Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
File: TnllEg8hCBamsbonTSVM9pj3YTA.mft (raw, json)
Hash identifier: jP5mpU1ci95u/TJCM/PHYA7eGeJciDex113PgRDMW6Q=
Subject key identifier: 5E:00:77:4B:16:A0:95:F8:9B:9D:6E:CA:CC:28:2E:83:A5:94:B7:A8
Authority key identifier: 4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
Certificate issuer: /CN=4e7965120f210816a6b1ba274d254cf698f76130
Certificate serial: 01A0DD29FBD1EF93C5D84E80945F2F0F6B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
Manifest number: 0D
Signing time: Sat 26 Sep 2026 10:01:51 +0000
Manifest this update: Sat 26 Sep 2026 10:01:51 +0000
Manifest next update: Sun 27 Sep 2026 10:01:51 +0000
Files and hashes: 1: 9cvLi0lyFC3GgbJV2aEolV81JPs.roa (hash: Hj4vRerxqWMvmOPXcDNhhbOOf+kdFNecQC2GEwwRsjA=)
2: TnllEg8hCBamsbonTSVM9pj3YTA.crl (hash: yD358d7s7Gk79iTsjb5hBq1Cko3gAcZMELgCYWWE8S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:fb:d1:ef:93:c5:d8:4e:80:94:5f:2f:0f:6b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7965120f210816a6b1ba274d254cf698f76130
Validity
Not Before: Sep 26 10:01:51 2026 GMT
Not After : Sep 27 10:01:51 2026 GMT
Subject: CN=5e00774b16a095f89b9d6ecacc282e83a594b7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:0f:c2:c2:09:ae:05:28:a6:74:88:b4:56:
0d:6a:d4:ba:12:db:6a:f0:1c:79:03:85:6c:9e:c8:
23:64:8e:82:2e:f9:9b:ca:6e:b6:c8:6e:85:b1:8b:
1c:d5:39:a8:76:ef:a3:4c:38:dc:80:9e:89:9a:17:
32:e8:06:d9:b5:11:3c:1a:30:b1:48:6e:a1:79:2b:
6c:3f:87:f2:3f:39:ba:84:38:c1:9d:7e:a9:51:97:
be:05:50:bf:14:84:df:22:9d:70:45:84:b2:c7:8a:
4c:43:ea:b3:7b:37:1c:90:b1:25:b3:ad:7f:e8:c8:
5f:8b:57:c0:a8:ee:4f:05:49:e8:7e:cb:0f:6c:93:
9e:30:09:aa:11:96:95:bd:7b:e9:a4:67:ea:52:b6:
5b:91:9f:8b:13:93:ae:7e:32:67:58:15:f7:17:00:
e8:bc:5c:d7:fe:ad:b7:ce:2d:fd:51:c6:0e:e2:2a:
04:b7:4f:5f:49:e8:97:f3:86:91:7d:57:ea:8e:d6:
9e:da:37:ac:e4:77:e9:90:88:20:99:7c:1b:e4:23:
04:11:db:42:51:25:9b:35:78:50:ef:21:df:54:a5:
d2:c7:83:f2:bb:38:b3:23:a5:ae:83:31:61:03:b1:
00:83:8a:ae:a7:9f:b5:d7:80:e2:3b:b7:ec:bd:72:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:77:4B:16:A0:95:F8:9B:9D:6E:CA:CC:28:2E:83:A5:94:B7:A8
X509v3 Authority Key Identifier:
keyid:4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f6:a7:f5:96:0c:8c:5f:f8:18:ca:ae:fe:11:73:52:40:c9:
63:24:5a:d1:ec:04:4c:db:7c:95:34:24:41:2c:95:6f:d9:1c:
