Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier: +x5rfT2bWiod/ve2JiDog8XVh+YA1YRVYZ4vbO78hbQ=
Subject key identifier: 89:5D:D9:DE:24:61:48:4F:0C:7E:E3:3D:17:9E:2C:02:0D:F5:46:67
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 01A102487A625BC20D5B68A04A19263CC8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number: 1A9A
Signing time: Sat 03 Oct 2026 15:01:06 +0000
Manifest this update: Sat 03 Oct 2026 15:01:06 +0000
Manifest next update: Sun 04 Oct 2026 15:01:06 +0000
Files and hashes: 1: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (hash: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA=)
2: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (hash: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw=)
3: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (hash: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc=)
4: IM3Sgf6n85MJ0JQ5zz3x973QECY.roa (hash: RhRSY8YyTjB3zZVDnbDfxNa5aiv4sYD92KtaLzLLg4A=)
5: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: d83RKF1it4wEAax3BBaonZdTJM7F1zs1naOWqCj5Yb0=)
6: klIt1NStPul9M_ZMJsdKutacUMM.roa (hash: Bg/ud8VNM1Ut9qaDX4Qy7kRtx9Mw6PMvkK9VqDfBpa8=)
7: mgPMgmO1MnQ710BsaC9GgiUOCyo.roa (hash: cgp58YJUOJU4z8ygbBfP3ejTeYQRwCdmEzfUU9kXBS8=)
8: uFbpcpxOgBzckCeqBpe0f1VxLpw.asa (hash: O4ZnTQf3lD21aw5Srb0h7jxe1YX3MHi6Ea8yrm+gujM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:48:7a:62:5b:c2:0d:5b:68:a0:4a:19:26:3c:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Oct 3 15:01:06 2026 GMT
Not After : Oct 4 15:01:06 2026 GMT
Subject: CN=895dd9de2461484f0c7ee33d179e2c020df54667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:32:af:22:7f:fa:06:d3:6d:e5:f0:44:65:
c0:af:49:c2:30:2d:d9:f3:19:96:c6:3c:39:e0:96:
2c:7a:ee:43:3f:49:d0:06:e3:6b:f9:0f:0f:da:35:
11:15:0c:89:0e:b5:b2:44:2e:79:89:ea:f5:39:f9:
46:0b:a1:ae:12:76:46:64:2b:6d:e0:30:c6:e7:4d:
0f:e6:b1:92:a9:84:48:02:39:ff:f1:59:eb:a0:76:
4b:5e:ce:fc:55:ae:16:f8:ec:46:7f:e4:bc:18:1f:
42:ee:c8:62:d1:04:95:1f:8f:e3:d0:39:8e:d4:05:
b9:98:ea:53:06:70:ce:72:37:a3:d4:48:18:6e:72:
f6:c9:8d:6e:a4:ad:d0:50:78:ee:18:a6:61:3b:da:
25:ca:f0:9d:0e:c0:14:41:43:db:57:e7:c0:86:9f:
32:32:e3:2c:ae:74:26:06:28:38:62:e7:2f:98:2f:
24:7a:4f:83:3b:07:94:16:ba:83:3e:c8:e7:de:40:
83:0c:88:62:8d:e0:37:54:bb:14:d5:bc:d7:f4:8d:
65:4b:24:95:be:ab:c7:06:be:e2:78:7d:1f:79:e2:
09:74:02:c1:8f:ca:1f:d1:87:0f:c0:3c:d5:49:71:
15:cf:50:dd:44:b4:d6:f2:48:28:32:b5:d7:44:71:
31:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:D9:DE:24:61:48:4F:0C:7E:E3:3D:17:9E:2C:02:0D:F5:46:67
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4c:0b:ad:d3:ce:bc:65:9e:2e:00:be:33:21:06:df:16:88:
1a:24:88:6a:21:50:60:0d:a7:78:2a:aa:87:c2:3b:7b:61:57:
01:5a:a1:13:15:0e:38:20:12:47:e5:eb:c1:3e:08:a4:0e:1c:
b5:9c:11:11:fb:0c:9a:a7:70:77:84:98:57:38:c1:ab:19:84:
72:52:b8:46:9d:0e:5d:ee:c6:ad:c1:35:8c:02:4d:4a:62:82:
8e:c3:ef:28:d3:e5:57:82:09:fc:2b:14:a0:40:88:a8:6d:9e:
36:6e:d0:0b:35:40:e5:4a:d0:a4:1e:46:a0:04:2e:63:f2:1d:
06:4c:b2:26:8d:3e:2f:2e:7b:cd:cc:b7:dc:f1:c8:38:78:16:
e3:bc:fa:4c:88:32:6f:7e:17:24:1b:02:5d:d8:d1:08:06:44:
26:0a:06:ba:07:00:b1:9b:ab:f0:f8:c9:7e:5d:4a:46:b0:6d:
ae:9b:f8:f1:05:85:6d:2b:3b:c7:26:64:24:ca:f4:22:a9:ab:
dc:7f:32:70:d6:3b:20:5f:ba:99:cb:08:40:57:f1:f9:f8:fc:
42:0f:31:39:04:0b:26:52:3a:8f:30:9e:49:45:a0:df:fc:d8:
77:2c:86:eb:f0:b2:2f:11:5f:41:84:96:f0:c0:4f:d6:47:d2:
8c:5e:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:39:46 2026 by rpki-client