Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: GRim6TRl4cIKSrsiqgidzwgUruVOHFbK/ZADD1YJUd4=
Subject key identifier: DC:8D:19:39:1D:F2:7E:4E:A2:64:FE:96:2E:A5:C0:6A:0B:62:20:87
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 01A134B5B51A7E8E86B29A644C42926B0FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 10:01:25 +0000
Manifest this update: Tue 13 Oct 2026 10:01:25 +0000
Manifest next update: Wed 14 Oct 2026 10:01:25 +0000
Files and hashes: 1: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (hash: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0=)
2: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: J5zPj3etPZywMqQo8hWq5F/5W/Vhi3UEwFENmLMZC1w=)
3: dCeEUKq5kmdnMuFfpYvwjIyzv9w.roa (hash: 2QyCh0B58qW05lbELCp+HEAzhlYTZ0tv3CzPpDu8Nro=)
4: g2R1TiS3jxFeB9U54WChv60i8Dc.roa (hash: Fmq9gKwDLBwoIVihbRm78ylA/Jays/PNcsKOWbH91nY=)
5: pbffqVIcAirnQONXIVnNslpP08U.roa (hash: 5VbKEPwbiJ5zZD1DvoWLqE1iDiZFdWOMUbRQcOz5CGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:b5:b5:1a:7e:8e:86:b2:9a:64:4c:42:92:6b:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Oct 13 10:01:25 2026 GMT
Not After : Oct 14 10:01:25 2026 GMT
Subject: CN=dc8d19391df27e4ea264fe962ea5c06a0b622087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2c:66:a3:fc:fe:f4:6c:4b:ea:4b:d4:b1:22:
65:39:81:6f:20:0b:1e:56:eb:9b:d9:78:05:a1:bc:
99:d9:43:eb:3e:a3:64:0f:8c:0c:a5:c3:43:48:1c:
5b:46:db:53:14:76:73:05:1f:99:f4:ff:c4:82:d8:
9b:94:a1:99:d1:1d:b9:59:aa:ea:c1:10:38:2b:ab:
5f:ad:4a:c5:90:73:54:43:00:a4:2e:f8:2d:1a:5f:
6b:39:9e:35:20:f3:69:c0:78:21:8c:78:99:eb:1f:
5f:eb:c8:0e:60:53:50:05:d3:3a:b9:95:e3:93:35:
6c:78:a1:42:25:bd:3a:75:e3:42:37:76:3f:00:75:
4a:38:e2:53:5b:dd:ed:93:1b:5a:0f:94:63:81:e3:
d9:be:8e:24:48:e2:08:68:de:90:9a:3b:70:72:2d:
19:61:7d:24:64:b7:70:47:05:11:53:d6:30:4a:a2:
87:54:49:7c:37:89:5a:9e:99:80:a0:a4:1c:6d:a0:
0a:47:d6:85:b0:0d:c8:e6:ef:f1:e0:50:9e:48:f6:
56:e3:fe:b7:6d:91:2b:12:d2:f4:c4:75:b4:9c:bf:
ab:e1:17:70:2d:ab:4f:7d:ff:1e:11:94:e4:dc:93:
55:ca:3c:b6:5f:f3:c4:b6:1e:7f:7b:8a:fa:29:f6:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:19:39:1D:F2:7E:4E:A2:64:FE:96:2E:A5:C0:6A:0B:62:20:87
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dd:65:6a:13:f9:6d:0e:c7:bf:30:c2:2d:67:86:6e:41:9d:
af:1a:3e:88:b2:1c:0e:4e:f4:9b:c4:1e:17:8d:11:c6:15:5b:
1c:02:d8:14:74:60:d7:7a:4d:73:6a:3a:a4:d0:a0:61:4a:a0:
d8:77:08:90:a7:31:5b:7f:f9:9d:be:42:b5:10:31:52:d4:d5:
70:c8:3c:8c:9e:fe:96:f8:12:84:29:ab:fc:7c:97:a7:78:52:
bf:97:f3:f4:52:75:55:4f:c9:81:a1:70:4d:f8:66:0f:bf:4c:
12:de:37:5c:b6:31:9e:8e:aa:f6:ec:b1:c0:12:8a:c6:4b:3e:
f2:7e:c2:6b:c8:f4:04:c4:2c:e0:2f:66:15:ed:a6:1b:95:6d:
a6:c1:e5:83:77:d0:a1:16:39:31:12:d3:e8:14:90:da:1e:d0:
83:09:15:c6:ac:93:0d:55:55:59:a3:44:5e:b7:d9:71:10:9b:
06:f7:d0:4f:0f:31:3e:59:3c:22:32:cd:42:17:a6:fa:f1:4d:
5c:57:57:e2:71:f1:a3:ae:bb:b8:fd:99:28:81:7f:79:29:7e:
c7:c2:d5:1b:38:cb:f5:96:a7:96:3d:d2:7f:db:59:99:65:9c:
3b:58:aa:fd:31:e0:e1:78:c5:50:ea:98:3a:59:af:f3:b2:6b:
a5:f1:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:53:59 2026 by rpki-client