Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: k0u3tsRsys8VlCYgpY9yXV4A/CcH3WKrjnPILRtvh8M=
Subject key identifier: FB:3B:33:68:60:E7:D7:CA:08:E3:3A:74:78:CB:C5:9A:00:13:78:00
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 01A0DCBC1BC752F95F411129DCC99622B802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1A85
Signing time: Sat 26 Sep 2026 08:01:50 +0000
Manifest this update: Sat 26 Sep 2026 08:01:50 +0000
Manifest next update: Sun 27 Sep 2026 08:01:50 +0000
Files and hashes: 1: KFywMW4737-JPpo7ntDdVjcljY0.roa (hash: y+0Jhvx7MYfdfSZW5SGIaISfaSBvz9VuHqmA13RqQx0=)
2: K_yCMW3gEKPx-UvDR4vcUDQfi04.asa (hash: 5ltTYL5p8Fw8k0ASnDZeUNbyyXbm27rjjhji8a6UNc0=)
3: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: ard+aQOpyJpTO+ctMgKTeguO6I4YE2OoN+7K3zxjIGk=)
4: fhNDpez0tEXT55T0FQuT3YRDXos.roa (hash: +VEaHjpilB4sNBhuKG3GgrFbP8VWjeNr6HEMkdwaBYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:1b:c7:52:f9:5f:41:11:29:dc:c9:96:22:b8:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Sep 26 08:01:50 2026 GMT
Not After : Sep 27 08:01:50 2026 GMT
Subject: CN=fb3b336860e7d7ca08e33a7478cbc59a00137800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:dc:c5:a4:9e:10:18:42:c0:9c:4f:9a:57:1c:
79:e1:2f:04:be:e1:9f:22:6b:97:43:85:89:11:a7:
44:3a:46:d9:fe:61:de:75:cc:cf:2d:53:68:9f:b1:
bc:36:b8:70:f4:05:12:c0:00:f5:52:d7:9e:05:d1:
c7:cd:91:c6:be:0d:bc:5c:7a:02:34:5a:a2:62:7e:
5a:5b:07:58:64:17:bd:5d:87:62:34:49:60:48:84:
bf:47:4b:d6:8b:d9:a6:62:4b:12:3c:8b:ea:56:08:
33:8d:de:df:05:d2:03:90:48:15:89:f4:d7:2f:75:
08:69:54:8b:2c:7c:1b:82:11:7c:01:80:df:33:1b:
8b:7a:b4:56:35:a5:d3:37:5a:26:1f:9c:87:5d:01:
15:37:b9:78:40:12:ca:41:9f:12:3b:45:57:6a:87:
ab:ea:20:54:57:88:bc:d9:83:42:6c:76:c9:20:c9:
14:2b:f9:78:df:4b:ff:1f:44:f8:6f:ae:f6:98:bf:
f3:3b:b3:fd:78:01:e2:b0:bb:00:bb:9d:d3:ee:f9:
ba:8a:3f:1f:f6:25:1f:39:6c:a0:a8:e8:0d:75:ae:
88:bd:e8:7b:b6:74:dc:2c:03:6c:9c:67:28:16:f8:
45:5c:09:10:d0:3d:83:bd:c7:4d:04:0c:03:27:87:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3B:33:68:60:E7:D7:CA:08:E3:3A:74:78:CB:C5:9A:00:13:78:00
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:24:b6:d6:2e:dd:a9:4c:69:1b:84:e5:de:a6:f7:6c:41:24:
f6:44:bb:2f:92:fe:d9:7e:e2:b0:a0:55:be:15:e1:b8:05:82:
09:e5:4d:8f:a9:be:64:00:e9:33:8c:99:ac:71:dc:f8:a9:aa:
44:b9:be:6b:9b:a4:10:77:b4:99:65:77:5f:94:42:db:66:eb:
0f:bd:e0:18:e3:77:e2:ac:64:a3:30:95:14:21:9a:7a:54:f3:
fd:8f:0f:be:5d:a0:99:cb:c2:a0:16:69:d7:f3:7a:1e:e5:3c:
fd:b2:7e:d9:49:1c:ee:21:66:72:c7:85:1e:a1:5b:2b:79:af:
e8:4f:f2:3e:59:69:18:56:c0:82:3c:9c:5d:ea:97:f0:d7:74:
6b:60:5a:23:12:e0:d1:f9:55:e4:ac:1b:b6:b0:7c:7b:cd:63:
8e:4d:72:c2:6a:ee:40:92:dc:dd:0a:81:f2:2b:73:31:42:66:
d4:a8:71:97:f6:e1:21:e8:17:48:61:ef:ff:ff:d3:6e:6d:56:
d3:0a:67:f5:77:b1:c8:cf:98:db:a3:21:93:3e:31:fb:88:96:
e8:d4:ad:d2:10:d2:44:cd:a8:44:86:b4:bf:05:c7:ac:79:e9:
d7:01:fd:8c:40:63:e7:82:3d:0a:7f:9e:99:ba:4a:64:0e:14:
9e:db:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:54 2026 by rpki-client