Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File: TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier: jsPxFOdZY6QP2EnEEAlVSbBw9f4MKYLZBykn7Km80yE=
Subject key identifier: 96:3B:BC:1F:7E:18:91:D3:3A:6E:EB:B4:C7:31:C2:71:25:21:EF:ED
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer: /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial: 01A0EA401489165ED57D23FDA41974F94391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number: 1A80
Signing time: Mon 28 Sep 2026 23:01:03 +0000
Manifest this update: Mon 28 Sep 2026 23:01:03 +0000
Manifest next update: Tue 29 Sep 2026 23:01:03 +0000
Files and hashes: 1: DfRI4dovSnMSIcVz_GFD0L7vBIw.roa (hash: kG8QsSLcBHIkntfvUqxfKD4RZMhBctOildhkIA33eIw=)
2: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: G49irxkkrf5+aItU2FEINhNEi5meCt10PIvK9733s1o=)
3: oE6QS3Q6uaxGz3Cm7YOOUEm6M9s.roa (hash: gHUoKUVYSCToS8vVN5V7q87OQVYzxsOvUwmEfqESOxI=)
4: qSNYJ-9hvnj2oMFvdiXLbxjhOwk.roa (hash: bfBTAvujo01mv5S6EOQahz4Gss8vRe5ZhsQN9X0Csy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:14:89:16:5e:d5:7d:23:fd:a4:19:74:f9:43:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Validity
Not Before: Sep 28 23:01:03 2026 GMT
Not After : Sep 29 23:01:03 2026 GMT
Subject: CN=963bbc1f7e1891d33a6eebb4c731c2712521efed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:71:8c:52:a9:43:dd:af:a7:f4:99:07:b4:
04:9c:ef:43:18:fa:fb:18:f0:1a:f2:8c:0f:90:03:
c2:a7:7d:dd:7c:94:80:d8:bf:52:ab:75:df:c2:df:
86:aa:d6:40:21:a8:f3:32:a8:e3:b8:49:bd:0b:21:
d2:7a:92:2f:0c:ea:7a:bc:38:b8:b3:58:3b:5c:30:
c6:85:15:4e:28:91:34:1c:ee:59:7a:be:81:08:b5:
af:07:82:10:77:ec:2a:a2:73:c7:5c:55:42:43:1e:
a5:ab:8c:61:02:a1:ab:4e:5e:dc:b7:91:61:59:ba:
76:8c:32:29:bd:1d:a7:f7:76:9b:75:3c:40:4b:4c:
3a:cc:32:7e:5c:34:51:6f:6b:d2:fe:87:09:9b:4c:
59:81:38:54:7d:4c:cf:5d:22:32:4e:bc:79:17:de:
fd:ac:8c:f5:53:cb:0e:24:5e:c5:c5:10:77:d4:1c:
00:63:e2:09:2b:ff:dd:59:9e:a2:f9:42:b6:7f:43:
b3:2d:9c:19:72:7a:ed:e0:b4:e5:d6:2e:36:35:0d:
e4:45:e3:86:95:93:b7:86:dd:95:fd:ff:92:04:e6:
6e:b9:29:c8:67:69:5b:f2:8c:87:87:4a:34:0b:c9:
b8:dc:d3:c7:42:dd:ae:b3:15:6e:e6:16:53:a4:58:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:BC:1F:7E:18:91:D3:3A:6E:EB:B4:C7:31:C2:71:25:21:EF:ED
X509v3 Authority Key Identifier:
keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f4:a8:1e:df:01:fb:70:a4:2d:57:c8:74:2f:30:e7:4a:6a:
31:9c:a9:d9:a6:03:d9:75:d5:d1:f8:5c:8c:5f:7f:18:6e:80:
7b:46:40:99:28:c0:a7:4f:dc:81:81:1e:5e:d8:eb:1c:ca:0b:
bd:c2:11:5c:06:0c:a8:6a:4b:2d:1b:14:2a:7a:39:28:b6:1c:
b9:92:31:e4:ce:3c:0d:ce:5e:62:3e:b0:51:97:b8:75:02:29:
bf:f1:b4:43:0d:8d:77:a5:b4:2a:4c:9d:22:bb:ca:1b:62:fe:
79:cb:6b:a3:52:fa:97:76:3d:cf:e3:58:f3:0c:a4:22:05:eb:
ec:8d:ef:2c:c9:5c:ac:57:ee:68:5d:44:19:e9:eb:8e:f6:65:
9a:8e:55:1b:a4:57:0e:1b:ad:b3:36:b1:c4:af:39:9c:2c:72:
77:d8:0f:5a:91:92:f9:de:e9:1c:70:8e:26:f6:f3:12:5b:49:
df:cb:e4:7e:e4:68:b9:93:b7:96:f3:87:13:6d:7d:ea:1a:4b:
b4:6b:83:6f:2b:12:29:d0:7e:13:2d:95:ba:6f:fa:d4:3c:82:
10:e3:da:d9:76:09:2c:97:0d:68:4e:f9:10:92:da:42:38:91:
24:6b:ee:ad:70:06:22:96:c8:26:dc:34:09:10:ff:fb:1d:36:
e1:83:f5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:52 2026 by rpki-client