Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: VoF8OXAlj6LmiP0EQH6RTiuyveCVY685yd1I2+l1UzI=
Subject key identifier: 55:6A:FC:B9:CA:07:C2:7D:08:DD:77:7D:D8:84:8D:5F:BA:C2:84:43
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01A0E2F445898AE86B86DBB6F08AE2021AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 0560
Signing time: Sun 27 Sep 2026 13:00:54 +0000
Manifest this update: Sun 27 Sep 2026 13:00:54 +0000
Manifest next update: Mon 28 Sep 2026 13:00:54 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: O0LJoySPD8FA1d3795DhTOO/xCXxetz6OdvH/tevxvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:45:89:8a:e8:6b:86:db:b6:f0:8a:e2:02:1a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Sep 27 13:00:54 2026 GMT
Not After : Sep 28 13:00:54 2026 GMT
Subject: CN=556afcb9ca07c27d08dd777dd8848d5fbac28443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:62:69:cf:19:ab:fb:15:6c:1a:c1:a0:c4:
b1:25:ac:da:a8:ed:44:a3:31:69:59:a0:7e:f8:aa:
30:49:ed:53:1c:3c:09:f1:bb:cc:71:db:c8:6b:46:
78:fd:ce:d9:d9:e3:13:14:4b:ef:95:d2:1c:7a:29:
53:01:f7:15:3b:07:35:55:0c:71:90:b0:bf:5c:67:
35:d5:ca:6d:72:26:65:41:9f:08:90:a0:4a:c6:a3:
18:1c:a3:24:da:9b:ae:e3:1e:eb:0b:ab:96:f7:09:
f3:fd:8a:43:7f:16:6a:df:4f:59:04:c8:67:95:19:
a0:92:10:c1:8f:81:46:e6:6b:47:67:af:86:e4:d7:
ea:cd:d1:2b:f8:3c:cb:ff:98:fe:a8:cb:47:d9:be:
8e:c9:da:d6:58:d2:f4:f8:46:f9:7f:da:65:5d:14:
b6:31:27:06:16:90:64:93:21:0c:d2:f7:6b:c9:20:
86:e6:f5:4a:d1:3c:ce:54:34:ad:7d:5c:ba:ac:43:
06:be:b2:e0:d1:09:b9:b1:69:0a:dd:07:f2:10:b8:
85:12:c9:c6:c6:81:a8:76:18:99:3d:8a:15:80:37:
10:35:ea:ce:c8:60:e0:39:a4:00:f0:48:27:d5:b0:
e9:68:99:13:b9:54:a5:cb:d7:24:a1:df:52:97:c6:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6A:FC:B9:CA:07:C2:7D:08:DD:77:7D:D8:84:8D:5F:BA:C2:84:43
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:cf:11:d1:e9:98:d2:67:c6:ed:f6:63:59:69:54:15:9b:fc:
7b:d6:c9:1d:44:78:1d:54:a3:1c:21:85:5f:e4:12:0d:0b:e0:
9f:4e:45:07:69:7c:20:35:c8:d8:09:f1:c5:04:4c:a4:c5:32:
3b:6b:09:79:aa:f3:2f:05:e0:f3:e4:80:dc:04:50:84:92:d6:
5e:4a:a2:7c:e2:83:be:c6:12:ca:70:da:56:db:60:dc:70:37:
11:f5:d5:37:44:6e:1b:d4:df:37:b9:19:f4:f5:d2:a4:4a:4e:
70:9f:5c:4f:3b:d2:2e:c8:84:7f:f9:d7:d6:42:de:d6:17:5e:
b9:4f:52:29:87:66:09:29:78:f1:50:95:f2:53:6c:26:61:88:
35:11:c5:94:35:be:d4:72:c5:47:15:ff:a4:f0:eb:3f:c5:b0:
10:83:9e:32:91:29:3a:5c:fa:da:d8:dc:02:4a:84:04:a3:9c:
d3:7d:fb:35:b2:11:a6:7f:25:f6:a2:c3:84:6a:24:08:c4:48:
2c:a0:0e:d9:b5:0b:29:40:15:7d:a1:62:1d:fe:fa:bb:cc:fe:
8f:8d:70:f3:2c:65:09:42:ee:44:d7:92:7e:98:4e:74:21:98:
77:e1:55:5a:2a:33:36:7a:97:8d:b6:2e:75:df:7f:53:5b:d7:
24:79:8e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:54 2026 by rpki-client