Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
File: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft (raw, json)
Hash identifier: AnH2t8oMRdJdtC7zAv130XdKeoT3oJo9I3jWfOZn6U0=
Subject key identifier: B5:7C:EC:BC:B0:7E:FD:72:C8:15:F4:B0:2D:09:ED:13:EF:30:48:90
Authority key identifier: 4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
Certificate issuer: /CN=4cca52610c77c24069c6a659f5f75862444d21d1
Certificate serial: 01A1073856BCD7DBA5560715CC6400F4D89D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
Manifest number: 02D4
Signing time: Sun 04 Oct 2026 14:01:34 +0000
Manifest this update: Sun 04 Oct 2026 14:01:34 +0000
Manifest next update: Mon 05 Oct 2026 14:01:34 +0000
Files and hashes: 1: 7zHV66w7Bkb2Ny1dDTCLE7Wl8ao.asa (hash: lHxtADA9XD8WHImnlrIbVNB8iNbIHqkbRGv2EysJnKE=)
2: TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl (hash: ljSWStPG5XQtArS/35yFkTirhl5cBm98jl1BjNYa1Vo=)
3: xG9NFV14N6jhxkLPrteP6dgm9Uo.asa (hash: j7yw0JA2orCei5mBZaM+jkEs+OnrVp/04Pg2/7YewKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:38:56:bc:d7:db:a5:56:07:15:cc:64:00:f4:d8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cca52610c77c24069c6a659f5f75862444d21d1
Validity
Not Before: Oct 4 14:01:34 2026 GMT
Not After : Oct 5 14:01:34 2026 GMT
Subject: CN=b57cecbcb07efd72c815f4b02d09ed13ef304890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:cd:6c:b2:fd:8b:fe:86:38:af:f9:01:2d:
17:34:38:24:c6:a8:52:8a:6c:74:f5:ec:57:a6:63:
bb:71:5a:ee:e9:99:19:38:09:61:0f:51:88:d6:11:
0e:9a:d4:d1:6e:c8:3e:fb:52:fe:a7:56:6b:c7:ce:
d9:99:e6:9a:68:ca:d0:f2:fe:0b:50:60:43:8b:1c:
9b:77:24:e2:65:d8:ec:40:2a:4b:73:a5:78:01:ce:
a5:31:8c:e6:1a:46:37:22:fb:a0:c7:20:ae:07:76:
09:2b:2f:c3:40:1e:64:87:17:04:47:e1:68:7f:c2:
7f:cb:62:69:c4:c3:a8:e4:2b:00:d9:8a:a4:b3:35:
d8:5a:50:74:41:3a:95:c2:c6:70:30:1c:42:3a:58:
aa:f7:d9:e6:4a:99:1a:0a:23:85:2c:d0:e8:63:a0:
a9:df:c5:ac:3e:c7:03:4b:de:ed:db:89:f7:16:77:
04:2d:5f:c6:a2:64:76:e3:16:1e:76:7b:64:25:ae:
f0:4d:82:29:35:cd:bc:c9:7b:f2:17:68:b2:fe:93:
84:24:cb:c8:48:73:8d:23:c9:cc:48:24:92:59:6a:
63:75:30:8a:81:d0:ba:1d:22:d4:05:c5:0d:70:76:
a6:dc:ba:19:28:df:22:34:9c:76:e8:81:bf:80:f9:
53:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:EC:BC:B0:7E:FD:72:C8:15:F4:B0:2D:09:ED:13:EF:30:48:90
X509v3 Authority Key Identifier:
keyid:4C:CA:52:61:0C:77:C2:40:69:C6:A6:59:F5:F7:58:62:44:4D:21:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4921f0-5c5c-4014-8ced-1b03e5894e05/1/TMpSYQx3wkBpxqZZ9fdYYkRNIdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b5:60:3d:b1:57:cf:63:23:fb:3b:70:8c:49:4a:5e:c8:3f:
a8:83:de:81:22:08:c9:f5:6e:29:6c:40:fb:e9:61:c4:e7:aa:
27:15:d7:04:77:36:67:58:1a:b1:01:51:85:58:d9:fe:97:00:
ae:02:02:fe:1b:3b:6d:35:c7:cc:a6:9f:14:b4:ab:6e:79:f2:
7c:ff:15:53:2a:b5:06:4c:8b:2d:4f:86:14:e7:54:47:52:4a:
4c:5b:d9:47:dc:58:b1:03:44:5e:f2:a9:fb:98:28:7a:64:22:
08:ae:88:13:64:90:44:68:24:bf:3d:93:99:df:6b:af:75:c3:
25:d0:86:56:51:9b:1f:72:a1:c8:d0:9f:08:37:5d:01:0d:68:
dd:b0:de:21:8b:2c:5b:38:93:a7:07:48:fb:02:52:f0:06:47:
34:1c:bb:84:f8:ac:d1:73:3f:24:be:76:2b:d0:1f:41:b5:7d:
54:2d:ef:39:77:9c:08:ed:b2:61:06:88:4d:c2:5f:71:0e:85:
2b:6f:ba:4a:a4:ab:50:34:95:82:c8:d1:b5:82:e0:a3:57:b1:
6c:f5:f7:b6:6e:f2:be:79:97:8f:23:93:ba:0b:d5:7b:a3:ce:
7a:29:84:b5:d1:16:aa:4e:9e:e8:9a:79:15:0f:2c:18:fc:95:
4d:cd:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:45:07 2026 by rpki-client