Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: dsVQV+nKq1OOFksWwQff6QlUWaf2quc/K1wSLOJka98=
Subject key identifier: C3:89:B1:9A:84:C0:2F:27:07:99:73:A8:F0:9B:C1:AB:A5:4C:C6:C2
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 01A114F344A728E3A1922B9DBAF1B42009D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1A8D
Signing time: Wed 07 Oct 2026 06:00:49 +0000
Manifest this update: Wed 07 Oct 2026 06:00:49 +0000
Manifest next update: Thu 08 Oct 2026 06:00:49 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: DMuHDFPLlvvRuj/CA6F6bWWmfd4ivqxDXvPF+vXdRyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:f3:44:a7:28:e3:a1:92:2b:9d:ba:f1:b4:20:09:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Oct 7 06:00:49 2026 GMT
Not After : Oct 8 06:00:49 2026 GMT
Subject: CN=c389b19a84c02f27079973a8f09bc1aba54cc6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:75:7c:17:42:a3:ed:1c:19:10:7e:77:d3:0e:
43:42:96:78:57:aa:c1:0d:14:95:cd:f6:b9:01:ca:
46:25:4b:0c:0d:95:e6:5c:3d:8e:e3:ec:91:c5:42:
f1:6d:e4:14:7a:3f:7f:0b:a8:5d:3d:89:79:ba:7a:
e7:12:57:e3:fe:66:e9:16:dd:a3:da:9e:87:f5:45:
7c:7f:b9:a1:17:5c:a0:54:ec:44:b5:70:8f:d9:92:
24:ee:c8:a6:07:83:14:0a:cf:37:48:88:3d:d7:7a:
b3:5d:05:93:b2:82:cc:e1:63:af:80:e5:da:84:6f:
a4:d0:d6:56:8f:73:27:22:dd:ff:1e:63:15:b1:72:
26:85:74:d4:2b:2d:0c:18:46:b2:50:f3:67:9c:82:
be:01:6e:03:cb:be:8c:ca:3c:29:5e:1b:e9:f4:00:
67:25:16:05:25:64:c2:4f:45:cc:98:b3:d9:e9:05:
70:80:57:60:6c:a2:df:d1:06:49:36:4c:3d:a2:0e:
0b:6b:d0:63:2a:e7:ea:8b:b1:cf:a8:62:62:0e:2e:
a8:57:73:7e:df:1a:f1:4d:70:d3:ec:d4:04:4e:a9:
61:2c:cb:92:39:54:cc:59:fd:30:1c:62:4d:d7:9a:
89:c2:ad:aa:e6:4c:0f:5d:b6:1b:00:bb:36:19:16:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:B1:9A:84:C0:2F:27:07:99:73:A8:F0:9B:C1:AB:A5:4C:C6:C2
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:5e:08:27:55:52:8c:52:d9:be:b9:39:50:8e:8d:e4:80:6f:
66:bd:85:d8:17:79:27:7c:f5:20:8f:5d:eb:b9:c2:22:68:67:
8a:86:2f:c0:bb:1b:66:8d:19:34:3e:5c:db:ef:62:53:76:7e:
44:d4:35:2c:9c:f3:12:88:46:1b:c5:02:a3:42:d3:06:7d:df:
16:e3:65:60:6d:ac:bf:b3:da:59:b5:26:77:e7:11:71:99:62:
4d:30:04:39:92:9f:93:9d:99:62:8d:0e:7a:4c:8c:fe:41:bd:
ed:34:05:b6:01:f1:cb:8d:18:db:c7:8b:49:9c:38:1d:77:c6:
4d:6f:cf:e8:50:8b:94:d9:93:6b:57:12:92:ef:9a:af:95:9a:
03:c6:4b:8f:a1:5b:64:65:ce:97:33:8d:b5:19:e2:ab:56:71:
1b:1a:49:9a:f9:21:fc:ca:59:ee:7e:53:c3:ec:08:a5:56:2c:
ef:4e:b6:50:25:ea:0d:c3:42:fe:10:d0:96:7a:35:df:cd:f9:
dd:7d:f8:b1:e0:43:65:a3:5a:4c:c3:cc:eb:74:99:ac:87:20:
e5:f8:b2:00:a7:88:35:5b:ac:4b:38:32:55:8e:82:e2:6b:cf:
7e:65:d9:79:0a:4e:2f:2b:8f:6c:3c:68:6f:17:06:93:ed:95:
5e:69:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 18:47:17 2026 by rpki-client