Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File: TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier: maTTqmXwb9f3b9hDZjIH5QnLly9rmjRZ9P59UWHxmW0=
Subject key identifier: 9A:64:E3:51:D1:C6:A6:CF:B0:08:A2:E3:F6:80:C0:29:A3:93:BA:51
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01A0E061F79D9D07922D523C1F1B7E9DD4C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number: 1A0F
Signing time: Sun 27 Sep 2026 01:01:51 +0000
Manifest this update: Sun 27 Sep 2026 01:01:51 +0000
Manifest next update: Mon 28 Sep 2026 01:01:51 +0000
Files and hashes: 1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: juP5JacUrRPzROX1Cy1RIIwvanMGrgvotF1Xf2HMT1k=)
2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:f7:9d:9d:07:92:2d:52:3c:1f:1b:7e:9d:d4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Sep 27 01:01:51 2026 GMT
Not After : Sep 28 01:01:51 2026 GMT
Subject: CN=9a64e351d1c6a6cfb008a2e3f680c029a393ba51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d5:90:53:9e:77:ad:a4:d6:81:16:90:a2:90:
3e:38:87:b9:c8:51:80:6a:09:f8:93:8e:51:f3:51:
b6:07:c0:b3:cd:4d:c6:61:03:5f:9a:13:5e:dd:69:
a0:5b:3d:e8:97:47:29:92:c9:45:be:93:43:27:a4:
5e:42:39:fc:23:84:b0:3c:d1:36:f1:21:26:d9:14:
d6:c8:9a:79:cb:2d:b3:94:f0:2f:0e:01:45:9f:27:
a5:cc:29:98:db:8f:02:b3:13:2c:3f:e8:7f:be:9d:
0c:be:4d:4f:d5:d4:a4:0a:8c:8c:17:19:5b:40:f7:
b3:ac:a9:a4:83:ca:a9:f2:05:97:a0:07:13:27:f0:
ef:eb:15:17:1e:83:dd:9b:2c:d0:ee:e9:33:2d:83:
a7:f0:75:1a:3d:88:11:fd:a5:17:a2:48:8a:01:93:
f1:a6:0d:1f:25:90:96:c5:62:3e:77:58:23:7b:44:
3a:4a:1a:f1:27:27:ba:95:0d:1c:6b:ff:72:17:9d:
29:83:6f:73:c1:c1:69:1b:e9:67:45:fa:ad:2b:9a:
8e:be:a2:f8:5f:f7:ff:8b:a8:3f:5e:c3:3d:da:50:
21:f8:6c:59:a6:53:76:51:0a:d9:e1:7b:58:2b:a5:
49:3d:ef:9d:a8:7e:89:c9:a5:8f:c5:7f:c2:5f:0b:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:64:E3:51:D1:C6:A6:CF:B0:08:A2:E3:F6:80:C0:29:A3:93:BA:51
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:11:8a:5d:6b:60:04:55:e5:01:e4:4b:51:4c:59:d6:e9:2a:
29:3f:d3:b3:09:94:fd:17:18:90:59:00:5e:f6:1c:ee:f4:e8:
e7:46:5d:39:4b:c7:24:80:55:13:98:67:d5:28:f6:bf:45:28:
4d:1d:87:50:2a:ca:d2:4b:d0:87:ae:7c:2e:30:d8:cb:71:69:
bb:fd:48:2c:12:82:df:8d:0f:b3:5b:94:36:85:c1:4a:65:1c:
f5:98:33:c0:bb:98:69:4c:17:6e:46:e4:49:62:af:70:77:11:
de:6d:16:e2:f8:0b:8f:4c:de:02:b7:2e:01:92:cc:2f:37:5f:
99:6f:8a:7e:f7:ac:bd:d1:a9:64:d8:65:90:9c:a1:1b:5a:a4:
bc:fe:4f:c2:8b:28:74:6c:68:0b:07:b7:be:d6:81:5c:82:ad:
84:49:30:c0:69:55:3e:e6:ee:73:f1:ca:2b:38:c2:2e:2a:11:
c8:e4:ba:d2:92:f0:5a:50:42:cd:bd:a5:06:df:0a:c6:e2:66:
86:cc:0d:ae:9a:57:42:04:8e:7e:88:e8:18:93:55:bb:f8:20:
74:a6:b8:69:40:0c:c2:7b:03:b4:cc:2f:4e:5d:fd:0b:cc:9d:
95:2d:06:91:6f:8b:82:3f:1f:51:10:b6:a4:6f:ff:19:c7:1b:
a3:72:a4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:19 2026 by rpki-client