Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
File: TZujR0bUSxP2nFOtEl3apkifV5U.mft (raw, json)
Hash identifier: f2oPoLGajd4ExqVFJXmVEUNsPjio/aeGDq3OuZIygQ0=
Subject key identifier: 7A:F5:D9:43:97:FF:4B:E7:C7:3A:DA:8F:B7:BD:99:03:EE:5B:06:49
Authority key identifier: 4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
Certificate issuer: /CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Certificate serial: 01A0CF35CC64A28625627BCBF2B5E5AA591C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 17:00:04 +0000
Manifest this update: Wed 23 Sep 2026 17:00:04 +0000
Manifest next update: Thu 24 Sep 2026 17:00:04 +0000
Files and hashes: 1: TZujR0bUSxP2nFOtEl3apkifV5U.crl (hash: xg6HhsiCi+emzaeodTZfKpxJXQ2NUhfqE6OLrpDAGEE=)
2: pYetnom_wA_ScRV12GudzaQxL8Q.roa (hash: mTXvpDjqAr8VlbSF6rMZfNW8ZydFcM0VEr1K9O3/BqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:cc:64:a2:86:25:62:7b:cb:f2:b5:e5:aa:59:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d9ba34746d44b13f69c53ad125ddaa6489f5795
Validity
Not Before: Sep 23 17:00:04 2026 GMT
Not After : Sep 24 17:00:04 2026 GMT
Subject: CN=7af5d94397ff4be7c73ada8fb7bd9903ee5b0649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:72:cf:a8:b4:71:17:01:6c:74:aa:06:65:
1a:6b:15:fe:4b:f9:e9:85:52:e0:c3:37:d3:4e:41:
10:3f:99:a6:3a:af:4b:57:45:a0:c5:78:f7:4f:08:
1f:a4:01:77:fb:07:b4:59:04:7e:13:6f:6f:aa:ce:
27:1b:72:b0:4e:9e:c3:6d:74:78:a7:a5:e4:87:1c:
29:d6:1b:99:64:90:f4:90:4a:2c:f9:f0:31:b7:27:
60:f8:63:4e:2e:da:9f:76:d5:2e:35:d7:33:e8:5a:
1e:e5:e0:4b:be:3b:28:77:a5:e5:9a:51:01:86:b5:
f6:d4:cb:8e:d9:7c:68:de:ac:b9:b3:c6:df:11:4e:
a8:dd:24:b3:34:96:5f:5f:55:6e:c7:47:43:46:06:
d8:58:1e:59:3f:26:48:fc:75:fc:3c:96:db:1a:58:
03:5a:4a:ca:62:a7:32:f4:2f:8a:dd:03:4d:e2:40:
14:66:ef:c0:ce:e3:f8:66:f8:99:06:02:00:2e:5a:
a4:64:f9:50:37:ef:42:98:7f:17:39:24:17:a7:6a:
1f:42:19:61:5e:ec:c6:b0:13:41:60:67:32:76:50:
08:a3:63:8c:c0:2d:98:76:41:e1:39:c7:24:09:a7:
a3:f6:65:b5:c0:0c:77:1a:ba:a9:ce:69:d5:c2:d7:
86:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F5:D9:43:97:FF:4B:E7:C7:3A:DA:8F:B7:BD:99:03:EE:5B:06:49
X509v3 Authority Key Identifier:
keyid:4D:9B:A3:47:46:D4:4B:13:F6:9C:53:AD:12:5D:DA:A6:48:9F:57:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZujR0bUSxP2nFOtEl3apkifV5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/TZujR0bUSxP2nFOtEl3apkifV5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4d:4a:45:a4:79:89:49:8d:43:0c:40:65:bf:95:5f:a9:b4:
dc:1f:31:a8:1b:c7:26:c3:45:ec:ea:0b:45:98:5e:d2:20:c5:
3f:c8:4c:a9:4a:9c:f4:8c:e4:32:aa:77:d8:da:04:28:5c:b4:
60:d8:8c:11:24:03:ff:f0:64:26:fb:c1:c5:d0:0b:a9:5f:f9:
96:d1:e1:57:0a:1f:2a:12:aa:a7:77:e4:5b:df:63:5f:a5:49:
db:90:ad:a6:a7:b8:55:7a:e4:50:12:3e:7e:85:00:9b:0e:28:
c8:0f:84:66:6f:ee:d1:a6:fd:fd:b5:25:cb:a8:73:c9:3f:09:
c6:28:ae:42:f3:9a:b5:e0:20:d3:2d:74:f7:49:fa:4b:2d:f4:
da:ec:ee:59:a7:fe:8b:a2:8c:6b:ac:e5:de:45:23:8d:70:c9:
c5:7a:67:3a:3f:86:06:c6:e1:ad:a1:ee:72:e5:99:10:82:20:
40:95:f5:29:e6:be:d7:ac:95:21:09:92:fd:9f:5b:1c:24:29:
f0:7e:a8:c2:69:a8:65:a2:2d:e5:a9:7c:aa:85:9f:41:0a:cd:
37:f5:70:2c:69:b3:3d:44:5a:00:3d:2b:c3:63:a0:04:2c:4a:
bd:35:cb:74:84:a6:e3:e2:d1:5e:3e:6f:99:c9:3c:66:66:48:
85:a2:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:43:16 2026 by rpki-client