Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: LmkdyZUCEsOBpnZHgA+ijmGfepdEX4ur5DzhCtHlFE4=
Subject key identifier: FE:34:37:C0:B9:34:F9:8D:28:BC:6B:CD:DD:3B:B5:16:55:17:63:D3
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 01A0F531B89D82A5F39E1F86BE241E66A181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 02:01:11 +0000
Manifest this update: Thu 01 Oct 2026 02:01:11 +0000
Manifest next update: Fri 02 Oct 2026 02:01:11 +0000
Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=)
2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: 7/Nxqn7p+AKBXOSoLSZzeBNtxmvrDFhQrqBsc/MLgNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:31:b8:9d:82:a5:f3:9e:1f:86:be:24:1e:66:a1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Oct 1 02:01:11 2026 GMT
Not After : Oct 2 02:01:11 2026 GMT
Subject: CN=fe3437c0b934f98d28bc6bcddd3bb516551763d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:30:15:8c:19:c1:5b:ec:0b:a5:72:4f:2f:bc:
8e:86:5b:53:6e:12:62:ef:e1:7b:c2:92:6c:5a:23:
93:ae:e0:2e:2f:8c:9f:f4:4f:b1:ef:21:0a:10:9b:
6f:4c:ce:7a:60:00:4a:f5:b8:2c:8f:28:11:5f:c2:
25:68:ed:77:5e:07:d4:f9:80:f8:1a:47:dc:e9:56:
7f:a9:62:85:40:83:cb:45:9d:52:b2:7c:2e:44:96:
6b:d6:81:1c:eb:c6:da:5e:1d:cd:ea:5c:22:22:d5:
9f:97:5f:9f:bc:8b:14:35:77:98:35:61:5f:53:6a:
ef:22:06:8d:57:4b:bf:95:cd:d2:d1:24:f2:48:77:
1a:38:18:8f:66:99:59:c1:c8:f7:7a:96:11:e6:74:
98:f8:5e:a7:72:3c:46:bc:f4:ec:de:d0:45:f8:bd:
c8:bc:6a:08:18:e6:73:37:c8:0a:2b:af:05:fb:bf:
1f:1f:31:61:a2:5f:64:9c:48:64:3c:93:29:4a:48:
82:bc:ab:bb:df:7a:ca:f1:50:e3:e9:aa:3e:54:db:
5f:bc:a3:a8:39:a0:38:4d:97:98:fd:1b:85:2a:89:
2d:75:67:38:f3:09:ef:22:f9:e3:23:ad:11:bd:d9:
93:58:5d:d7:c5:54:b7:b2:79:41:40:1a:6a:0c:cd:
4e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:34:37:C0:B9:34:F9:8D:28:BC:6B:CD:DD:3B:B5:16:55:17:63:D3
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4c:0c:cf:72:60:9f:1a:2a:f9:e6:52:b2:26:67:b0:b9:92:
66:f8:ac:1f:6a:6d:64:f2:50:1e:66:d8:c0:b5:66:03:fa:0e:
73:24:fc:8a:3b:c0:ba:70:ad:ac:b9:6f:e2:34:35:6f:5c:99:
15:de:4c:19:e3:c4:a9:9d:c0:16:c1:48:dd:1d:0c:3a:ab:87:
5b:27:86:21:c7:50:1b:32:05:d2:ee:10:13:56:c6:32:92:df:
8c:69:ab:66:3b:4f:b5:cd:8c:10:99:23:11:91:a0:4b:ac:aa:
ae:1f:b4:46:f3:7b:75:20:90:2b:0a:dd:5d:c7:53:4a:78:b0:
16:21:f2:33:c9:e1:69:39:8a:33:b8:93:0a:51:ad:7e:f5:de:
77:98:24:f1:76:b9:e1:db:13:b2:e4:5e:17:51:ee:86:91:01:
74:de:99:ee:5c:a2:0b:7e:fb:e7:14:cb:2b:05:51:49:b0:d4:
4f:93:43:4e:e3:f6:08:f7:c8:61:a4:90:3f:30:be:58:4a:c8:
00:69:38:3e:4e:60:5e:44:59:78:49:72:46:9f:87:bd:a7:16:
dc:62:71:a1:bc:05:c3:fb:52:69:a5:05:79:27:9c:26:31:1d:
c1:d2:41:70:66:1b:e7:db:f2:7b:d1:92:a5:80:8f:95:40:75:
07:58:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:11:50 2026 by rpki-client