Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: uPUfJ4mxj/JJqettP9MoNCCZdbHQcbpXUGvM9GRvBQ0=
Subject key identifier: 1F:D2:2A:FA:89:F5:AD:9F:77:B8:F5:AD:10:40:53:05:B6:FA:C8:FE
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01A0E0621C5D8377AD00C4A06055089E71BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0F2A
Signing time: Sun 27 Sep 2026 01:02:01 +0000
Manifest this update: Sun 27 Sep 2026 01:02:01 +0000
Manifest next update: Mon 28 Sep 2026 01:02:01 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: ZDVDm/OQisGqhm07ubPRVv9Fl6lfVAzN26cn+5MMesE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:1c:5d:83:77:ad:00:c4:a0:60:55:08:9e:71:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Sep 27 01:02:01 2026 GMT
Not After : Sep 28 01:02:01 2026 GMT
Subject: CN=1fd22afa89f5ad9f77b8f5ad10405305b6fac8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:37:11:0a:c6:5f:6d:d0:1b:99:8b:c4:31:6b:
1d:b8:3a:99:89:fb:01:cc:ca:99:21:5a:d2:06:95:
31:16:ee:ad:d4:3b:78:6e:20:dc:a5:df:b7:da:51:
39:bc:8a:91:23:e2:0e:d7:33:e3:92:32:7d:8c:c6:
a3:c4:52:e5:a0:99:ef:30:b1:c9:97:5a:1e:ae:b1:
e7:88:9a:89:2a:0f:18:df:2d:4c:43:a7:f2:ec:78:
6f:a4:94:4b:a1:6a:cf:f2:e8:78:ab:a9:93:22:18:
fc:2c:6c:d9:ac:87:73:5f:5c:69:c7:f9:88:f5:fa:
ab:ea:e7:54:01:60:82:19:21:b0:ea:43:41:06:4a:
81:10:44:59:53:83:dc:db:a8:a1:86:ca:0e:5c:e1:
cd:51:4c:96:e6:d3:d4:d1:5d:55:bb:6c:3e:eb:d7:
67:47:b0:8d:c7:9b:fc:af:8a:66:87:87:d1:8a:b2:
ab:24:98:67:6a:03:18:c0:03:3b:ee:3c:45:b9:a2:
42:ab:2b:af:b6:dc:6d:f2:94:18:ef:d5:7d:03:67:
cf:65:fe:29:78:5a:f5:e8:5c:47:f8:f1:74:33:e4:
f5:eb:fe:09:9e:75:f8:01:32:44:25:97:c3:0a:ac:
09:20:c4:3b:78:fe:60:f5:57:80:3d:a7:9f:f1:77:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:2A:FA:89:F5:AD:9F:77:B8:F5:AD:10:40:53:05:B6:FA:C8:FE
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:60:39:e9:70:9a:2d:de:c2:e0:59:7a:06:53:17:e4:b7:1e:
52:44:1e:19:a2:92:9b:1e:ea:5c:30:16:10:6f:74:7e:21:6d:
3e:ed:48:f0:62:0c:f5:ff:5c:c3:5e:38:e4:71:27:d2:c0:5f:
61:7d:fa:00:6e:3a:62:70:f2:a4:ab:0d:1f:61:56:14:bd:b9:
9e:82:e7:d3:59:c6:50:3f:2c:74:f6:de:d3:f3:12:85:88:3e:
1b:e4:34:93:33:bd:d9:77:bb:4a:59:02:8d:9f:b6:a7:d7:44:
7e:cd:02:2c:ff:dd:6a:fa:66:92:59:b6:0c:03:c0:2e:f7:a5:
22:78:9a:fc:c7:b7:6a:0f:a9:c0:22:5a:26:6c:45:32:76:5f:
0d:c7:3a:a7:c4:8f:08:70:da:77:10:78:e0:76:a1:8e:db:e8:
66:98:6a:6d:a1:39:66:10:22:b2:0a:16:9e:46:83:1c:a1:ad:
dc:75:19:08:90:3c:00:25:cf:39:49:d4:b2:f3:ea:37:9b:a1:
dc:0d:ea:50:77:55:1e:96:bf:d0:3c:fd:0e:ac:cb:80:0b:4d:
d6:ef:87:21:ba:97:52:ed:61:f8:28:30:a7:0d:b5:74:15:5a:
3a:cd:2d:4f:a3:52:52:c2:ad:35:a0:dd:1b:bc:8d:81:99:ae:
24:b8:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:11:52 2026 by rpki-client