Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
File: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft (raw, json)
Hash identifier: w+SHpE+Ajd23C3ZJHBfdb9mqHYpUCPR6btQsvGje+No=
Subject key identifier: 24:68:3B:2D:A9:92:C6:EB:45:D6:6B:61:A8:30:33:CE:DF:F3:F2:7E
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 01A0D9F20ABA972B86B2E58EF148A63BAB49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
Manifest number: 1AD3
Signing time: Fri 25 Sep 2026 19:01:53 +0000
Manifest this update: Fri 25 Sep 2026 19:01:53 +0000
Manifest next update: Sat 26 Sep 2026 19:01:53 +0000
Files and hashes: 1: 3rJ7nyF6EzyPoY2hRA0UvIcCsx4.roa (hash: fE4J44+J8hH2s14ZGpX+cCUACFAAWair1/S0jgB+xAE=)
2: Axy-VDMaL0TttuQWr1HwszNqc0I.roa (hash: bbZhwLgQwTeviEfEB8kT+/Hr8GEpDxbaZvVMkhGxoa8=)
3: EIf4_e1IxdxiLFBKRrmbYkLdBhg.roa (hash: wTMfLnzpxmyagKAjlQHgrc2pzICPnW5ADwDSG8SyfAI=)
4: TX_u3ri8rca4P81egD9tMMtVs-E.roa (hash: VizDbLVqd0zmsz68Is1wbARP6+9Ai1vW465jIZXJ0vw=)
5: Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl (hash: oh5+QpCbBfRiER2c/HIRegC7/qmKiJZzIC1G2drJrBg=)
6: gnfK8SBpVOdVbxYnE0YvG_aCqwQ.roa (hash: 4HCQGxp9LRlzVGgeY9uvcPRB+giBsSJBc0o5g6+TINI=)
7: nlpW1LdUG8ccgcMsu_bYGBcmxBE.roa (hash: WjkJjvp8/U7WObhL1QFmDulfOKAgaqrKAeSX8GWbEKY=)
8: wtWJEYRFSG9Qv3ctSlt-PvC9YxU.roa (hash: zMI/aBSI0MnE5srRM6wJIzfTVWrBiFahbqJC56lWnfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f2:0a:ba:97:2b:86:b2:e5:8e:f1:48:a6:3b:ab:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Sep 25 19:01:53 2026 GMT
Not After : Sep 26 19:01:53 2026 GMT
Subject: CN=24683b2da992c6eb45d66b61a83033cedff3f27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:40:f7:94:ff:d7:0d:7d:5c:6e:2b:ee:5b:
23:bb:11:8a:6d:1f:61:66:89:70:f5:d2:85:d2:f3:
70:89:af:fa:12:23:9f:0c:b9:28:0e:54:aa:20:b5:
c8:a9:9e:a7:70:02:4d:30:8c:48:a7:61:36:89:90:
b9:93:86:d1:84:a1:bc:69:28:79:8b:d2:d0:36:2d:
0b:7e:cc:46:fa:5f:40:86:fc:e5:f2:bc:5e:d4:9b:
cd:58:39:ca:f7:3e:ea:9f:9e:dd:4c:94:af:1a:69:
d2:0f:6c:6e:05:f7:a9:b5:ea:d6:3a:8f:7c:d1:71:
c4:18:4c:ba:80:71:47:0d:09:40:ae:d6:e3:6c:11:
a8:4b:9e:d4:53:6a:81:8a:f1:53:39:22:7c:58:67:
20:c1:9b:c3:20:8c:28:0f:46:58:17:0d:d6:69:8d:
07:84:2c:c6:ba:f2:ed:e1:08:62:98:5c:7f:77:f8:
36:98:12:d6:be:f8:75:af:3b:94:b6:ae:1e:3e:d2:
ce:7a:0b:b3:68:a3:96:fe:ee:3a:04:56:cd:bb:72:
1e:81:b0:1e:6b:f1:37:f6:04:a8:a6:8a:a4:ed:7b:
93:7a:ac:3d:df:1a:0b:9b:45:c3:64:4e:25:59:6c:
a2:05:17:63:6c:6c:bc:bf:0b:e9:0a:07:2f:9c:d8:
f3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:68:3B:2D:A9:92:C6:EB:45:D6:6B:61:A8:30:33:CE:DF:F3:F2:7E
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:37:4e:c0:a2:e4:da:41:b8:03:71:b3:32:78:6f:56:79:b6:
bb:a7:0b:44:4f:9b:3b:2b:54:07:4e:83:e6:b9:d7:7a:6e:df:
1a:86:ed:49:43:f9:5e:44:79:60:8d:4b:3d:ad:1b:84:28:3e:
3c:f6:a0:70:f5:60:b7:68:7f:6c:61:2c:9c:75:8e:f1:98:21:
bb:b8:7f:e5:ec:d7:8d:a2:22:cf:35:49:f6:b6:f1:50:7f:ca:
be:76:c7:d5:89:f1:9e:2b:75:44:de:c1:52:c7:35:b4:8b:c3:
b3:c3:98:7c:c6:b6:80:d3:12:be:3d:78:a6:14:49:fd:10:29:
7c:e6:2f:5a:11:b1:5d:f1:7d:ee:c0:29:e6:66:c7:e5:76:6b:
fc:f9:36:47:b6:f1:37:36:91:11:a1:c9:50:f9:86:9b:a5:2b:
a7:92:29:3e:a4:f3:10:d6:96:b2:30:4c:65:a0:cf:a9:10:4b:
98:2b:9a:2b:af:3a:fe:f5:9b:f0:a2:e9:c7:55:51:54:72:1b:
e5:b6:f8:ce:af:37:0e:82:5f:2a:0c:b6:a3:6d:8b:c2:6e:88:
0e:33:88:a9:01:57:96:31:52:2f:cf:82:ae:b6:7c:93:a4:0c:
5e:4c:f7:eb:0b:fd:82:df:64:51:88:1c:4b:00:86:b7:cb:50:
63:1c:95:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:14:02 2026 by rpki-client