Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: nKJ0JSXq7MVz3wdTQo+H3PYrjoEJMacRIB6GGRDgmwk=
Subject key identifier: D3:F2:FA:1C:FC:9F:66:70:7B:AD:BC:AC:13:F3:A4:80:E3:BA:40:C1
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 01A1013628C7A38DC0873C6E99DC2F769786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0ADA
Signing time: Sat 03 Oct 2026 10:01:28 +0000
Manifest this update: Sat 03 Oct 2026 10:01:28 +0000
Manifest next update: Sun 04 Oct 2026 10:01:28 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: hqQ3yGtYO0mJnAgcfyTkCPmCXEcbNA9QgrngntvEadI=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:28:c7:a3:8d:c0:87:3c:6e:99:dc:2f:76:97:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Oct 3 10:01:28 2026 GMT
Not After : Oct 4 10:01:28 2026 GMT
Subject: CN=d3f2fa1cfc9f66707badbcac13f3a480e3ba40c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:c6:f8:28:88:f3:dc:7f:42:90:f4:22:39:
35:41:27:e0:9d:db:18:f6:26:58:6f:ea:9b:54:eb:
1c:16:25:e6:3b:4e:2c:46:f3:d9:67:20:fe:09:bd:
b5:50:28:b4:c2:74:4a:de:f0:aa:a2:6c:52:2f:25:
84:80:1b:f0:b3:22:e4:c9:eb:aa:79:d4:07:fe:0c:
22:a6:51:aa:c1:5b:26:fe:2b:b8:c3:f6:39:81:92:
e4:15:82:20:51:77:39:f7:af:86:1a:bd:9a:d7:48:
4e:cd:08:89:3d:38:2d:78:5b:74:1b:f5:8b:68:16:
e9:80:1b:a8:2b:87:99:be:0a:3c:a1:af:2a:bc:c9:
0d:32:fd:0a:12:43:e9:a9:99:e8:0a:fa:76:34:ac:
80:30:3a:ac:72:a0:a5:63:bc:e0:e0:70:b2:97:c6:
7d:00:e5:0d:c9:3b:9c:8f:ad:9d:82:b1:e7:15:96:
65:74:5b:7b:58:17:05:ce:1c:da:bf:24:99:7a:46:
77:90:ea:8c:0a:c4:fc:b1:04:30:3f:e3:6b:0c:14:
65:43:f4:df:24:ed:c8:39:39:b4:ce:37:df:e6:c1:
83:16:e3:f4:ec:f5:7e:99:e0:98:ed:e7:eb:fa:03:
dd:24:be:5e:cb:fd:8f:c0:5d:ac:45:80:53:fb:98:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:FA:1C:FC:9F:66:70:7B:AD:BC:AC:13:F3:A4:80:E3:BA:40:C1
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:a8:3c:96:2b:1b:d6:30:a1:4f:bb:4e:a7:93:6a:21:4d:
33:a6:9a:00:dc:04:8c:ba:c0:56:06:c6:3d:f3:52:61:f5:52:
e2:e9:67:87:21:f9:0b:a6:98:0d:a4:26:54:7a:b9:a0:6d:6d:
26:0c:60:4f:47:65:24:2b:fb:d4:7f:53:03:0f:0b:a5:96:e1:
53:7f:78:2d:f8:a6:01:d2:2f:e2:43:f4:71:7b:4b:9d:1c:fc:
4a:98:32:61:0e:32:06:15:e5:02:2a:e2:37:82:f4:d5:7f:32:
0c:d7:c9:98:1d:74:95:35:b2:69:6d:e8:29:26:71:12:ce:dd:
e3:6a:af:b6:52:9c:69:c2:56:d2:c2:84:f4:c2:97:67:31:73:
e3:40:b3:21:f2:6c:58:98:36:ee:05:8c:4d:9a:c0:fd:83:64:
70:f8:7b:9c:4e:d4:54:cc:1b:0c:fc:d0:c3:21:7d:98:91:b8:
99:dc:66:88:09:2d:32:75:aa:5e:12:b3:9c:28:f4:80:cc:3c:
d3:ad:04:58:d2:40:a6:b5:55:6a:4a:b6:35:0b:83:d5:13:81:
0a:b5:80:50:2e:48:21:88:f1:4e:d4:10:24:94:6d:62:a4:99:
1b:f1:42:87:d9:8c:7a:f4:53:50:f8:fe:bc:9c:a6:d3:26:91:
75:b6:66:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:36:38 2026 by rpki-client