Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: qhEtv3ZwA6gbnc0qaTT3sTnWukRb8MZ0YNW8Gd7NqOE=
Subject key identifier: 17:EB:82:78:29:25:C7:7D:C8:4A:51:24:57:4C:64:07:AC:08:40:F5
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 01A0F29EBFB1B5D412657A9A4AF204B1E613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 08D9
Signing time: Wed 30 Sep 2026 14:01:24 +0000
Manifest this update: Wed 30 Sep 2026 14:01:24 +0000
Manifest next update: Thu 01 Oct 2026 14:01:24 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: s9Su6/pnIwfVrzVbb6RMyTBgKgbj7mkmX8jzvF16r+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:bf:b1:b5:d4:12:65:7a:9a:4a:f2:04:b1:e6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Sep 30 14:01:24 2026 GMT
Not After : Oct 1 14:01:24 2026 GMT
Subject: CN=17eb82782925c77dc84a5124574c6407ac0840f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:61:79:b9:d4:55:79:26:29:92:24:ad:57:e8:
3a:f5:b1:c8:46:81:62:cb:c0:1f:e5:bf:0c:06:8a:
9c:cf:b9:be:de:6c:e6:34:62:0d:01:0a:64:b3:da:
0d:d4:d1:29:86:37:f0:af:15:8d:24:ac:e8:ee:e4:
8b:cd:2b:34:51:46:79:e0:bf:08:bc:56:73:10:ec:
05:b0:83:1a:31:d8:3b:1c:30:e6:46:76:ce:ad:31:
2c:c3:84:3b:1e:c4:0f:74:4e:4d:29:d2:4f:75:1c:
d4:d5:e0:ea:51:1c:e4:8d:e1:19:4f:db:4b:f9:eb:
db:1c:95:d2:ba:d7:cc:ca:e9:a0:e3:71:5a:10:55:
52:3a:bf:75:3b:1f:d5:8d:5d:54:9d:9f:ab:fd:85:
3f:8b:c1:cc:10:38:a9:e5:94:56:96:28:73:95:8c:
2a:79:6c:d8:8f:26:f6:d3:04:d4:2a:be:cb:cb:82:
97:c8:a8:48:e4:48:99:f1:2b:d2:8f:0c:1e:d6:26:
b5:38:dd:f7:13:2c:68:e9:a2:99:90:65:9b:31:ac:
5c:d8:1a:44:40:a6:f8:1f:a6:13:8d:bb:f8:69:73:
f6:47:b9:a2:0f:e6:f5:42:7d:ce:57:70:8b:c6:fd:
04:b3:ca:ce:93:02:6d:e5:70:60:16:4a:0c:e5:3f:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EB:82:78:29:25:C7:7D:C8:4A:51:24:57:4C:64:07:AC:08:40:F5
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:98:6e:8f:f3:3e:74:86:ee:70:fe:a4:9d:49:9b:09:18:cc:
61:cb:b5:e7:0a:bd:3d:a9:6b:a3:6f:ca:40:bc:40:93:6c:41:
b3:62:bd:5f:b8:a2:0a:a6:ec:ed:73:57:cf:b7:7a:46:20:c7:
df:5c:05:c0:63:8c:03:ff:c5:39:ad:c8:ea:aa:23:1a:3a:ca:
a1:6c:8f:b0:c4:c7:c9:9a:21:8f:c9:1a:5d:89:a7:58:25:51:
4c:21:fc:02:93:3f:fb:af:46:4b:e0:c1:d9:47:82:b0:17:db:
b3:06:75:b1:6a:c3:8c:02:56:57:50:de:15:f9:a9:b1:aa:da:
a3:5b:5f:74:02:82:5b:5c:77:ff:23:3e:87:47:ba:e6:22:27:
48:de:6c:a0:b3:d5:48:49:03:fb:43:b8:da:a5:f0:e4:22:fa:
69:bf:fa:8b:0c:d0:86:84:d8:0c:09:7e:83:c6:a3:cd:25:e5:
a1:96:66:b7:d4:a3:3f:a7:e3:e2:bb:2e:cb:40:d4:34:fd:48:
c7:2a:f2:e1:64:f0:aa:ea:a1:61:66:9b:39:ff:1c:bb:50:a7:
10:25:c5:a0:f5:fa:c9:6f:9e:2b:58:88:d8:90:d5:94:1d:47:
79:9a:0b:a5:41:8f:95:a1:a7:49:bf:5c:08:a1:d1:90:ab:be:
a2:c9:79:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDynr+xtdQSZXqaSvIEseYTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzQ3ODdiODBhYjQ4MDFhYjYyYjFiZGJmYjI4ZTA2ZDMw
Y2RmNmEwHhcNMjYwOTMwMTQwMTI0WhcNMjYxMDAxMTQwMTI0WjAzMTEwLwYDVQQD
EygxN2ViODI3ODI5MjVjNzdkYzg0YTUxMjQ1NzRjNjQwN2FjMDg0MGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GF5udRVeSYpkiStV+g69bHIRoFi
y8Af5b8MBoqcz7m+3mzmNGINAQpks9oN1NEphjfwrxWNJKzo7uSLzSs0UUZ54L8I
vFZzEOwFsIMaMdg7HDDmRnbOrTEsw4Q7HsQPdE5NKdJPdRzU1eDqURzkjeEZT9tL
+evbHJXSutfMyumg43FaEFVSOr91Ox/VjV1UnZ+r/YU/i8HMEDip5ZRWlihzlYwq
eWzYjyb20wTUKr7Ly4KXyKhI5EiZ8SvSjwwe1ia1ON33Eyxo6aKZkGWbMaxc2BpE
QKb4H6YTjbv4aXP2R7miD+b1Qn3OV3CLxv0Es8rOkwJt5XBgFkoM5T+nCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfrgngpJcd9yEpRJFdMZAesCED1MB8GA1UdIwQY
MBaAFLXEeHuAq0gBq2Kxvb+yjgbTDN9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAt
ZmY2YTljZGU2MzM1LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kOWQzYzktZjE5NC00YjI2LThmMTAtZmY2YTljZGU2MzM1
LzEvdGNSNGU0Q3JTQUdyWXJHOXY3S09CdE1NMzJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZhuj/M+
dIbucP6knUmbCRjMYcu15wq9Palro2/KQLxAk2xBs2K9X7iiCqbs7XNXz7d6RiDH
31wFwGOMA//FOa3I6qojGjrKoWyPsMTHyZohj8kaXYmnWCVRTCH8ApM/+69GS+DB
2UeCsBfbswZ1sWrDjAJWV1DeFfmpsarao1tfdAKCW1x3/yM+h0e65iInSN5soLPV
SEkD+0O42qXw5CL6ab/6iwzQhoTYDAl+g8ajzSXloZZmt9SjP6fj4rsuy0DUNP1I
xyry4WTwquqhYWabOf8cu1CnECXFoPX6yW+eK1iI2JDVlB1HeZoLpUGPlaGnSb9c
CKHRkKu+osl5lw==
-----END CERTIFICATE-----
Generated at Wed Sep 30 21:29:45 2026 by rpki-client