Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
File: T5nk6uSKAceB-q0R9tgakeozvf8.mft (raw, json)
Hash identifier: 1sErcnKRlL3L1nsuD4tTV16kJMklkIGLhxcomrYWadg=
Subject key identifier: 18:F5:1B:D1:C3:92:B9:61:39:BD:5F:5F:A4:0A:F6:A2:6F:08:AF:1F
Authority key identifier: 4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
Certificate issuer: /CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Certificate serial: 01A0E62D1591E63F6297C731E8E7BCC7884B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
Manifest number: 1A7F
Signing time: Mon 28 Sep 2026 04:01:49 +0000
Manifest this update: Mon 28 Sep 2026 04:01:49 +0000
Manifest next update: Tue 29 Sep 2026 04:01:49 +0000
Files and hashes: 1: 8ZRlNNc35z7_o90cin0lnPRuC2o.roa (hash: v3k+bHpxtw/4UrPsyDE1vbWZluRfTlgNFYTkoDqmNws=)
2: HCGfFsFzdEdOgL94q44-LrKFOk4.roa (hash: z2rwFnfOIUrAmdSR0Bpv+q/6wHr2zoObtpToXBsamGU=)
3: T5nk6uSKAceB-q0R9tgakeozvf8.crl (hash: /nRedHky1aPtgxuLhS014wxwT0aZJHGmKvd7JPvs/Jc=)
4: bEtxOVFEe6RgofyeDUv0F4MuQwg.roa (hash: P00yl0lvfAFq6gWwP+lokbttZWyi8V39INq/nWNvt1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:2d:15:91:e6:3f:62:97:c7:31:e8:e7:bc:c7:88:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f99e4eae48a01c781faad11f6d81a91ea33bdff
Validity
Not Before: Sep 28 04:01:49 2026 GMT
Not After : Sep 29 04:01:49 2026 GMT
Subject: CN=18f51bd1c392b96139bd5f5fa40af6a26f08af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:68:6e:4d:2f:d3:f0:b4:c5:44:45:fc:e9:
6d:20:d0:6d:1b:47:55:74:5b:61:45:bf:ef:04:25:
0d:c3:83:1f:77:a2:c1:9c:33:d3:55:f4:bf:95:49:
68:86:b2:a2:57:b9:25:5f:5d:99:aa:f7:d1:a2:f2:
2d:5a:a6:e4:df:c4:cc:17:c0:ff:ac:87:fd:6d:62:
15:8c:dd:57:bc:8d:70:9a:70:55:01:33:c5:0c:85:
a8:67:21:88:46:52:71:7c:9e:98:14:2f:5b:33:a0:
b9:aa:9d:ab:6c:8b:07:3e:16:24:1a:3b:3a:11:96:
60:88:94:b8:0c:da:c0:e4:ed:c8:a7:9b:8e:40:1f:
e7:f4:05:bb:9a:24:60:69:10:ce:d7:a5:6c:81:77:
88:7e:30:1b:a9:08:fd:96:a5:14:8e:fe:6d:3c:69:
a2:f9:21:c8:87:0c:37:55:63:b0:7d:e2:fb:8d:eb:
a6:f6:f2:60:7a:69:49:3f:7e:e0:c7:5e:90:c6:a6:
98:cc:ae:f7:e2:93:7f:bf:56:74:e0:f2:a5:17:d1:
ec:9c:63:ee:73:33:de:fb:45:32:e0:bb:c9:34:af:
1e:c8:75:d3:f1:d1:e6:9b:cd:1e:7f:f2:68:26:bd:
bb:c7:52:a8:ce:ac:2b:0e:f2:45:5a:69:e5:9d:9e:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:1B:D1:C3:92:B9:61:39:BD:5F:5F:A4:0A:F6:A2:6F:08:AF:1F
X509v3 Authority Key Identifier:
keyid:4F:99:E4:EA:E4:8A:01:C7:81:FA:AD:11:F6:D8:1A:91:EA:33:BD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5nk6uSKAceB-q0R9tgakeozvf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/19d313-777b-4044-a238-8b8f3f8d7303/1/T5nk6uSKAceB-q0R9tgakeozvf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fc:e3:bd:db:51:39:e3:db:cd:1c:c3:4c:01:0a:96:c7:1f:
30:bb:20:d6:f0:43:4f:ae:80:0b:27:a4:74:95:8b:5a:82:8c:
1a:13:2e:e8:10:c0:a7:11:5a:fa:78:92:f2:1f:ef:df:4d:8b:
ac:05:6d:59:cf:80:c9:b8:5f:59:28:68:9f:db:63:49:29:20:
b5:e5:c2:54:2f:7a:02:e6:62:44:08:62:62:66:b2:27:b7:d3:
0b:50:32:73:02:d7:ec:db:4f:a1:be:db:ce:56:b2:2b:3a:80:
6b:d4:25:55:90:6a:55:08:41:7d:8d:67:b0:cd:79:9c:9c:54:
30:13:20:d5:22:28:27:a4:49:c7:94:3f:04:67:06:a2:ea:84:
4c:94:69:43:14:ec:6a:7f:01:73:69:f4:ae:47:76:f4:8a:5b:
8a:73:c3:83:e6:69:4f:c0:c4:ab:d2:d3:cf:3f:58:9e:7d:2a:
48:99:1a:69:20:e3:fd:ff:20:b7:60:a9:2e:e1:ae:62:52:11:
76:e7:0b:af:53:71:2d:01:a2:55:fb:57:0e:ac:fb:dd:f8:0c:
bf:e7:05:45:b5:ac:cb:ea:77:06:4b:73:f5:70:8f:27:d6:f4:
17:eb:52:62:ab:93:77:d7:4a:4f:d7:55:fc:f7:2c:40:c1:af:
22:d5:f2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:24:42 2026 by rpki-client