Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: q6Oj5hZot3o2qGX0mFkXFlTnZRWt0OlgjifrTn7Mk8I=
Subject key identifier: 20:68:8B:9A:42:7D:31:04:EB:12:43:A5:DA:3F:B2:F4:66:7B:45:D2
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 01A1DFBA42AB621B83C8ACFE11810FBF1832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 15:01:28 +0000
Manifest this update: Sun 15 Nov 2026 15:01:28 +0000
Manifest next update: Mon 16 Nov 2026 15:01:28 +0000
Files and hashes: 1: EuzrvuKdTBEUT1iTSTu2oWpyl08.roa (hash: 6lfE37g+270FUBODA6XRsyANZt1xmAjhCCTH8Dga4fo=)
2: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
3: L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa (hash: vnnfABGEtbcmc5yS9HseTFPLNWl4SZGd7BuXLhUduKk=)
4: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
5: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: 8ivP/gtnT87P0sKtdNEs1DHn8u249tQI3Wm3v/h79do=)
6: aJ9nGingvVJG2rrpEQGIL8zeAfM.roa (hash: TBYvSsMt/clFuSfyvBUudu0SSYbKGlrFpuon89ZE5XU=)
7: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
8: lVdGF_smtjS2TJKO4-LgPM2UQ68.roa (hash: PODlANzvqjtbQ7kYZBP4/mKZdgr3aujboqFbWAkNa1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:42:ab:62:1b:83:c8:ac:fe:11:81:0f:bf:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Nov 15 15:01:28 2026 GMT
Not After : Nov 16 15:01:28 2026 GMT
Subject: CN=20688b9a427d3104eb1243a5da3fb2f4667b45d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:3f:55:40:5e:38:a8:1a:f2:3b:3b:5d:4f:
ac:cf:4f:98:9a:65:f7:97:06:e3:d1:2f:07:ac:5f:
76:12:0c:8b:18:0b:5e:03:04:8f:2a:0e:09:c2:ed:
56:ab:20:3f:83:ea:41:90:d3:98:4f:c6:62:3d:15:
3f:bd:ba:f0:9a:4a:3d:40:ce:50:84:f4:03:b6:5e:
dd:39:a4:b3:89:2c:a9:e3:15:89:0a:4c:8e:f9:83:
ac:95:8e:16:33:68:ff:3e:94:78:69:d9:44:f0:80:
71:26:b2:1e:b7:d2:a6:46:d7:47:e4:9c:86:0e:2c:
a3:e5:e1:04:6a:03:ef:26:c4:3d:88:87:98:8a:2c:
1e:91:46:b5:02:e5:07:12:81:df:26:bf:b2:14:92:
53:d5:6d:60:84:8c:9d:4d:b6:d2:77:d2:f7:fe:61:
95:65:0a:0e:50:95:f9:e5:38:2e:91:98:5a:f9:a0:
c3:a5:bc:2c:16:ac:3b:57:fa:2e:15:43:b6:ca:4c:
93:be:4c:b5:22:38:3d:51:c7:60:32:1c:ef:bc:47:
48:3d:15:ec:91:3c:b3:b9:58:a4:2e:93:bf:f9:fd:
d2:44:0e:b3:88:07:c7:67:58:14:43:83:04:8f:99:
a6:36:7f:e6:ae:86:da:3c:d9:96:49:fd:1d:6a:e4:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:68:8B:9A:42:7D:31:04:EB:12:43:A5:DA:3F:B2:F4:66:7B:45:D2
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:84:c4:d1:5d:f9:62:09:b0:76:2f:42:3e:09:bd:41:fc:cd:
be:52:42:2b:12:08:32:f6:e8:7f:d8:22:0f:31:c8:52:fa:a0:
b1:f5:e2:78:37:8f:54:df:bc:28:b2:3d:42:03:5e:ec:c2:81:
85:9c:0a:64:20:fe:6d:c4:6b:38:b3:b4:71:dd:0c:d6:1f:84:
6b:6e:7c:f8:7e:26:59:6d:75:2c:0d:ab:57:5a:70:63:16:d0:
35:df:cf:85:44:e5:c0:f0:3e:97:9e:88:2c:9d:36:77:42:ed:
0e:4a:41:6c:ba:f1:cf:39:fd:ee:7a:0f:23:4c:21:b8:31:66:
96:61:09:e8:fb:af:67:3d:bc:cd:53:85:74:e8:05:0d:b9:de:
a9:c5:a3:e4:9d:b4:a6:98:03:13:ef:40:15:6b:bd:ce:93:ad:
8f:b8:d9:03:37:35:06:45:44:11:4f:af:e8:b3:d6:ef:83:66:
9d:52:c3:0f:82:65:13:ea:50:e9:a5:75:a3:a0:a3:4a:bc:f4:
24:ad:b5:4a:75:0f:b7:57:2b:55:43:75:4c:5a:01:23:ac:ed:
ea:2a:89:78:94:30:59:90:2a:f6:87:7e:15:04:9e:16:7c:b5:
0d:ae:56:9b:f9:24:e9:05:a5:c7:99:fe:bc:85:96:9d:39:45:
01:dd:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:47:55 2026 by rpki-client