Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: 24BUs/q63tyy3FWw+qLpH06Nc4/OZh2UABoTXU/tuAo=
Subject key identifier: E3:E7:33:98:3A:A7:89:B2:47:9E:9D:FB:E7:A5:2F:D2:6F:04:9F:CA
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 01A13CA5A8509E35E64DAC0AAFFBD8E1B8B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 1AA6
Signing time: Wed 14 Oct 2026 23:00:51 +0000
Manifest this update: Wed 14 Oct 2026 23:00:51 +0000
Manifest next update: Thu 15 Oct 2026 23:00:51 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: xRd1uOa4doc5/sWLFvjm3KAWdK8XGlLc0z32+u+EGec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:a8:50:9e:35:e6:4d:ac:0a:af:fb:d8:e1:b8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Oct 14 23:00:51 2026 GMT
Not After : Oct 15 23:00:51 2026 GMT
Subject: CN=e3e733983aa789b2479e9dfbe7a52fd26f049fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:be:ce:eb:78:fc:a4:00:c2:60:ce:f0:39:
ab:a1:72:52:21:be:81:d4:4b:9a:6a:e7:c7:4c:67:
c2:02:b7:65:2c:81:27:34:1c:84:32:17:e7:9f:a3:
cf:a8:a7:c5:fa:0f:ad:b1:4f:bc:25:8d:ee:c8:eb:
d3:a2:ae:12:07:ba:db:ba:ae:40:8a:4b:c1:54:04:
1d:06:57:f9:9c:02:9e:8f:8c:ab:20:f5:c2:0b:ba:
cc:f9:65:95:4f:77:1e:37:fb:f4:59:63:b6:84:e4:
38:83:fa:2e:fb:91:a6:5d:49:c1:48:a8:52:50:88:
c7:51:02:48:2d:20:5d:6f:35:12:82:91:e0:ff:8b:
f3:65:d2:58:cf:11:db:8d:b2:9a:08:1f:f7:2b:e4:
08:ce:bf:c7:c8:d3:45:b0:83:bc:1c:41:c3:89:05:
4d:0e:fd:b8:30:a5:67:e4:e4:3f:36:e4:36:b4:d8:
e1:f7:b2:62:f6:0c:49:55:12:4c:d7:cf:09:ae:76:
35:af:fe:a0:64:fe:f8:a5:aa:03:de:a1:2d:c7:bc:
61:f4:7a:56:36:cf:fe:4a:92:c4:1c:fc:0c:e8:d3:
7a:44:9a:68:7f:dc:99:38:93:5e:ea:12:e0:1a:6f:
ff:cb:48:2a:aa:a1:2a:2a:c8:2c:74:aa:ef:b7:d1:
19:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:33:98:3A:A7:89:B2:47:9E:9D:FB:E7:A5:2F:D2:6F:04:9F:CA
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:3e:e3:dc:6a:de:16:9c:e2:4c:79:c5:0c:ca:56:fb:cf:
18:4d:d8:45:86:67:1e:2f:63:6b:e0:a7:49:40:23:33:de:e4:
66:d8:6d:52:4d:23:e3:21:09:33:de:b3:c0:c2:1a:12:38:7e:
ee:1a:d3:17:ac:3a:0a:86:ec:8f:7b:b1:7c:be:ff:b1:2b:40:
98:4e:2e:f9:4b:e6:aa:b7:12:00:32:73:8e:4b:ab:f1:61:d6:
66:98:31:cb:07:9c:38:f1:a0:eb:07:a3:d2:b2:e0:32:56:88:
d4:9d:b9:0e:5c:3b:46:4e:38:b8:1b:92:68:c1:75:c4:33:d9:
77:7d:1f:bd:f0:f2:cf:b2:49:b8:9a:ec:1f:45:9a:70:46:10:
57:aa:30:82:7c:45:94:cc:fe:af:21:1c:f2:e9:b9:e4:d9:27:
3b:1a:53:4a:84:17:b6:31:11:c7:8b:a6:09:18:d5:2c:cb:5b:
5c:85:63:5e:4b:d5:ce:13:e1:e9:e1:04:9a:cb:89:aa:62:1c:
1f:6b:1f:a9:01:e4:c6:3a:83:a9:a8:d8:de:95:e0:8f:11:3c:
c9:9a:23:89:2d:fd:e2:4d:22:f7:51:6e:6f:8b:2d:ae:6a:fe:
b1:2f:7b:59:4c:55:96:5e:72:49:97:4f:a6:0d:55:74:ed:6c:
61:b2:c1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:46:58 2026 by rpki-client