df:df:4a:b7:4d:6d:b1:5e:7c:0d:61:85:b9:7a:26:55:c1:71:
56:10:01:11:2c:3f:c9:b4:c4:01:93:69:3b:68:18:c4:68:84:
6c:23:24:4e:35:c2:5e:52:40:21:d4:13:f9:59:12:52:5c:7a:
4e:c4:ff:21:68:73:80:26:19:06:4d:08:23:ff:88:6c:78:1f:
0a:09:a2:e1:d9:b4:cd:11:df:ae:83:4c:ba:d1:93:4e:ad:ce:
3a:a3:d8:75:f9:42:09:df:50:c6:53:c0:41:e0:8f:fd:c9:7f:
25:cc:91:a1:17:48:32:9b:f4:d7:da:8e:57:41:85:f6:82:c8:
a9:49:ec:a1:fe:45:a5:8c:e3:03:28:ad:5d:4d:9c:b0:d7:dd:
2b:1f:9d:11:ee:f2:c5:8f:fb:b4:1f:99:77:53:28:a2:88:60:
01:9f:62:c7:6e:55:0b:d8:bb:d1:49:c6:48:de:a3:14:a4:69:
8a:0c:93:16:7c:06:01:89:f1:7c:09:e2:0b:a1:60:07:43:8c:
fb:26:49:f1:b2:15:fc:20:47:5f:a6:ea:bd:f8:f8:0a:76:9c:
86:7b:7a:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdKfvR75PF2E6AlF8vD2suMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzk2NTEyMGYyMTA4MTZhNmIxYmEyNzRkMjU0Y2Y2OThm
NzYxMzAwHhcNMjYwOTI2MTAwMTUxWhcNMjYwOTI3MTAwMTUxWjAzMTEwLwYDVQQD
Eyg1ZTAwNzc0YjE2YTA5NWY4OWI5ZDZlY2FjYzI4MmU4M2E1OTRiN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTAPwsIJrgUopnSItFYNatS6Ettq
8Bx5A4VsnsgjZI6CLvmbym62yG6FsYsc1Tmodu+jTDjcgJ6Jmhcy6AbZtRE8GjCx
SG6heStsP4fyPzm6hDjBnX6pUZe+BVC/FITfIp1wRYSyx4pMQ+qzezcckLEls61/
6Mhfi1fAqO5PBUnofssPbJOeMAmqEZaVvXvppGfqUrZbkZ+LE5OufjJnWBX3FwDo
vFzX/q23zi39UcYO4ioEt09fSeiX84aRfVfqjtae2jes5HfpkIggmXwb5CMEEdtC
USWbNXhQ7yHfVKXSx4PyuzizI6WugzFhA7EAg4qup5+114DiO7fsvXI2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4Ad0sWoJX4m51uyswoLoOllLeoMB8GA1UdIwQY
MBaAFE55ZRIPIQgWprG6J00lTPaY92EwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5sbEVnOGhDQmFtc2JvblRTVk05cGozWVRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82OTdiOGEtYTdmMy00NjQ0LTkyZDgt
NDFiZjgzZjg2ZDc1LzEvVG5sbEVnOGhDQmFtc2JvblRTVk05cGozWVRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82OTdiOGEtYTdmMy00NjQ0LTkyZDgtNDFiZjgzZjg2ZDc1
LzEvVG5sbEVnOGhDQmFtc2JvblRTVk05cGozWVRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPan9ZYM
jF/4GMqu/hFzUkDJYyRa0ewETNt8lTQkQSyVb9kc399Kt01tsV58DWGFuXomVcFx
VhABESw/ybTEAZNpO2gYxGiEbCMkTjXCXlJAIdQT+VkSUlx6TsT/IWhzgCYZBk0I
I/+IbHgfCgmi4dm0zRHfroNMutGTTq3OOqPYdflCCd9QxlPAQeCP/cl/JcyRoRdI
Mpv019qOV0GF9oLIqUnsof5FpYzjAyitXU2csNfdKx+dEe7yxY/7tB+Zd1Mooohg
AZ9ix25VC9i70UnGSN6jFKRpigyTFnwGAYnxfAniC6FgB0OM+yZJ8bIV/CBHX6bq
vfj4Cnachnt6UA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:49:49 2026 by rpki-client