Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: 3Rngn4nunMU1I9l3jAY5Rh+/8K0bZAk50FzJ5kHIAGE=
Subject key identifier: 85:1F:CB:AF:DB:DA:A9:DC:A8:FE:F4:A6:23:2D:E9:3B:BD:D3:94:93
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 01A0D8DEB2811474CD233F5622C33BA17470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 10A2
Signing time: Fri 25 Sep 2026 14:01:08 +0000
Manifest this update: Fri 25 Sep 2026 14:01:08 +0000
Manifest next update: Sat 26 Sep 2026 14:01:08 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: GVRMsKFBtKPFfHl0df9Vlry0GKGGZakW5KC9QUwheec=)
2: if79kuvwD_kMklv-rjGuATeymik.asa (hash: NqixgtAGzUBisDt8U3Oiw2PBnZVG/SzSQ5d4+iMf5Og=)
3: o-GuySAZav0PksHcDzno-EypQJ0.roa (hash: /pzSPA6PGMWrOD+vCeL5sGDbZ/TBSHFZKj+LgOJi0Mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:de:b2:81:14:74:cd:23:3f:56:22:c3:3b:a1:74:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Sep 25 14:01:08 2026 GMT
Not After : Sep 26 14:01:08 2026 GMT
Subject: CN=851fcbafdbdaa9dca8fef4a6232de93bbdd39493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:81:70:35:07:3c:a9:cc:eb:5a:a7:ce:e1:
c7:d8:c8:84:51:ea:74:25:db:dd:00:4e:1c:29:8d:
83:38:46:87:5c:f8:c1:37:fc:5c:29:64:7c:3a:52:
d1:f0:6e:2f:8b:df:1a:6d:8b:0a:d7:9d:50:0d:a5:
39:e2:ae:9a:72:62:2d:03:db:59:a8:72:75:50:7c:
d1:a8:3d:bb:ed:48:0f:d3:9c:c5:10:47:b8:d6:87:
9b:25:8b:f6:11:f1:33:c6:ef:e6:dc:84:e8:a0:d6:
00:fa:c8:f3:f2:cc:dc:09:47:ba:34:bf:11:44:09:
63:d1:8d:b4:22:4c:e1:ed:04:3d:51:7b:7b:2f:99:
33:c6:24:7d:1a:32:8a:c3:1d:2d:29:3d:05:e2:f5:
81:e5:97:7f:51:02:ea:1c:2a:af:dd:a9:03:dc:2c:
77:43:de:ba:e6:49:7d:72:73:97:cc:f9:b4:49:dc:
c6:bc:4f:0b:27:9a:a0:9c:fe:a7:af:b4:ec:64:84:
74:96:56:91:2e:8b:c1:46:96:aa:69:5f:97:2b:8b:
95:69:61:45:10:97:d9:74:88:b2:52:cf:ac:f8:1b:
a0:fa:f2:a0:b5:ce:c9:e3:08:0c:48:a6:38:20:b1:
de:ef:4e:89:9b:3f:d9:06:c0:e0:eb:b5:72:62:08:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1F:CB:AF:DB:DA:A9:DC:A8:FE:F4:A6:23:2D:E9:3B:BD:D3:94:93
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:29:52:5c:ef:61:0c:e8:df:6d:95:5a:aa:60:ef:cf:1d:d3:
35:80:2f:ce:80:92:16:4d:bc:d4:df:4c:7a:fa:95:7d:96:d4:
3d:20:5b:94:97:22:1a:fd:da:4e:6a:f2:b3:da:b2:ad:73:96:
34:8c:4d:b4:95:ca:df:96:63:80:03:5e:3d:65:3e:98:54:5e:
6b:cc:cc:c6:e7:5f:a5:c3:4e:70:74:ca:4f:de:e2:9f:77:50:
53:7f:3f:70:f3:b5:09:3c:54:9c:99:c4:13:c7:b8:bf:e3:46:
c2:b5:4f:f2:44:fe:eb:0e:83:51:ff:37:bf:0e:78:2b:28:76:
12:b2:7d:78:46:66:57:af:0b:ff:c7:1f:3d:ca:51:fb:54:b9:
2c:01:35:25:c0:da:be:4b:68:56:89:75:c7:2f:09:33:c2:50:
01:f9:68:b8:d1:1e:e4:ea:9f:ed:f6:70:e5:f8:ec:7c:ef:05:
92:c4:31:e8:1e:03:82:b9:6f:4f:9a:54:90:35:c9:6e:3e:4b:
64:92:74:1f:5d:d7:92:e2:e3:c4:c2:5d:01:ab:e4:a3:e9:db:
fe:8f:b3:0d:11:1f:78:8a:05:77:dd:4f:80:10:b0:e6:45:6c:
dd:68:e1:ef:b8:ed:6c:10:db:be:28:cf:c6:65:7c:cf:a6:1a:
f2:0e:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:35:14 2026 by rpki-client