Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: BmRiLawqFvSQS3XtRaTRc8vm7LZEPoNPcIHh8B3ReP4=
Subject key identifier: F6:22:62:9D:DD:10:C0:55:7E:C6:9A:5C:C5:7F:E2:07:59:33:31:A9
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 01A0D494809AEE2B3056B71F1C910661CD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 18:01:36 +0000
Manifest this update: Thu 24 Sep 2026 18:01:36 +0000
Manifest next update: Fri 25 Sep 2026 18:01:36 +0000
Files and hashes: 1: 3bsIQIUMB3wEM7UpYsUhEhh9TDM.roa (hash: JUK0LWzP12KIpgwQRI9/y3rNyJiup+Z+mcnNsCbamT4=)
2: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: Qj1/wsvZxbQDeDMDnsTQuPXiaLRiqgmQVEVTu/K8JIg=)
3: UBcqPXEQnKrJnYhEGTvOR6j6EUo.roa (hash: wZthjYgNfjrS6L37NpRR1qXSrJcuxPFMsxRLKIg6JX8=)
4: Z0hS5fWo-y_SX9oUly3wZoFqg80.roa (hash: QItwS85WIhN170At5hmC7mNxoC4+AyHXJZmT2uZ7v2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:80:9a:ee:2b:30:56:b7:1f:1c:91:06:61:cd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Sep 24 18:01:36 2026 GMT
Not After : Sep 25 18:01:36 2026 GMT
Subject: CN=f622629ddd10c0557ec69a5cc57fe207593331a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:a8:e5:c9:52:45:26:95:61:7d:3d:ff:cc:
c5:02:26:80:c2:eb:19:94:ec:1b:86:8d:13:c0:36:
5b:06:ad:b9:a5:91:5c:3f:42:03:f0:36:2a:26:16:
bd:7c:94:e5:6a:26:9f:58:84:31:ed:8f:31:91:d2:
44:ad:c2:f8:3c:87:24:5e:c2:fe:97:e7:e5:65:24:
61:43:b3:7a:78:d0:5f:ba:3b:15:89:00:52:5a:74:
26:a6:93:9a:c2:9b:51:ae:2a:be:37:3b:3b:74:db:
f6:b4:3b:bd:17:e3:fd:9d:cb:81:db:a5:0f:bb:9f:
76:12:9b:0e:ce:82:12:d6:33:02:32:e2:83:8d:be:
63:82:78:c8:55:84:ca:88:a5:c2:78:03:0a:c8:81:
71:20:db:06:96:a7:f2:0c:a2:be:de:a5:80:69:b4:
dc:a0:a6:80:ce:70:03:f9:1e:c0:01:33:3b:15:27:
8a:94:72:16:b9:2a:47:99:09:bb:31:33:15:d4:90:
1a:25:ec:b6:ec:5a:ec:dd:17:1e:6e:b9:84:76:12:
ee:1e:db:09:ba:55:cd:f7:f9:e1:32:79:f3:30:eb:
41:af:b4:6a:f8:50:8a:4d:84:b7:da:5b:cf:dc:0a:
e8:69:b2:4c:0a:3b:c3:87:dd:61:0d:b5:b8:a6:bd:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:22:62:9D:DD:10:C0:55:7E:C6:9A:5C:C5:7F:E2:07:59:33:31:A9
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:10:87:30:9f:08:bb:b0:85:8d:d8:af:6b:9a:f3:7c:7b:cd:
2e:fb:b9:96:ed:8e:d5:3c:b2:d6:1c:bf:34:e9:46:cd:bf:15:
2b:66:18:df:21:cc:d2:8c:8d:a1:1a:8c:89:38:ba:74:b6:8b:
9e:b3:b6:fc:0c:97:dd:bf:da:2f:7b:2b:8b:79:2f:43:68:53:
d7:0a:a4:1a:fe:b5:39:31:02:5c:41:c8:5a:4d:e7:9c:fe:94:
5d:1a:b8:1f:e3:55:46:78:1a:9e:25:77:bf:ac:97:16:e4:bc:
a2:65:05:22:b7:5d:04:31:d4:99:86:12:76:30:1a:18:c4:4f:
a1:a8:62:23:8f:13:85:86:5e:b9:dd:a6:b0:a1:5d:ff:68:0a:
dd:3d:68:fb:2f:ed:f0:c2:3d:c6:87:66:ad:15:bb:04:31:49:
6b:c3:40:4c:df:fc:56:ee:df:db:50:e4:72:6c:73:e1:f0:82:
a6:33:5d:d5:59:70:bd:a1:c5:ef:e0:fb:16:42:b1:a8:24:35:
8a:a6:e5:4e:e2:45:24:d6:6d:c5:d4:44:f1:57:e0:ef:9d:f3:
8b:f5:30:6c:fb:0c:77:0d:0c:13:ae:ae:26:2e:c4:43:53:9c:
a3:31:8d:69:5b:6f:5e:f5:b8:83:e7:a3:8e:97:44:b2:51:57:
46:68:63:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:51:50 2026 by rpki-client