Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
File: Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft (raw, json)
Hash identifier: 4gbvETZDK//6ts3HBoUvDfyVoROBBrcT1Dbna4GiDAM=
Subject key identifier: 07:A1:71:91:28:8D:F6:71:60:13:39:59:16:CC:12:18:54:3A:86:F6
Authority key identifier: 4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
Certificate issuer: /CN=4e6977890273797dfcc4022b90c04617eb1df129
Certificate serial: 01A10DDEDF4E132E08B059B9E4EC7C782BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
Manifest number: 0105
Signing time: Mon 05 Oct 2026 21:01:12 +0000
Manifest this update: Mon 05 Oct 2026 21:01:12 +0000
Manifest next update: Tue 06 Oct 2026 21:01:12 +0000
Files and hashes: 1: 76fuJqCnyM96XEK3XxGjc6ze908.roa (hash: th/ZnBNOEGf6s4sOu5GgwpSyFXSOhHyXMejJbNorthU=)
2: Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl (hash: SkrvZFbkX4IOqsEHNdx+qUNGlNzdP52ENkYWqBIgnbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:de:df:4e:13:2e:08:b0:59:b9:e4:ec:7c:78:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e6977890273797dfcc4022b90c04617eb1df129
Validity
Not Before: Oct 5 21:01:12 2026 GMT
Not After : Oct 6 21:01:12 2026 GMT
Subject: CN=07a17191288df6716013395916cc1218543a86f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:48:0a:87:8b:60:25:9b:73:70:8e:b2:17:fe:
44:52:2c:8d:81:dd:18:8b:51:f7:26:5a:16:b5:08:
7b:95:6b:73:86:3d:0e:61:f9:5c:5b:6a:d5:79:7c:
83:c4:cf:9d:5b:8f:b6:64:c6:8c:d5:d8:d5:ad:fe:
19:69:75:8d:88:8a:a7:a0:15:aa:92:ae:38:2a:b0:
1d:43:b1:08:46:de:0d:0c:84:de:52:32:9f:5a:2b:
b6:83:a5:64:c5:ff:52:3b:d6:19:73:fc:8e:d8:b3:
cc:fe:2c:b0:12:e4:6a:90:47:86:63:07:a8:74:58:
f6:91:54:10:0d:10:72:48:28:2b:55:82:32:dc:f6:
15:e6:3c:c3:54:bb:27:25:98:ec:e5:3d:53:e9:de:
5a:60:72:d1:9c:1f:a3:7c:a3:00:67:84:64:05:18:
bc:26:fa:03:f2:a5:2a:bd:48:1e:65:f4:96:28:12:
56:2d:fe:9d:58:18:96:b2:7d:60:85:14:67:09:63:
12:65:37:31:42:e5:90:d7:6d:fe:ce:aa:4c:28:63:
d1:5b:d0:ef:dd:45:8e:ae:c7:8a:1b:54:bb:b4:a9:
44:0b:5f:0b:79:8f:54:b2:71:26:45:62:37:f7:93:
c4:b8:9f:65:2b:c0:2a:04:bd:66:97:1a:1a:d7:cb:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A1:71:91:28:8D:F6:71:60:13:39:59:16:CC:12:18:54:3A:86:F6
X509v3 Authority Key Identifier:
keyid:4E:69:77:89:02:73:79:7D:FC:C4:02:2B:90:C0:46:17:EB:1D:F1:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tml3iQJzeX38xAIrkMBGF-sd8Sk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/Tml3iQJzeX38xAIrkMBGF-sd8Sk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9b:60:2e:f6:ec:66:26:bb:f4:3f:53:ea:f3:29:a5:35:6e:
51:3f:b6:0d:8b:26:22:39:67:89:ee:39:8a:7b:27:f4:de:cd:
9a:99:cd:b0:7e:e0:33:3a:2e:01:40:71:42:f7:88:47:c8:a1:
a5:b3:ba:92:d6:17:22:75:a4:cd:c1:21:de:76:00:45:25:65:
44:50:fa:2b:a9:bd:2a:0f:4a:14:f5:fc:56:cb:37:8f:96:8e:
b5:e2:be:21:7a:49:20:e6:d6:d3:bc:01:7f:3d:53:70:1f:b8:
76:9f:2e:7a:49:2e:81:24:fc:46:28:27:9b:6d:00:87:13:af:
b5:06:75:cf:89:70:4b:bf:01:3e:43:2a:13:09:c8:33:13:f5:
a7:9f:a4:b9:82:a6:b7:5e:65:93:9b:9d:bf:23:28:26:d8:ef:
56:96:5a:b8:93:1e:71:d5:e5:5e:04:37:a1:6e:f7:e5:61:dd:
cf:ef:40:e5:2c:80:60:b4:0c:5a:ae:9f:ad:32:57:a1:6a:d1:
aa:00:29:f8:75:e1:9e:1e:a8:54:a0:66:d3:7c:ff:f9:f5:a0:
8a:34:f0:2d:e9:3d:c0:f2:6d:95:50:56:63:1a:22:46:93:68:
cd:a3:b6:ce:35:14:3c:19:6a:c6:83:9a:ee:01:00:f2:03:f8:
2a:25:af:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:27:52 2026 by rpki-client