Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: d5abVL9i18/odH9VB4I8Q3ov1G15aNtpibq4YzwjtCs=
Subject key identifier: 2F:E8:57:08:3E:66:D8:A9:BA:FD:C0:44:B1:04:34:05:3A:AC:88:3B
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 01A0D0EDFE398D91E8A397E80A3B5258A0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 1381
Signing time: Thu 24 Sep 2026 01:00:53 +0000
Manifest this update: Thu 24 Sep 2026 01:00:53 +0000
Manifest next update: Fri 25 Sep 2026 01:00:53 +0000
Files and hashes: 1: WMqwkkOCeJIiDGczokQt6OKgfpo.roa (hash: 6yCQ2yXVHO2BxnZqJR1Rvu8adOAClmHZ2J60vDEAoZw=)
2: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: 6nzn3jq78p7XYQi7E6OIPHZRZ52t+OuB6sb6ch5MoXs=)
3: ydyTTB3FHmlgmrUF4u_cEkdDzws.roa (hash: sm5RJb+IplkwipOY1e61+aLvM0eV38hivV05zuDbU50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:fe:39:8d:91:e8:a3:97:e8:0a:3b:52:58:a0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Sep 24 01:00:53 2026 GMT
Not After : Sep 25 01:00:53 2026 GMT
Subject: CN=2fe857083e66d8a9bafdc044b10434053aac883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:2b:b7:0b:21:25:dd:1e:81:6f:7f:25:59:
19:45:c9:15:5a:99:bb:29:a5:53:63:9f:bc:12:50:
d6:d6:c4:48:19:71:1f:fb:a4:68:ca:1d:d8:dd:76:
33:f7:78:05:01:ad:8e:bf:5f:64:74:5d:bf:c3:34:
7e:ea:73:68:16:8b:08:52:d5:1e:47:08:ff:98:d6:
4a:e2:28:e8:dd:ee:5e:a9:7e:f7:9a:e2:bc:59:b8:
c4:a4:58:cb:4d:78:64:ec:b2:eb:fe:da:72:72:2a:
ff:a1:9f:57:90:a4:6f:6f:21:b1:d4:dd:da:f0:1c:
9d:e6:29:58:14:a4:16:0a:ce:c5:9b:3c:a9:89:c1:
5f:12:de:0e:6b:18:13:1e:b7:04:1a:c5:ec:7f:cf:
1d:b8:eb:9a:45:41:38:cb:41:e0:b5:a7:9a:cf:d1:
58:7d:04:0a:d9:94:8c:ea:18:a7:fd:b1:b4:5a:24:
c2:92:0e:ea:b2:cf:40:69:2e:ca:b4:ee:19:06:e3:
32:6b:18:1c:4b:ee:c0:51:4d:bf:50:92:99:1f:22:
d2:44:35:e5:45:46:be:e3:d2:4a:2c:95:1e:d1:23:
91:6c:14:d5:68:97:a2:93:b3:79:d2:5b:ca:fc:0c:
d0:fb:e9:1a:c2:bb:39:65:d2:a0:f8:9d:a8:a6:b7:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:57:08:3E:66:D8:A9:BA:FD:C0:44:B1:04:34:05:3A:AC:88:3B
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:89:b6:f8:e5:04:d6:d2:05:a7:e2:3e:5f:90:bd:6b:3a:51:
eb:68:d7:20:a5:77:24:2f:7e:69:ad:7f:d9:68:2d:52:f3:9c:
8d:e8:d0:ff:ba:6f:ad:20:e6:36:65:f6:85:64:3b:56:9c:89:
96:74:de:9c:e7:81:f9:69:26:9e:dd:34:86:b9:1a:2d:27:83:
b6:ca:6a:3d:33:4c:4c:eb:b4:1d:f7:f1:ee:dd:39:c8:3c:92:
3d:cf:78:a7:ea:3c:65:42:8a:3d:eb:e5:f0:49:40:9b:41:ca:
48:64:9f:a0:73:35:5a:7e:e7:9a:4f:ae:6f:30:56:83:c0:67:
b6:17:8a:d3:01:4c:f5:1e:5b:9f:40:2d:3b:a1:df:6c:97:e6:
ae:72:5d:ff:9e:73:91:56:89:ee:57:f1:7b:3e:34:7f:0f:15:
cc:0a:b7:e8:a5:e1:ac:4e:46:3c:da:a8:39:2d:d9:82:e7:85:
30:ff:c2:20:52:0b:74:52:05:93:65:43:21:e3:e3:84:43:98:
48:0f:9b:6a:0c:ff:46:38:35:02:c6:20:87:ee:65:1e:b8:02:
34:e3:8e:fd:05:4e:6d:b6:7d:4e:ae:fc:ff:a1:c2:e1:02:6c:
b8:5d:dc:a0:9b:7e:d0:3d:ae:70:6c:82:74:18:8d:5b:9d:e1:
f5:ef:00:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:41:50 2026 by rpki-client