a:5d:f3:22:6b:09:d0:12:f5:91:2e:f1:8a:89:27:e7:77:4c:
ac:04:a0:95:f3:2a:9a:b6:c7:d6:2d:75:b0:d2:41:f3:59:5f:
38:ad:52:9e:e0:fe:48:f2:53:c9:ac:70:3a:a8:d7:9b:4d:d4:
f7:f5:7f:5b:24:62:f2:82:a1:8a:39:40:00:2a:c7:b3:b1:2e:
a7:6e:d8:78:1f:40:c2:e8:19:f2:14:32:d8:5f:47:d4:65:dc:
20:8e:e5:f7:4a:49:59:a5:f8:7a:42:da:3d:61:91:5f:02:a7:
9b:2c:dd:21:30:fe:b1:5d:f2:04:d2:ea:b2:21:1f:61:90:5c:
e0:65:05:58:e6:c4:b1:ba:55:f7:fe:4a:2b:0f:63:f2:60:10:
20:b0:67:4a:f7:f9:11:11:1f:b8:e6:93:80:9a:af:f0:fd:34:
fd:85:a4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:31:49 2026 by rpki-client