Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: RK793Y43LM3jVto348R1gPR0EwKzspl5rErJx9Sbj9Q=
Subject key identifier: 1D:36:17:CB:6D:F0:E9:39:B9:8A:2A:AD:84:D5:CA:CF:3A:DB:4D:3E
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 01A0DBE03CDBE61808C1A62EFE116105E589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 04:01:40 +0000
Manifest this update: Sat 26 Sep 2026 04:01:40 +0000
Manifest next update: Sun 27 Sep 2026 04:01:40 +0000
Files and hashes: 1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: Is/FVbYqfs4+8v9z6Kpi9YY/f5lHEj/lOVbpt9Vt4eg=)
4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:3c:db:e6:18:08:c1:a6:2e:fe:11:61:05:e5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Sep 26 04:01:40 2026 GMT
Not After : Sep 27 04:01:40 2026 GMT
Subject: CN=1d3617cb6df0e939b98a2aad84d5cacf3adb4d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:11:02:47:96:e3:02:c5:5f:fd:a3:24:47:
aa:2a:d4:c1:9e:7b:04:85:12:6c:d4:2c:b1:68:5a:
25:8b:22:8b:ef:f8:9f:5f:4f:cc:a1:fc:0a:81:55:
58:e7:30:10:35:26:9e:99:3e:01:ad:11:76:8c:54:
ab:8d:00:99:20:8a:f3:88:8c:fe:da:4c:48:ef:b3:
51:35:24:7d:bd:6d:1c:fa:fb:80:6e:45:c9:55:c9:
13:43:53:63:4f:a2:64:68:65:47:15:85:fb:f0:b4:
33:c9:4b:8e:52:b5:28:01:5e:e7:58:25:f2:83:0d:
51:1e:06:6c:50:38:a3:91:81:3f:b1:70:4d:6a:ff:
b9:bd:ae:62:46:7a:9e:a7:c0:de:2d:ef:c7:5c:3a:
11:43:11:c8:17:8c:82:29:9f:3c:82:c3:0e:88:90:
96:c3:da:3b:c6:5d:08:df:37:e8:e1:ac:36:32:29:
33:9d:a7:83:ab:78:b4:ba:e7:47:15:db:5d:c7:51:
d5:92:65:6d:7a:17:fa:b9:2e:93:36:ca:55:bc:b3:
3f:64:c3:00:4c:76:67:da:c9:13:5f:e8:18:b9:82:
65:33:c8:20:94:69:f0:6f:9c:c5:6e:89:d9:64:59:
51:28:ca:ce:90:a8:ab:e9:3e:4e:37:d5:2c:3c:13:
91:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:36:17:CB:6D:F0:E9:39:B9:8A:2A:AD:84:D5:CA:CF:3A:DB:4D:3E
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:47:d6:32:8d:d3:86:06:a2:01:32:9d:38:dc:be:4d:bc:50:
1c:90:9f:78:d3:e9:fd:71:f5:c0:b0:16:1b:f8:5c:ad:dd:79:
ba:e4:a2:61:06:55:cf:ab:6d:12:57:69:55:5d:48:4d:b5:99:
52:db:3f:c5:60:50:ed:2e:ce:71:0a:06:ff:1a:23:5c:5c:d3:
7b:44:10:05:58:ba:e7:25:04:95:cb:65:b5:1d:89:ab:c3:ee:
97:b2:3a:75:c9:68:ba:e2:6f:9d:2d:6d:c6:e5:3a:96:94:a8:
cd:a1:fc:66:70:8a:73:c1:a3:45:3c:41:cc:2a:31:3c:b1:c2:
fe:c3:83:8a:3a:ef:c1:9a:b7:4b:5d:11:35:55:c3:ef:19:e0:
90:93:a9:fa:77:67:f9:40:4d:f0:6b:70:fd:b7:96:96:3f:8b:
b9:e3:71:ae:13:ed:38:c8:20:37:f8:60:8b:06:a5:0c:53:db:
0b:40:a7:a4:5d:72:5b:fe:2a:87:46:41:3d:59:3c:f5:89:ae:
f5:a9:1f:b5:a7:85:97:d9:01:0b:81:01:8d:09:98:d9:78:41:
80:af:1a:c8:71:65:a5:80:4b:3f:57:20:10:93:8a:3a:85:eb:
98:d5:65:66:0b:42:b5:e5:f4:95:6f:57:a4:23:96:81:c2:a5:
a4:fc:3b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:16:25 2026 by rpki-client