Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: aa4NZVVz7l1RrMBII05RectcH8zrYn0vOPVusxQYjYc=
Subject key identifier: 91:14:88:75:1E:FC:77:4C:D9:79:BC:16:34:60:66:4D:78:0D:5B:D9
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0D7279FDC7A6518D3341979A74DF6826A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 1293
Signing time: Fri 25 Sep 2026 06:01:33 +0000
Manifest this update: Fri 25 Sep 2026 06:01:33 +0000
Manifest next update: Sat 26 Sep 2026 06:01:33 +0000
Files and hashes: 1: 0W6WQIzjDcN2QynfAKLOrpSzOkM.roa (hash: 4m2Zfu1qr19e5D1S2lHAxMiYJoXvAY42AGwXDavycio=)
2: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=)
3: KD1T37rBD1mdbuhwYzQ3lu95Qdg.roa (hash: u5ZlddFSl4jtgRZ+O1bJZW7EJNoYKmcnlz1h7PQrlfQ=)
4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=)
5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=)
6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: oMx8lf0wfpWJaQvsYNiuU0pUnse9HlEZ7iSPokA2UxU=)
7: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=)
8: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=)
9: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:9f:dc:7a:65:18:d3:34:19:79:a7:4d:f6:82:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 25 06:01:33 2026 GMT
Not After : Sep 26 06:01:33 2026 GMT
Subject: CN=911488751efc774cd979bc163460664d780d5bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:37:30:75:7a:ae:1e:17:78:40:91:c7:22:
30:ad:71:15:f6:4c:c5:14:03:fe:a2:9b:95:ee:ae:
c9:58:28:9b:6f:77:d4:72:40:76:65:40:34:38:b2:
ec:cc:ab:db:aa:40:c6:c0:cb:e2:de:49:88:89:7c:
3c:fb:f0:c7:99:af:d6:dd:e7:8c:ee:18:a6:81:28:
87:93:e6:e7:cb:e9:3e:f3:09:b8:e9:1e:0c:8a:f8:
61:a7:d0:fd:f1:5c:f6:e6:68:f5:4f:69:78:bc:0a:
ad:8f:f0:2a:92:20:07:e5:33:e0:0c:7f:ce:76:91:
7d:02:67:15:3f:05:a2:c5:7e:4d:37:5d:ab:7a:79:
6c:f0:78:fb:aa:0e:ae:9b:4c:7d:b1:9d:90:b6:20:
fa:52:7d:2f:08:f3:ad:d9:35:f9:5b:65:0f:5e:3b:
fd:79:ab:92:70:10:2e:ed:a7:7b:5f:ff:5a:ff:f1:
9d:87:c8:e0:48:7e:60:7d:da:4f:fa:9c:38:b0:7a:
71:66:26:73:fa:1b:2b:11:7a:06:fc:cb:40:90:84:
23:32:15:df:36:da:68:c9:9c:90:a5:a8:41:39:92:
75:71:33:fc:92:d3:cd:bd:a5:b6:51:70:65:ac:f4:
0e:ad:16:8a:5a:c5:40:52:1d:53:cc:8d:77:33:65:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:14:88:75:1E:FC:77:4C:D9:79:BC:16:34:60:66:4D:78:0D:5B:D9
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1d:52:87:34:b1:27:d2:d8:2d:c5:0c:77:56:d3:ee:9a:1b:
9c:ba:bf:c1:5e:7d:ab:4f:0f:6f:c6:3c:88:a4:13:2b:bd:62:
4b:05:e2:4b:2d:6c:49:d4:a4:2c:91:27:40:4e:26:9c:00:2e:
18:92:28:3f:0f:f6:e5:0a:55:32:b1:cc:f3:56:1c:a4:23:51:
22:d1:2e:a8:17:bc:08:6b:28:d1:18:de:17:28:c4:38:33:b5:
b4:9c:ed:2d:24:ec:e9:bd:16:4d:e7:27:6b:b5:4f:da:49:45:
59:2a:8f:a1:4e:0c:43:0a:4d:93:56:22:af:9c:d8:4c:ed:3f:
c9:4b:f9:2c:ce:bb:b8:78:ec:08:2a:a3:15:3f:7c:b6:fd:27:
80:79:c3:ca:89:ff:9e:ea:9d:d6:79:74:4f:51:58:9f:86:03:
4c:3a:1b:70:fa:1c:ea:10:98:91:a8:e0:72:bb:a7:95:9d:e5:
08:7b:18:d6:c3:1c:03:ad:92:85:7d:25:b0:45:0c:04:27:d9:
9f:0d:ab:bc:2a:af:14:47:1c:d9:dd:33:63:81:c7:0a:de:68:
ab:dc:eb:22:33:9a:89:6d:cc:37:0f:58:68:73:d5:00:de:ce:
32:a8:bb:d8:69:6e:ce:a5:2f:73:fc:31:26:c7:66:92:09:f6:
52:36:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:10:05 2026 by rpki-client