Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: K3tAuV3M9+7500CalcvEcCWhCG3V2jgFoUx1+pD0Rs8=
Subject key identifier: 37:B7:DB:D9:6F:AA:FB:08:48:C7:02:25:2A:28:3F:2B:F9:78:F1:C2
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 01A0D2DED1E9764A05220EC8BF4DFACE1CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 10:03:32 +0000
Manifest this update: Thu 24 Sep 2026 10:03:32 +0000
Manifest next update: Fri 25 Sep 2026 10:03:32 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: 510rrvis2cUFMiC4WkSk6YToikcjQRc6agCLVxL3Ntk=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:d1:e9:76:4a:05:22:0e:c8:bf:4d:fa:ce:1c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Sep 24 10:03:32 2026 GMT
Not After : Sep 25 10:03:32 2026 GMT
Subject: CN=37b7dbd96faafb0848c702252a283f2bf978f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:25:81:1d:cf:5f:d5:3a:3d:2a:9e:48:1a:
77:12:db:b5:55:19:74:2c:19:93:07:69:1a:86:b4:
27:b0:a7:c4:7d:56:f5:26:ff:d6:d1:0b:a9:e3:c3:
fe:88:83:7b:ab:d5:01:2f:9d:0a:0a:95:8f:3b:6c:
68:50:23:8d:d9:ba:c5:47:83:eb:51:f6:a6:a0:21:
26:14:48:a8:dc:c6:c3:c0:08:94:2c:30:97:e5:78:
8c:be:ab:40:8a:1d:9c:83:62:d0:c1:7a:08:79:7e:
9f:a6:d9:c6:20:67:a1:39:7f:5e:f7:e8:f9:16:8e:
d5:ae:91:8a:1a:eb:42:07:27:8d:33:cb:d8:73:9d:
3f:62:af:18:5f:d9:50:65:68:19:a4:69:5f:e5:c2:
45:ff:e6:ff:a7:e0:dc:8d:f4:19:3b:0f:19:cd:91:
23:5c:ed:c0:4f:3d:fd:c7:87:2e:b3:a9:1b:fe:ae:
ae:19:81:0e:f3:e7:42:d5:20:42:72:79:aa:8e:f6:
5b:84:29:5e:86:b3:27:99:bf:ad:90:71:52:f2:f6:
cc:3f:23:77:ab:b2:ec:68:f8:82:92:12:04:be:33:
70:82:3f:6e:f7:91:27:90:ef:7d:1f:3b:2e:ba:4d:
2b:b7:27:ed:89:f2:76:eb:e0:1b:08:9a:82:33:e3:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B7:DB:D9:6F:AA:FB:08:48:C7:02:25:2A:28:3F:2B:F9:78:F1:C2
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:c0:2e:3d:4e:5f:ef:6a:69:b5:4d:96:ee:cf:de:4c:96:
dd:c4:89:f7:0f:7e:79:b5:1b:92:bf:61:ef:c0:c0:65:47:9f:
41:b5:75:1f:f8:bf:4a:c7:1a:c3:f6:e3:4f:05:b3:5b:74:8b:
62:ab:fb:95:fa:ca:13:c4:4f:d2:08:42:ca:de:c0:3f:6c:1c:
d9:63:9a:e3:68:38:e3:0a:99:82:f8:4a:2f:dd:15:6f:d2:42:
f3:89:00:4a:2e:af:e0:38:9d:23:7a:95:bf:32:44:9b:c6:e9:
e3:09:3c:86:c4:3e:42:a9:70:ed:e4:72:8b:9a:48:3d:36:3e:
28:f1:20:1d:40:c6:06:d3:e9:d6:79:57:f3:a9:8e:b8:ea:2b:
8b:68:86:6c:d6:af:1a:11:16:d3:ed:70:6b:00:d9:5b:e3:13:
b5:41:fa:4e:cc:bc:eb:39:b9:61:2a:ec:84:69:0d:16:e0:b9:
50:c9:e3:b1:c1:a8:fa:e6:88:73:8b:65:2e:b6:89:75:28:56:
44:88:6f:42:6d:22:cd:30:3c:ee:d5:9f:2c:d6:15:9b:7a:a4:
a8:4b:1e:99:58:6b:a2:d3:71:65:b2:15:84:2e:0e:d4:8b:89:
40:fa:df:83:c8:f6:e5:a7:7d:47:a1:36:ae:7a:99:04:ab:88:
56:1e:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:07:07 2026 by rpki-client