Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File: TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier: tFE+aVO5H9j6oYpP6jZaYxOpWIAO4AgVt3QlRdcIlgc=
Subject key identifier: C3:30:FD:9E:C6:A7:76:86:F4:F2:08:53:B3:53:8A:E0:57:49:D8:20
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 01A0D0488BE1959300054F8AB5BD950ECAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number: 1A5A
Signing time: Wed 23 Sep 2026 22:00:10 +0000
Manifest this update: Wed 23 Sep 2026 22:00:10 +0000
Manifest next update: Thu 24 Sep 2026 22:00:10 +0000
Files and hashes: 1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
2: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
3: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
4: QzoE7YI2JkwI9mVxwsF8DHIXYGE.roa (hash: 7XDAG6QnwyxT0wvAWUAuUI4m88iqJ1Pi9UntCRyGfgQ=)
5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: 5P7xrYXXbapUAGCo1YJZxfLmCYOuAGhkfc7/9svDxkg=)
6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:8b:e1:95:93:00:05:4f:8a:b5:bd:95:0e:ca:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Sep 23 22:00:10 2026 GMT
Not After : Sep 24 22:00:10 2026 GMT
Subject: CN=c330fd9ec6a77686f4f20853b3538ae05749d820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:45:e5:35:04:19:da:46:cc:50:a1:a4:b5:ff:
52:8d:b5:37:b1:52:b4:9b:b1:64:04:c2:8e:17:ee:
70:bc:b1:ec:5c:77:56:fd:86:04:99:69:04:38:40:
81:71:b0:8a:ee:eb:db:e7:dd:f4:be:38:ce:36:bd:
fc:d0:51:cb:8b:93:81:55:52:fe:b3:99:86:f2:b5:
bb:d0:a6:f2:91:cd:eb:6a:61:f0:86:b1:29:68:c2:
c3:b0:fd:43:46:b4:c7:c2:51:4a:24:e1:9d:ac:a2:
8c:c5:62:98:15:16:be:bf:e2:5e:a0:1a:3d:cf:3d:
77:dd:b3:b2:69:1d:3a:a8:f5:da:61:ed:59:8b:64:
fa:57:ec:48:27:c8:d0:19:31:e4:67:40:a3:48:ff:
08:6f:3c:36:e5:c3:e8:f2:19:d3:9b:91:70:2b:f1:
8b:7f:42:94:b1:8b:92:2f:9b:9d:66:8f:9a:e1:d9:
fc:d2:be:ed:d9:21:f9:e6:33:c8:f7:d4:0c:40:95:
06:0d:18:a9:1a:1f:e6:b5:c7:1c:01:a1:71:99:2e:
35:a5:3c:a9:cc:11:da:ad:c0:c1:04:7f:59:c8:76:
50:02:64:51:10:9c:99:9c:09:e4:e5:b4:ad:1f:df:
c0:65:01:a2:43:cb:f4:43:74:a8:1d:6f:b6:b5:18:
29:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:FD:9E:C6:A7:76:86:F4:F2:08:53:B3:53:8A:E0:57:49:D8:20
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:35:f2:e1:5f:63:fe:1a:db:60:e7:c5:dd:05:1d:ff:89:21:
bb:67:86:34:08:92:d2:38:80:c4:d4:ee:30:5b:89:70:09:f3:
8d:45:a1:42:70:ff:f8:dc:5f:0e:4f:33:86:ea:78:74:b3:46:
79:ca:d1:d7:87:17:ae:19:bc:4b:4a:52:de:a8:f5:a7:09:b1:
9e:8b:51:07:04:75:4e:1a:44:9f:70:bd:cd:a8:46:84:fc:c6:
2c:77:57:e2:52:98:d1:28:c8:d1:2d:95:51:dc:28:ed:3b:4e:
30:3a:3b:8c:5d:49:19:a5:ac:96:49:54:f0:42:a2:94:80:8b:
1c:55:9a:55:de:3d:67:ab:f4:5c:ce:e8:86:c1:17:c6:b5:1e:
eb:c0:d9:40:c5:ab:12:b6:14:a1:54:67:38:16:a3:3d:e4:1e:
ce:fa:4c:1a:1b:bd:1c:bc:7f:76:91:fe:ac:d4:a2:77:d9:34:
c1:ea:4b:b2:31:37:99:0a:fa:47:9b:58:36:f0:2a:aa:f1:cb:
e1:88:60:b8:26:5c:cb:3e:83:ae:15:c5:e5:42:10:dd:f6:28:
ec:49:18:06:52:fa:ff:d5:c6:f3:49:0b:20:8e:d5:be:b8:7e:
84:46:74:eb:92:59:a7:6d:12:f6:a7:c2:07:05:14:85:eb:1b:
a2:cc:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:40:43 2026 by rpki-client