Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
File: TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft (raw, json)
Hash identifier: NOhJNZmNaWLWBPKhA9a/1af+0o+sukXx0XedbFyHu7o=
Subject key identifier: 31:71:D3:0C:E5:99:A0:7B:EF:68:D8:06:D7:DE:4C:09:D8:13:D1:7B
Authority key identifier: 4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
Certificate issuer: /CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Certificate serial: 01A0CB901D55DFD3957303EF7F75A2FB639F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
Manifest number: 0258
Signing time: Wed 23 Sep 2026 00:00:14 +0000
Manifest this update: Wed 23 Sep 2026 00:00:14 +0000
Manifest next update: Thu 24 Sep 2026 00:00:14 +0000
Files and hashes: 1: H1FxR3lsZeaaxaUL76X_AXEsmFw.roa (hash: Dx2fttv2xm/avvPL3cDG4ptacElYPtPXnn8b4aHQDDQ=)
2: TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl (hash: /svcbWEZv7cwqsuWNw4mduyWogbwSJCqDYCB58xNiTI=)
3: nTO_7v382DQXa1KT96uc5_krM68.roa (hash: lvxYvuFUrUzZ06gSOq8z2zV5Teg8Jnnl+h1rg47zK30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:1d:55:df:d3:95:73:03:ef:7f:75:a2:fb:63:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd3f4e567fd541e5af0c9e88d11a90d3e21d467
Validity
Not Before: Sep 23 00:00:14 2026 GMT
Not After : Sep 24 00:00:14 2026 GMT
Subject: CN=3171d30ce599a07bef68d806d7de4c09d813d17b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:c5:c9:40:74:cb:1a:cd:89:a5:f2:fb:5e:
ab:89:0c:64:6d:59:f3:12:b9:42:4f:08:1b:26:5a:
09:0c:62:13:1c:55:a9:50:5a:57:30:a1:e8:3b:c4:
a0:ac:c9:dd:c7:30:99:f0:de:79:25:dc:65:ae:e1:
50:3c:69:93:05:dc:04:ae:02:34:6e:92:31:be:cc:
f3:c4:4a:83:69:ec:36:83:39:7a:1d:3a:c8:25:ef:
f1:cd:17:b2:bf:37:ac:45:7a:d2:b0:7a:2d:a3:16:
ca:19:49:7a:6b:48:41:ca:02:b6:48:d7:5c:2f:c7:
3c:a5:1f:70:a4:36:7e:09:33:c5:2a:68:5a:ab:9f:
76:73:4c:bc:71:31:67:56:80:e1:c6:24:57:d8:d6:
63:b6:90:14:eb:a5:83:c4:13:32:6c:d6:d5:7f:f2:
ee:f1:82:7e:23:21:2d:7c:3f:8f:05:19:d1:a2:3b:
25:f9:a9:2e:24:a5:d0:7b:80:dd:1a:b2:36:12:32:
37:db:42:2e:c2:52:76:62:86:99:9e:e3:36:6e:4c:
33:8f:80:18:e5:5b:ff:4c:2a:38:b4:b5:e6:14:56:
b3:6f:cb:96:c7:de:aa:ad:30:e1:ec:69:2d:ee:b4:
89:05:5e:3b:fb:ca:06:95:b5:ea:43:ba:2b:5d:0f:
1c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:71:D3:0C:E5:99:A0:7B:EF:68:D8:06:D7:DE:4C:09:D8:13:D1:7B
X509v3 Authority Key Identifier:
keyid:4C:D3:F4:E5:67:FD:54:1E:5A:F0:C9:E8:8D:11:A9:0D:3E:21:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNP05Wf9VB5a8MnojRGpDT4h1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/722ccd-47c2-4b48-b957-bc5d3c91673b/1/TNP05Wf9VB5a8MnojRGpDT4h1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:23:93:46:25:d0:37:b3:22:2c:be:9e:89:73:b6:f1:7c:a6:
63:a9:19:07:c1:8a:b7:d2:a9:27:d0:de:dc:98:87:b4:ce:3d:
35:01:11:b4:21:a7:9f:18:c1:4c:03:e7:7c:05:d0:b6:5b:67:
89:27:5b:b2:83:70:b8:17:0a:2b:d1:af:34:a7:dc:14:59:cf:
c6:f2:91:0e:1a:cd:d7:cb:21:94:a1:d9:f7:3c:67:a9:e2:a2:
86:cd:23:5e:16:e5:84:44:9e:d0:9a:25:59:5f:84:81:cc:a7:
c5:93:ba:8f:ee:45:00:7a:cc:53:8a:a6:b4:56:57:9d:c8:1f:
39:4d:3c:14:d3:05:83:fe:2f:d4:e5:bb:04:00:37:b1:bc:f5:
07:0a:fb:18:26:18:00:6d:00:d0:02:ce:61:3f:3d:62:b0:fc:
99:50:e0:09:45:6c:18:e8:e4:fc:ed:ce:22:d5:1f:3b:86:81:
9c:36:08:11:4a:d0:cd:ca:6b:0e:a5:e0:fc:ff:f1:37:d9:2c:
c8:c1:89:34:c6:07:55:eb:df:a1:32:34:3a:3a:c4:2f:05:f7:
4e:75:9d:f6:72:9e:6c:47:ec:02:81:5b:2d:0e:d4:a4:a8:e4:
41:ee:48:87:27:92:75:af:1e:28:a5:7e:f9:ff:ab:11:66:cf:
ed:2b:ff:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:22:45 2026 by rpki-client