Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
File: TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft (raw, json)
Hash identifier: hPr045mcAlRW2VhWAdofra9SiyaMP6RdaMbyerT6/H4=
Subject key identifier: 9A:96:CF:FC:24:6E:22:21:CB:5B:C0:41:62:63:10:DA:81:54:E9:B9
Authority key identifier: 4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
Certificate issuer: /CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Certificate serial: 01A1005A9738FBFB5685FE4B3F0E867CBD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
Manifest number: 0C1F
Signing time: Sat 03 Oct 2026 06:01:39 +0000
Manifest this update: Sat 03 Oct 2026 06:01:39 +0000
Manifest next update: Sun 04 Oct 2026 06:01:39 +0000
Files and hashes: 1: NSzxR15lxLwAdc7Ga165-6mKacc.roa (hash: 3N9qBcothKO0rosVFxeggNkLbRm7QTKDO+BXyY2NEkk=)
2: QXNEa0rLZxlRlsB-8HuZ_VSJWP0.asa (hash: 6rji+pOpggUWT3pycZRN/hU8sc0Lzb5vIQ3TtjqmA1k=)
3: TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl (hash: MTnaw5wRaAibhSJcgZjwpdRKFEZogEhRQB2YqYLQHRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 06:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:5a:97:38:fb:fb:56:85:fe:4b:3f:0e:86:7c:bd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3b88cdb13f3eb12a9be54ab19baa90559b396a
Validity
Not Before: Oct 3 06:01:39 2026 GMT
Not After : Oct 4 06:01:39 2026 GMT
Subject: CN=9a96cffc246e2221cb5bc041626310da8154e9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:52:04:2c:fb:34:2d:b3:89:dc:81:b2:b8:
ea:04:d1:b8:ec:2e:1a:41:c5:1a:c0:e9:d9:ca:ba:
10:05:fb:12:f0:82:e8:cf:88:e7:f5:61:d8:6a:f9:
2c:df:05:a0:9c:18:b2:29:d8:ae:b0:39:8e:7a:17:
bb:bb:a5:8b:42:69:a0:f5:02:d8:5d:20:4b:2e:bb:
4a:b1:6b:3b:7a:83:b3:5c:bd:0c:54:62:74:ee:07:
21:30:f1:5f:17:31:21:a6:5f:b8:86:00:74:b2:cd:
fc:31:4d:f8:fb:13:0f:8e:79:29:ab:46:e5:a9:3c:
53:b2:58:55:23:d5:38:9a:46:80:c5:9d:28:56:59:
d0:e6:03:1a:7b:e5:7e:c7:7c:91:48:d5:94:21:a5:
fb:98:af:3b:43:26:fd:5c:c8:9f:55:b7:67:74:4e:
80:2a:fc:f1:f3:48:3d:d6:43:fd:a3:08:c0:26:6b:
11:78:d6:fc:45:17:18:9d:ce:ab:b4:33:b2:74:43:
bb:1e:0b:86:2e:63:3f:3a:49:53:09:dd:db:e7:3d:
18:7f:02:43:c3:6e:53:e7:fe:40:71:84:a6:65:01:
5b:94:2b:0c:5a:b9:3f:9d:8c:c5:bb:ff:d2:5c:67:
4e:5f:b1:12:e6:f2:b3:a7:01:a1:d4:d6:75:a0:5d:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:96:CF:FC:24:6E:22:21:CB:5B:C0:41:62:63:10:DA:81:54:E9:B9
X509v3 Authority Key Identifier:
keyid:4C:3B:88:CD:B1:3F:3E:B1:2A:9B:E5:4A:B1:9B:AA:90:55:9B:39:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDuIzbE_PrEqm-VKsZuqkFWbOWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ec5584-6618-4b12-a11c-3055cb729bcf/1/TDuIzbE_PrEqm-VKsZuqkFWbOWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:a4:a6:1e:cc:1a:19:16:d3:7a:11:1f:90:7d:ad:b2:f0:fb:
53:68:f7:50:fb:09:20:65:e4:d0:09:65:ec:48:54:fe:55:d2:
ca:49:ab:81:59:01:95:c4:3a:63:d4:a0:23:0c:b9:93:17:d9:
1a:8e:32:b3:34:64:d0:ff:00:0d:44:85:f4:dd:57:38:05:c9:
7a:36:86:b1:dd:4f:5e:39:7a:57:9e:8c:3d:9b:d3:0a:3f:e5:
15:6a:be:30:4d:1b:67:ab:d0:83:a3:95:a9:46:1d:7e:9a:5a:
ac:1d:38:6b:6f:49:e5:e2:d2:16:97:71:78:34:3f:92:61:1a:
35:ca:97:64:f6:90:f6:54:cb:b4:f0:29:70:ce:25:03:83:61:
00:82:79:29:67:41:79:6d:55:9f:15:5c:0b:19:30:74:b7:10:
5d:00:80:9c:14:bb:f7:d2:45:21:eb:f7:ff:69:56:96:ea:14:
82:10:f0:b9:01:2d:bf:01:3e:3d:f8:8b:f0:1c:08:f4:50:03:
f3:a1:8b:fd:69:ce:c9:d1:37:34:47:91:56:5a:e6:16:0f:8c:
ca:ea:1d:c2:80:7a:31:b2:8d:45:2c:d2:9f:39:4b:1e:1a:aa:
a7:33:5f:26:29:ad:78:ac:de:02:91:29:b6:89:48:1e:bd:57:
8b:1b:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:34:03 2026 by rpki-client