Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: bsYdj2g8Lo40QOtzfFx5TkXif+sn41E9pD0wvJpAkQY=
Subject key identifier: C8:B9:93:1C:AE:97:DF:5A:21:44:DB:CE:AF:F4:82:EB:34:CC:75:6F
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 01A0E0CFCAD5E27DDABD50EAFEA0B0E36BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 03:01:49 +0000
Manifest this update: Sun 27 Sep 2026 03:01:49 +0000
Manifest next update: Mon 28 Sep 2026 03:01:49 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: t+8uDRXulPXweZCbfpsLEt/yQU2gk3iIj8pjZIXLcfM=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:ca:d5:e2:7d:da:bd:50:ea:fe:a0:b0:e3:6b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Sep 27 03:01:49 2026 GMT
Not After : Sep 28 03:01:49 2026 GMT
Subject: CN=c8b9931cae97df5a2144dbceaff482eb34cc756f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a3:83:d0:1c:66:6c:5a:d6:99:fd:19:92:ec:
6a:5b:63:03:fe:65:62:a4:20:18:13:1e:79:c3:4e:
dc:c9:45:b5:71:15:13:cd:d0:54:f5:1c:29:ba:1e:
c4:05:d0:84:fe:0b:2b:9d:4b:77:1f:66:f9:8f:f4:
96:89:e0:93:b4:78:12:7c:df:f1:6b:54:5f:48:19:
9d:44:08:85:f6:5a:40:78:55:16:62:29:5b:d8:30:
d6:69:65:12:08:d7:5e:d1:04:7f:47:f3:ff:82:7a:
28:aa:f5:80:5d:11:0f:61:6c:30:60:42:5b:3d:a8:
a9:ce:69:d0:4f:bd:9a:15:85:06:7e:b5:28:53:a6:
7a:85:4a:e9:44:79:4a:05:d1:c6:a6:a8:5b:65:9a:
c0:e7:26:2c:09:18:61:e0:14:82:30:15:ba:f7:ab:
ae:7e:0c:c1:cd:a4:5e:a1:8c:98:17:0e:62:f5:d8:
57:e9:6d:e4:e0:ce:d1:b6:c3:19:f1:69:70:a5:ec:
22:12:b3:dd:9e:04:10:ad:40:d4:23:43:e5:16:6d:
cc:4c:30:55:d9:c0:b0:b7:99:a0:b1:72:d9:4c:7b:
03:b3:7b:04:c4:a7:de:a3:59:7b:90:7f:65:25:2a:
07:ef:97:6b:e0:99:a8:2e:9f:36:28:c3:68:48:60:
6b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:93:1C:AE:97:DF:5A:21:44:DB:CE:AF:F4:82:EB:34:CC:75:6F
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:6b:40:d9:39:3a:a2:26:34:56:3a:69:e2:81:70:40:18:
66:a7:f8:a5:e7:77:ad:e5:1f:c8:2c:71:db:69:9b:5e:5b:4c:
d5:1f:07:0c:50:47:92:cf:3f:88:a6:77:46:84:e9:aa:a4:51:
24:e5:90:fd:60:53:82:d2:bc:2b:4b:b7:11:9f:57:50:83:27:
36:29:8f:24:1d:1f:06:5e:d5:53:5b:58:da:73:e3:d1:e2:12:
7d:8a:8a:48:ea:c8:32:91:15:7e:8f:77:90:8a:17:a8:c9:a4:
6a:47:89:a7:8c:ed:9d:2d:e2:ca:09:1e:91:e6:c8:47:37:d4:
4b:0b:ad:d2:fb:23:e6:c9:3c:9b:38:c2:ec:03:df:f9:2b:63:
c3:48:f8:4f:c3:b3:01:8f:cc:17:b3:c7:a8:47:4a:b9:1a:59:
e4:f4:21:41:54:cd:86:91:78:48:3a:e1:bc:c5:96:90:3a:2e:
da:9b:dd:90:31:fc:3d:b3:b8:df:f4:63:b4:de:df:be:91:83:
5d:e6:07:13:47:3f:2a:8d:d5:17:b4:05:4c:6c:1f:18:1b:e0:
59:b3:8c:55:41:c3:cf:81:16:05:18:ea:7c:d9:19:0f:67:58:
eb:4c:d3:96:84:7d:12:78:8a:6f:c6:0e:63:ed:7b:f2:ad:15:
17:35:90:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:34:15 2026 by rpki-client