Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: x/49V3fG2x5OV7Oj3zxPTYas+LmIGEMLEfd5WUQgXe8=
Subject key identifier: 3E:33:86:37:68:18:56:A6:FC:75:01:61:F8:4B:89:1E:11:8B:F3:79
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 01A0D80458545D8405860531E5CEBEBF56A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 1723
Signing time: Fri 25 Sep 2026 10:02:38 +0000
Manifest this update: Fri 25 Sep 2026 10:02:38 +0000
Manifest next update: Sat 26 Sep 2026 10:02:38 +0000
Files and hashes: 1: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: YK1qzScJYya2uWAxGAAAvZfQKnLLPy1OA4bOvqmL+ac=)
2: uLeN3kY2ZRDo-2-B-T0hlmjh-nU.roa (hash: eLP3MmcrJSGHUuA9jj4PGJnAA+F8952d8mOEbR6//AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:58:54:5d:84:05:86:05:31:e5:ce:be:bf:56:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Sep 25 10:02:38 2026 GMT
Not After : Sep 26 10:02:38 2026 GMT
Subject: CN=3e338637681856a6fc750161f84b891e118bf379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:01:28:18:23:96:8d:97:47:45:26:8d:86:7e:
58:ea:ff:b9:3b:40:3a:02:4b:a0:dc:57:b4:2a:2c:
f5:38:39:c1:e9:ee:7e:c6:f5:58:b8:c4:d6:90:c2:
f9:8c:d4:ca:7b:ac:65:1a:36:f7:32:f2:e7:a4:ee:
cd:38:8e:b5:9e:c1:df:83:77:05:39:4b:c6:b8:0e:
15:66:6e:e5:7a:99:71:ed:8a:cb:f7:9c:48:a9:a6:
40:a0:39:55:27:41:73:63:46:bf:c3:34:40:04:db:
29:f1:8a:19:d4:99:38:0c:5b:f4:50:80:53:31:c7:
ea:3b:3e:65:a3:51:a2:21:8f:bd:df:c9:e4:01:5e:
50:5b:48:f6:39:78:69:ba:f7:34:ff:db:33:23:93:
7f:ca:3d:3b:75:67:c7:a0:1b:e3:40:ae:ef:4b:e6:
9c:c4:46:8c:c0:1a:07:ed:4a:68:c2:33:ec:d6:f6:
fe:60:cf:33:0e:2e:0f:16:ca:74:56:b6:e1:bf:3a:
50:21:04:ce:5c:e5:92:a4:ad:79:7e:23:17:f8:34:
42:b7:e8:6d:fb:7a:2b:59:85:93:c4:57:20:45:af:
f3:34:09:39:37:b3:59:26:4e:09:c7:a1:a9:c0:a7:
47:7b:e0:75:ed:37:41:e9:ff:d7:21:22:4f:21:ff:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:33:86:37:68:18:56:A6:FC:75:01:61:F8:4B:89:1E:11:8B:F3:79
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2f:94:32:1a:51:48:34:ba:ae:49:f4:c1:fe:cf:ee:d0:d7:
59:2d:0f:77:36:f6:ca:f6:76:2e:d5:7e:53:0d:f5:62:09:f1:
c6:65:6e:8f:4e:00:30:1a:0b:39:fd:d6:60:23:c7:81:d4:8e:
ce:fd:53:eb:c7:9e:e3:04:da:61:c0:3b:00:21:6a:8b:95:a5:
65:e6:58:55:25:23:de:ea:9e:38:3f:92:82:f2:e6:27:74:2b:
ad:d0:8b:a1:06:ec:b8:d1:1e:3f:f9:83:00:45:da:43:4a:9f:
85:2f:e6:06:ec:bf:80:4e:fe:a4:11:48:6c:c9:b9:40:be:4e:
f4:eb:69:a6:58:94:5e:3d:36:0c:cf:5d:f2:05:d4:74:f9:7e:
1f:c3:a9:c9:83:2e:09:4c:ea:d0:bb:b3:f0:c6:06:ef:bc:a2:
72:8d:de:eb:19:80:b3:89:ff:8f:e7:8b:66:55:03:56:77:59:
99:93:d0:4b:58:e9:4e:b6:61:d9:56:7e:1b:ba:8c:71:ea:2c:
ec:a6:41:b0:74:2f:8b:14:5a:2f:2a:4e:8f:1b:1e:5b:69:28:
db:9a:9e:f6:4f:c3:de:cc:d4:63:cd:ed:d8:fa:63:63:6e:c4:
b8:a5:67:78:5d:b4:3c:3d:5b:ef:b4:60:79:7c:bb:43:7a:46:
5a:c5:c7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:10:04 2026 by rpki-client