Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: QdiER9N0iXjZyzXFG3xXz8jp26fz0yJ/vN/PM+x2nG0=
Subject key identifier: 09:E3:58:88:6C:9B:5E:27:E8:FC:AA:25:D9:E7:03:C5:4D:AD:B8:7E
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0DB0425D7AADC0F1F9228B34F85EA561D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 1295
Signing time: Sat 26 Sep 2026 00:01:17 +0000
Manifest this update: Sat 26 Sep 2026 00:01:17 +0000
Manifest next update: Sun 27 Sep 2026 00:01:17 +0000
Files and hashes: 1: 0W6WQIzjDcN2QynfAKLOrpSzOkM.roa (hash: 4m2Zfu1qr19e5D1S2lHAxMiYJoXvAY42AGwXDavycio=)
2: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=)
3: KD1T37rBD1mdbuhwYzQ3lu95Qdg.roa (hash: u5ZlddFSl4jtgRZ+O1bJZW7EJNoYKmcnlz1h7PQrlfQ=)
4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=)
5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=)
6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: 2dlq+MjjeF2nkUqEuDNo0ZKbd7qKeuI2bVX+My9mJfc=)
7: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=)
8: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=)
9: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:25:d7:aa:dc:0f:1f:92:28:b3:4f:85:ea:56:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 26 00:01:17 2026 GMT
Not After : Sep 27 00:01:17 2026 GMT
Subject: CN=09e358886c9b5e27e8fcaa25d9e703c54dadb87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:23:69:d0:9c:1a:3b:70:9e:83:04:eb:64:
ba:e5:5c:82:44:a5:6c:33:15:14:f7:29:0c:01:97:
67:5b:8a:61:79:3e:72:4e:2e:7f:18:bc:6a:86:2d:
f3:83:3a:19:83:0d:74:4d:06:6a:5d:5b:20:70:cd:
8a:d6:55:62:9c:72:63:bf:7d:07:ab:d7:e0:7c:a0:
b6:ea:e3:9a:a8:ad:1a:a4:7c:94:6a:8a:a2:dc:94:
d8:09:66:41:57:8f:57:a1:58:2d:d3:44:6f:93:23:
c4:2b:60:e9:2a:bc:0f:ea:3f:5a:87:14:33:0d:80:
1e:24:f7:6b:4a:9e:26:61:d5:b3:19:60:7b:7f:97:
bd:71:71:d8:01:0b:44:76:23:44:b6:c3:eb:ba:9a:
c9:2d:6b:d2:8c:fe:25:74:55:07:c2:01:fd:ed:c2:
3f:23:ce:a8:8a:81:f1:32:0d:d6:81:b0:f3:67:13:
f0:ad:2f:53:92:25:78:c1:78:c2:c5:c5:e5:74:a7:
df:da:82:90:93:9c:04:f1:58:bc:b3:76:e2:e1:6e:
c0:40:4c:60:51:7c:bc:80:6d:12:ba:44:67:4c:f6:
3a:30:4f:29:84:73:27:3c:1e:2a:ac:31:f0:2b:59:
22:21:fa:4a:ce:f1:b9:71:2a:a4:94:f5:36:55:12:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:58:88:6C:9B:5E:27:E8:FC:AA:25:D9:E7:03:C5:4D:AD:B8:7E
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e6:b2:4a:da:16:0b:39:17:f5:3e:f7:2e:f3:63:c7:01:b7:
bb:18:91:3e:d7:4d:bb:d3:c4:68:db:6a:c6:7d:19:91:72:69:
71:86:ed:06:1a:4a:e6:18:32:72:8f:25:87:9a:eb:57:7b:ea:
cb:fc:16:4f:7c:76:27:c1:27:a8:8f:0f:83:e6:d4:b1:60:f1:
3b:82:fe:75:6d:bc:7a:15:8b:d6:21:2f:73:ac:09:03:4d:8b:
ef:43:e6:9a:5a:ac:98:40:8b:43:67:4d:1a:70:0f:2d:b7:8e:
8f:5f:1b:77:9d:d2:25:e2:bf:5b:61:a9:a6:b2:e5:bc:85:35:
4b:6a:34:67:1e:cf:cf:86:0c:6a:ce:48:fb:fc:ea:bb:51:c3:
86:d2:5a:f6:75:40:11:2b:81:ca:7e:c7:09:71:aa:2d:48:e3:
17:35:d7:8f:e1:92:79:e7:44:0c:e6:d9:f2:f5:0c:48:41:82:
9e:cd:ad:11:ac:e8:9d:44:01:c4:33:13:00:a3:d8:e2:6e:41:
75:5d:01:ab:97:e0:fc:e4:87:0d:a2:30:da:61:39:14:17:f1:
63:d2:e6:79:66:59:da:71:73:20:ad:58:86:2c:e2:15:dc:db:
3f:ac:ee:9a:d2:67:ab:f8:0c:b2:cc:c0:62:36:91:47:b4:0c:
b9:d4:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:37:06 2026 by rpki-client