Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: YxFMe/VCLeDgIJ62DUUe+ZMtYfZX5wkYbeJEwS+7BTw=
Subject key identifier: CB:EC:D7:5C:22:9A:1F:6D:06:9D:4B:49:1F:8C:C5:4C:04:95:11:15
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 01A0CE5A4D3B219B8A1B87452A7133D81958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 0935
Signing time: Wed 23 Sep 2026 13:00:19 +0000
Manifest this update: Wed 23 Sep 2026 13:00:19 +0000
Manifest next update: Thu 24 Sep 2026 13:00:19 +0000
Files and hashes: 1: MyDBxuxHjE1UjZ06-D4Xls72e2k.roa (hash: ujdPm62GD2JKSu06a5kdzzKz/zzSLFEp1QNe1saBzo4=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: TlmxsVQz9uMS5aUdtYLBqQH1smyg4+otCEdJ75edKL8=)
3: nYD17mll_27ZXiDBVbfu9pAFZUI.asa (hash: aqqjluAZqn8ok88nfidc6bqSZjUpiWBj4TFvOPAr5AU=)
4: odFrLcZzZa3lGHkplTYFOeTL_lk.roa (hash: WkZkaCnol/FFO1wh5d5UvdfBIOI/M/3rlDA0bdxo8+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:4d:3b:21:9b:8a:1b:87:45:2a:71:33:d8:19:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Sep 23 13:00:19 2026 GMT
Not After : Sep 24 13:00:19 2026 GMT
Subject: CN=cbecd75c229a1f6d069d4b491f8cc54c04951115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:b4:94:c5:fb:7e:c6:5f:f5:1f:67:4a:a0:
32:81:c8:12:4a:d4:ed:da:b7:c0:1d:0d:80:e9:0e:
c5:9d:56:ac:5d:2c:3c:b8:ba:70:68:f4:ed:4e:6b:
e6:06:fb:a3:fa:f4:4d:fe:c2:a5:d1:04:83:21:48:
0d:04:bb:7c:84:65:45:10:8d:40:35:77:67:cd:df:
bd:a8:40:8c:2d:99:49:67:0e:b1:b9:83:d7:34:41:
d0:a0:b7:76:4f:45:09:36:4f:9d:3d:e2:30:7f:f1:
a7:c0:e2:03:f6:74:c6:8d:50:ec:d7:28:01:cb:e5:
c4:34:b9:5c:82:af:9f:10:33:bb:84:e7:03:a7:64:
84:76:43:8f:89:ec:1a:06:bd:f0:b7:e0:bd:66:a3:
f9:ab:a2:57:1c:4a:01:ea:31:09:d7:9e:bb:ba:54:
22:e2:fa:91:47:dd:a8:92:46:75:e8:0a:ad:a4:2c:
f6:9e:e4:82:f2:f0:92:25:97:22:a7:fc:6a:26:31:
a1:8d:6b:fb:a7:95:f2:48:12:f4:75:cc:16:e9:f9:
18:34:6d:0b:a7:10:8e:f9:23:ed:9e:88:9e:3d:cc:
90:c2:5f:cd:f9:d1:7f:c5:b7:a2:2d:a6:f4:07:07:
fd:09:4a:40:46:c3:73:8a:f2:45:f6:f6:b8:d0:2d:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:D7:5C:22:9A:1F:6D:06:9D:4B:49:1F:8C:C5:4C:04:95:11:15
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:c5:3e:a0:d3:e9:21:db:75:6d:64:61:7b:47:d4:a7:32:2a:
89:f0:3f:75:75:71:da:b1:c9:a0:53:a2:e2:f2:63:03:fe:30:
11:bb:d8:4a:24:85:f8:7d:e3:ef:ba:29:e9:89:e4:9b:e6:8f:
83:98:03:34:cf:82:1a:20:b7:42:98:4a:11:5b:c3:14:16:11:
8c:48:e1:66:7f:c3:a2:7f:ff:6f:60:28:8e:26:13:d2:5d:fb:
c8:c2:bb:8d:ec:0d:75:ad:ee:5f:7d:d2:07:a1:aa:e0:28:cf:
c8:96:c2:8c:d9:94:a7:be:d3:23:de:58:d6:cb:dc:44:b9:23:
8e:17:7a:3a:e9:eb:53:b5:c8:bf:e7:11:ca:22:80:a3:f0:dd:
e0:1f:67:02:29:a4:a4:30:4b:4f:26:4a:ae:f0:c5:24:7b:ce:
db:40:19:59:73:0a:2e:97:37:d9:80:90:d9:bb:4b:75:7f:f0:
97:72:3d:e4:84:ed:d0:bd:86:30:60:4d:ae:3f:66:91:e6:1f:
22:40:14:f8:c9:0b:c9:5d:ed:dc:7f:d2:cf:0a:58:f1:2e:6f:
d8:47:b5:37:24:63:d1:da:65:66:bd:8a:f6:ca:81:56:2c:04:
12:ec:f8:eb:24:67:85:c0:a7:af:3e:70:34:85:96:89:ac:25:
a9:4f:13:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:20:49 2026 by rpki-client