Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File: TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier: QXuK00KcaLr5z5mmjr/WUMfOSYO+uFmGQYkO+b3oVS4=
Subject key identifier: FD:B2:8E:4F:71:3E:81:68:EC:ED:6A:46:2C:7D:D0:D6:A7:34:FB:42
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 01A0D9F1C06DA128F629248F3FB512646536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number: 1A87
Signing time: Fri 25 Sep 2026 19:01:34 +0000
Manifest this update: Fri 25 Sep 2026 19:01:34 +0000
Manifest next update: Sat 26 Sep 2026 19:01:34 +0000
Files and hashes: 1: 2jrszJlgV71mCpgTFgHjigRHN0o.roa (hash: WSCn/RX/PMY99fcjdFAAZEiGRwDYCQ00UuZMQjGF8MQ=)
2: 5CmVOyjMGaOx3Azoa9vaES31gNU.roa (hash: tmSpZLW8QseubN/4w6VFtZ3Yl76f3yLn1OWmBKE45j4=)
3: I_YkIIbROaBHikP_X2q88QJJL04.roa (hash: i+Ynuk2mjQ1KZXlivUmIRXIts9g1U/IQ+uGbqumlnv0=)
4: KI0SNNJ-NmxVDoJBLMGkkL4-w8g.roa (hash: Z9+/MulcNbx3XD5qZOV8isBFv2OoqAKiBV2oB0/AYPw=)
5: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: zra8aXGVPYut6cq/km4xKzKQ3d8mTHHu8rT1FPdaDUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:c0:6d:a1:28:f6:29:24:8f:3f:b5:12:64:65:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Sep 25 19:01:34 2026 GMT
Not After : Sep 26 19:01:34 2026 GMT
Subject: CN=fdb28e4f713e8168eced6a462c7dd0d6a734fb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c0:49:ab:ea:db:93:2e:bf:f4:c5:5f:d8:e8:
dd:00:36:4f:89:5a:8c:3b:7d:b7:bd:bf:db:43:aa:
27:c0:d9:71:c7:1a:f5:f2:84:b8:97:2e:2d:5d:97:
dd:a7:93:1e:40:95:5b:df:08:a5:af:fa:7a:41:0d:
e7:9b:c6:46:d5:38:15:fb:53:78:24:e6:15:87:67:
c5:32:e4:f7:79:a4:5e:30:1c:3b:3c:8b:37:86:7e:
3e:33:b3:7f:00:46:9b:14:dd:ad:1b:e3:72:04:d0:
5c:43:ec:66:84:e9:36:fc:11:21:38:fb:ad:cb:df:
a0:5e:30:77:b1:09:e0:91:35:8c:99:61:07:59:59:
18:d8:ad:d1:e6:30:a5:eb:65:c7:13:cf:3c:8b:68:
b2:73:64:8e:a6:44:00:a0:7a:7c:89:4a:32:6b:fa:
2e:98:b6:89:11:4c:86:5f:ec:2d:ba:3c:ef:50:34:
49:cf:1d:4c:ad:95:fa:53:e7:39:e9:b2:98:23:4d:
dc:81:74:be:0d:1c:e2:c4:a1:16:32:d8:99:b0:90:
d5:f4:75:85:d0:f2:f4:af:d6:e2:db:ff:64:3d:f3:
4f:29:44:2f:cc:48:59:3a:f1:ef:b1:e9:f5:67:6f:
73:46:bf:e8:01:af:45:32:24:16:36:4c:03:82:22:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:8E:4F:71:3E:81:68:EC:ED:6A:46:2C:7D:D0:D6:A7:34:FB:42
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d1:d2:73:1d:a8:26:d0:61:85:c5:7f:cf:bb:4c:fc:9b:df:
23:ad:c2:a4:77:60:ae:5f:96:ac:11:e6:5a:2b:c0:a7:3a:19:
11:0b:6a:22:49:e6:4a:00:ff:28:85:3a:d7:d1:62:8a:bc:5a:
42:6d:52:fb:0e:0e:88:f2:dc:dc:14:20:37:99:85:91:f7:3a:
80:ba:8b:a4:fd:f9:ef:40:37:27:c0:fd:22:62:bb:d8:ca:07:
f5:6c:ab:1d:51:df:24:74:01:ff:ac:7e:53:48:f4:05:52:8b:
fd:2a:51:15:b3:67:17:b1:f9:b5:e4:54:cb:f8:76:28:09:84:
ab:ec:16:ba:9a:08:be:5d:b8:03:dd:ab:a5:28:e5:09:b0:d9:
e1:e3:13:58:95:1f:e4:34:72:d6:ab:17:aa:8c:3a:1c:48:7d:
a4:1e:5b:38:6f:09:a6:b2:87:06:46:49:5e:4a:3f:7e:6d:bf:
e2:72:81:43:6f:94:60:e1:5e:0b:6f:b6:ab:84:31:14:c4:12:
ae:a4:68:b8:0f:8f:76:16:6f:31:2d:0f:d6:8d:7f:bc:27:e3:
1e:c7:86:d7:ef:52:8a:2f:00:83:89:2f:70:f3:25:91:a0:9c:
e4:68:18:04:96:9e:e6:ad:72:47:da:7e:c6:0e:a0:54:85:2a:
cf:ac:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:00 2026 by rpki-client