Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: tsdQNCmMTD9bJc5k6y8MT0xhSC8VWgzljiRF+7wsjF0=
Subject key identifier: 39:70:FF:31:07:9F:FC:92:BD:9F:96:83:F0:74:BA:A6:66:94:1F:B3
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 01A0D83BB3DF3855399E4A074579DEB1ECDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 1A00
Signing time: Fri 25 Sep 2026 11:03:06 +0000
Manifest this update: Fri 25 Sep 2026 11:03:06 +0000
Manifest next update: Sat 26 Sep 2026 11:03:06 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: YDSExamFC0aG3ZDLjRrO6yH5WR42Udc7ISJSJ+D8PLI=)
2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:b3:df:38:55:39:9e:4a:07:45:79:de:b1:ec:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Sep 25 11:03:06 2026 GMT
Not After : Sep 26 11:03:06 2026 GMT
Subject: CN=3970ff31079ffc92bd9f9683f074baa666941fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:f4:91:7a:63:cc:b2:9a:ae:8d:f1:e5:12:
e3:73:50:ea:a3:64:a6:2b:c2:75:c4:e1:f9:e6:da:
00:c7:dd:4e:19:4e:77:2b:51:ab:92:19:fa:d4:90:
c1:92:b8:60:58:ae:a4:51:61:76:f6:d4:54:7c:62:
6a:03:f1:75:f4:87:d7:8f:5f:8f:f2:d1:d7:69:31:
f0:a5:0b:92:18:18:2b:64:4c:e1:76:03:26:be:ec:
84:a3:cf:13:e5:f7:a8:29:30:21:df:e4:11:ba:97:
60:15:6c:a4:d7:ca:46:35:3e:b8:35:53:4c:2a:d4:
ed:67:1b:d5:fa:5a:4f:63:20:3b:4d:a0:e9:52:34:
30:51:32:6d:11:b1:15:3b:65:ed:32:d7:cf:41:08:
b5:4b:42:13:e3:68:fd:ec:1a:f3:68:f0:9d:b9:9b:
e1:d1:99:95:55:03:2d:94:cc:d8:a5:9a:72:78:af:
94:cf:a3:56:37:ac:75:42:1e:ac:ab:48:8a:d5:5e:
56:c5:ae:6a:82:05:40:d9:2a:cc:14:b8:1a:85:4b:
42:af:23:04:3d:8d:99:e4:9f:9a:11:fa:4d:47:05:
29:1e:81:b2:76:5b:da:10:42:1d:66:42:58:79:dc:
c3:2b:49:12:81:2c:16:05:dd:6b:86:1b:7f:7f:80:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:FF:31:07:9F:FC:92:BD:9F:96:83:F0:74:BA:A6:66:94:1F:B3
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:1b:3c:36:c2:4f:c4:6a:83:25:7c:cf:1c:cd:9a:8f:a7:e9:
88:84:e6:e8:87:41:cb:67:11:ef:80:e5:a1:1a:33:d6:64:f2:
35:68:cc:32:52:20:cd:e0:89:b3:22:6b:9b:94:6a:f2:e1:9b:
5d:92:b0:3e:d5:34:75:a5:3a:8f:c3:d7:90:de:45:7d:2f:e4:
ec:8b:1b:c0:1f:3c:fd:70:dd:d2:78:69:3a:28:e1:98:d4:40:
a4:b4:4f:8c:0f:90:0d:ad:2b:bd:bf:56:62:1b:2a:56:82:12:
9e:8b:76:73:1d:6f:6c:bb:da:f7:6d:09:7a:0b:7c:69:29:f2:
4e:7b:68:7e:f2:bd:d5:ab:a6:90:da:ea:df:07:83:4b:9f:bf:
d7:de:97:b0:70:27:7f:bd:be:b2:d6:b0:e4:64:15:07:33:35:
19:92:65:2b:d3:50:51:df:13:38:fb:a5:d1:ba:61:fe:8b:da:
dd:5c:e6:02:94:de:4f:7a:af:78:f4:45:37:1f:ba:0e:92:4a:
91:c7:54:67:a5:be:7c:db:e7:89:8f:c5:99:b3:66:83:04:c9:
d0:42:c6:19:5e:2f:68:bc:e3:27:4b:13:34:d8:f1:ec:c0:b5:
04:d0:ba:60:44:06:38:98:c0:23:c8:c0:cf:58:1d:cd:e2:fd:
1b:25:48:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:22:50 2026 by rpki-client