Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
File: TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft (raw, json)
Hash identifier: 506pYO7rlm3XqrwRQycVi+Cvp2vB7rQJXFyMYFM1B00=
Subject key identifier: 60:42:F9:A4:2C:78:22:4B:86:31:B0:FB:99:D7:8E:C5:C2:7C:15:A4
Authority key identifier: 4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
Certificate issuer: /CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Certificate serial: 01A0CD7EE228CA794B54A1B53C18EC97BEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
Manifest number: 96
Signing time: Wed 23 Sep 2026 09:00:39 +0000
Manifest this update: Wed 23 Sep 2026 09:00:39 +0000
Manifest next update: Thu 24 Sep 2026 09:00:39 +0000
Files and hashes: 1: 03isWsmaGVRk9tqcdmDKk9uA_-I.roa (hash: ScrT5FCc9rPEYk5wCLCQ97IXUmvu4SWDxXf7fq4zp6c=)
2: 226OYCKUmdi1S_3Pe-3PZ-iCAAs.asa (hash: X+ewLeQEwgG8XlmiwNHRk1JnO20h3xlra7zQCCYsiQo=)
3: TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl (hash: 0J2vpuOx0351n/ZNUG1YEeUpMlXAKlZo1RZJG0uXw60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:e2:28:ca:79:4b:54:a1:b5:3c:18:ec:97:be:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Validity
Not Before: Sep 23 09:00:39 2026 GMT
Not After : Sep 24 09:00:39 2026 GMT
Subject: CN=6042f9a42c78224b8631b0fb99d78ec5c27c15a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d8:0e:af:93:df:2c:19:37:f8:c6:49:ae:f5:
ed:8a:03:d4:3a:ac:d3:56:5e:a4:97:03:6c:10:8e:
a0:90:0a:34:68:6e:33:dd:a6:94:13:9f:7d:98:44:
b2:6f:dc:36:4c:5e:74:94:68:5d:55:77:4f:b5:b6:
df:59:e8:b0:cf:05:6d:a5:5c:26:cd:2b:28:10:31:
af:22:4d:7e:14:b9:e5:34:ae:57:a9:00:f0:1b:63:
e3:67:16:42:95:60:a6:51:d7:38:c8:27:42:68:a1:
cf:63:f6:54:8e:33:dd:11:7e:50:d7:16:24:73:91:
03:f7:46:b9:59:f2:6e:14:a2:cb:15:27:f2:df:9e:
24:54:6c:37:9c:b0:ad:d7:d3:3d:ad:1e:eb:11:ff:
f9:a7:e8:e6:dd:b1:58:81:ed:1d:23:bf:86:9d:df:
0b:35:85:ea:6e:12:95:45:87:be:fe:31:6f:a0:b3:
c6:ad:16:9c:17:07:b7:5d:0c:0e:d4:67:89:6c:2f:
58:f5:fc:17:86:10:09:04:0e:54:99:74:fb:96:10:
1e:99:86:6c:fa:32:0d:3b:3e:56:48:57:58:b7:af:
81:2f:83:d8:9a:ec:db:55:a8:f0:43:e9:e7:d3:99:
65:23:5b:fb:47:cb:73:39:15:58:6c:a9:e0:d7:ad:
fe:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:42:F9:A4:2C:78:22:4B:86:31:B0:FB:99:D7:8E:C5:C2:7C:15:A4
X509v3 Authority Key Identifier:
keyid:4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:35:51:97:f8:e4:37:de:02:da:4c:5e:c0:de:d3:fe:9b:d8:
10:fc:6d:2d:b2:d8:43:9f:30:92:40:7a:25:a0:40:08:71:7d:
46:c2:9e:bc:bf:0d:b3:cf:98:68:0f:23:dd:0e:6a:00:1b:45:
ce:70:85:21:f9:14:60:60:12:17:de:ba:8d:ab:0b:31:2e:fa:
72:2d:dc:83:fb:ea:63:bd:9d:35:18:1f:61:c1:9a:78:09:8f:
36:77:9d:c3:3f:05:05:2c:48:88:c9:b8:61:5b:cc:ad:c4:bf:
3e:27:23:ec:36:2c:f0:df:1c:d6:fb:96:e4:ca:6a:0f:be:71:
e8:15:98:77:94:b1:2c:cf:4e:89:fa:2c:35:56:f3:5f:f8:99:
ff:e5:f8:97:49:c7:08:f2:52:fe:23:fb:f4:f0:48:10:63:53:
14:0e:31:9b:d1:7b:27:9f:41:6e:bb:05:39:a1:3f:56:e2:7b:
5c:2c:29:d0:08:53:50:89:b9:8f:1c:15:db:54:fc:5c:c0:09:
13:21:3f:cb:4b:be:4a:7a:37:e7:72:e6:f6:84:32:cb:35:d2:
5a:49:59:1e:63:e8:a4:9e:af:36:dd:82:5a:f1:25:fe:b0:b3:
c8:1f:42:e0:9b:cc:be:53:60:fe:49:62:58:a8:62:35:5e:ed:
c7:fc:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:22 2026 by rpki-client