Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: U1j+dVlHTywwxL5Z7Kdd5FN3eUGc4HRLSJnqtvMBjk4=
Subject key identifier: 60:9D:A6:26:5F:03:27:90:4E:5D:25:9E:82:6F:48:32:D1:26:1C:7F
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 01A1DB02111106F0EA328F5690CA0B0C2CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1AFD
Signing time: Sat 14 Nov 2026 17:01:48 +0000
Manifest this update: Sat 14 Nov 2026 17:01:48 +0000
Manifest next update: Sun 15 Nov 2026 17:01:48 +0000
Files and hashes: 1: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (hash: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=)
2: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: gKr22fMN2nH5P9a+vIJXwJyG3gO7GtTYe8aVnMrC9Wk=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:02:11:11:06:f0:ea:32:8f:56:90:ca:0b:0c:2c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Nov 14 17:01:48 2026 GMT
Not After : Nov 15 17:01:48 2026 GMT
Subject: CN=609da6265f0327904e5d259e826f4832d1261c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:02:34:c0:33:a4:a1:70:63:b9:35:6b:df:cb:
33:82:c9:09:ab:e6:67:3a:34:25:ec:52:55:21:f4:
a3:5f:e9:8d:e3:05:51:1c:80:49:1d:19:dd:6d:25:
98:36:b6:e1:eb:67:e8:79:fc:66:12:72:a9:b1:80:
1d:55:e4:f5:05:f4:6c:ce:c3:55:50:b9:38:d6:86:
81:c0:b5:18:fb:29:ee:0e:d9:4c:95:ce:34:d3:a9:
03:79:1a:0c:07:f8:d0:6c:bd:c1:8b:ab:e7:f7:7b:
4c:35:ca:d3:ec:1a:b2:d7:5b:a5:d4:2f:45:5c:95:
03:22:2a:6e:72:5d:e6:b3:dc:ac:41:bc:88:68:0e:
af:24:e6:1a:61:98:4e:09:f3:ba:32:0d:67:91:5b:
96:f6:b0:b1:95:86:50:bd:62:6a:90:08:26:b5:3f:
9c:d2:7e:4b:48:8d:b0:28:95:4c:31:f4:e7:84:68:
f0:9d:a0:8d:8a:45:1c:52:d5:7c:5b:29:8a:59:94:
ed:1e:eb:0b:8b:c9:12:f1:68:01:34:df:4a:5b:48:
e6:92:66:92:ee:21:fa:a7:cf:23:33:3b:aa:e4:0f:
72:d0:45:ec:25:c6:11:5c:e2:b0:b0:6d:c2:31:02:
34:c5:40:db:e9:e4:28:b6:81:50:ed:40:c2:64:25:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9D:A6:26:5F:03:27:90:4E:5D:25:9E:82:6F:48:32:D1:26:1C:7F
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2e:31:09:db:61:b2:56:8d:e7:dd:ea:66:f9:e3:0d:78:be:
ba:d2:e2:e5:07:01:1d:47:e2:c0:c9:51:54:94:bc:b8:cf:6a:
b0:24:fe:67:34:eb:bd:05:b2:02:97:97:97:5e:32:66:98:28:
57:30:88:bd:ef:0b:52:19:a5:b7:11:0f:85:ce:9c:0b:84:91:
27:41:c2:66:14:2e:41:a6:30:24:eb:d6:9b:d5:a4:96:00:0f:
b5:2a:9a:95:ee:56:d7:1b:c9:52:e2:1c:20:9b:ea:b0:3e:bb:
8b:f7:b1:1a:5a:27:d6:a9:39:00:1c:91:5f:96:8d:22:ad:6d:
18:93:b0:09:27:ca:23:07:40:18:0d:a8:01:d7:41:4e:e7:b5:
e6:0c:d4:cf:c3:75:fc:19:b1:47:9c:b3:29:18:bc:67:bc:14:
38:73:35:ce:ed:41:d2:cf:d1:52:e7:2b:e2:b9:5a:be:18:4c:
34:bf:cc:23:e9:10:c9:27:d5:bc:3e:38:33:ff:d3:5f:c6:67:
6b:5d:d7:b8:d6:18:fe:2c:38:f3:b1:b3:03:1f:67:3c:e4:20:
2f:59:50:a7:36:ef:dd:cc:b1:bd:e2:50:30:58:8f:c5:bb:61:
9f:97:bf:2e:99:60:51:62:3e:5d:ad:8f:79:ed:44:10:ef:60:
e9:09:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:22 2026 by rpki-client