Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: ZSMSEx46zyqjeAVaH01zGS9DEadw7VD9tEGUujdQy5c=
Subject key identifier: 0E:32:4B:7E:11:74:89:B4:A9:60:C5:E4:AB:54:79:FB:27:EB:E8:8A
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 01A0D3B90171594F00C26925BE113BB6E4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 14:01:52 +0000
Manifest this update: Thu 24 Sep 2026 14:01:52 +0000
Manifest next update: Fri 25 Sep 2026 14:01:52 +0000
Files and hashes: 1: IvfRGdnfN7_UPGAiz9QzeIqr6I8.roa (hash: ht/PdnItSCVuCn0LFXjdxW5Jjp/nTLMvvbH6aoSlok0=)
2: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: O4H3D7k3GMU9lilFFHjOMDH1/k3mr5VTW5d+253F7tQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b9:01:71:59:4f:00:c2:69:25:be:11:3b:b6:e4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Sep 24 14:01:52 2026 GMT
Not After : Sep 25 14:01:52 2026 GMT
Subject: CN=0e324b7e117489b4a960c5e4ab5479fb27ebe88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:43:a6:60:d6:1e:d1:73:b3:c2:a6:e2:65:
e3:31:b0:36:3a:a3:a6:32:97:3b:e4:97:4e:4a:1f:
78:a5:61:cf:a3:93:3b:41:ee:8a:c6:73:d7:44:9e:
22:d1:9c:5c:ca:6e:35:49:33:e4:9b:74:63:70:47:
c7:c1:e2:0e:74:60:4a:2f:bb:63:dd:c4:3d:90:24:
6c:25:f6:17:a4:fa:df:c1:60:24:df:34:fb:41:cf:
e5:de:46:90:8e:ca:83:9f:1a:69:cf:29:7e:75:8b:
aa:6e:fa:a1:fd:3a:24:c2:7b:88:f5:50:e7:5f:d9:
12:df:91:8c:59:b8:43:fa:c7:a7:a8:ce:72:f6:7b:
34:82:03:62:2d:46:c1:8d:75:3f:00:9a:4b:ca:fb:
b0:36:2e:c9:78:6d:85:03:6f:f5:72:df:30:92:01:
03:72:cb:f6:71:f5:c1:be:56:3d:75:d4:ad:1e:60:
28:7e:9e:de:c5:3b:60:04:8b:8b:ae:3d:56:2b:dc:
f1:33:29:6d:df:35:ff:89:c9:d6:8c:6c:67:9d:43:
79:78:e6:45:1f:f2:94:1b:88:c9:84:bb:af:f8:62:
fb:ab:fe:3b:f0:c3:0e:38:d2:e0:7d:03:22:ef:5f:
02:af:2a:11:ce:46:7e:f9:70:f0:73:c7:8c:98:03:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:32:4B:7E:11:74:89:B4:A9:60:C5:E4:AB:54:79:FB:27:EB:E8:8A
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:df:5b:45:04:6b:55:c5:b0:da:5c:e0:24:45:51:d8:fd:d9:
ce:04:c5:a1:08:70:97:88:57:f7:d4:a1:bf:19:63:9d:f6:33:
a7:3a:1a:2a:74:4d:be:39:9e:94:16:7a:a3:35:a8:df:60:d0:
35:b7:45:12:22:36:d5:1e:9a:8d:b3:50:85:7d:0d:3d:45:48:
e7:d7:e2:c6:ac:a0:da:3b:55:08:19:1b:fb:82:fb:f2:1d:14:
30:0f:d3:a2:4a:d0:60:9b:d5:76:34:e1:e8:94:cf:28:e5:25:
fb:bf:05:a2:6b:f1:34:ff:7f:4c:c7:48:b3:e9:a0:6f:b0:48:
26:57:46:4c:01:73:3e:9a:5d:be:47:14:c4:ef:3c:d3:1a:dd:
9d:73:4e:eb:ba:42:c2:a6:fd:da:3d:06:67:b5:c6:b6:cb:63:
86:2a:0b:54:b0:5b:52:f3:68:d0:2f:cd:34:9c:2c:ae:23:5b:
11:c0:e8:de:81:3c:01:6a:e9:42:7f:1d:78:7e:5e:84:77:86:
3e:5e:14:6e:b2:4a:1f:f6:60:df:bd:a1:c7:05:ea:a0:55:c4:
c4:3f:90:8d:f6:88:7f:1c:78:d0:53:25:1c:19:33:c1:10:7e:
6f:ab:1b:3f:b5:f8:cc:47:40:66:c3:32:09:af:db:31:f8:18:
8e:33:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:12:03 2026 by rpki-client