Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: AogwHFVtMrfCPHjxvp6Ai7pNnAySbp2XUKrevoVPuvQ=
Subject key identifier: 01:9D:DA:BC:6D:EF:47:20:08:24:AF:0E:59:7C:C3:12:FA:71:26:53
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 01A1103B30EB845C033973405549F55C8EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0C87
Signing time: Tue 06 Oct 2026 08:01:16 +0000
Manifest this update: Tue 06 Oct 2026 08:01:16 +0000
Manifest next update: Wed 07 Oct 2026 08:01:16 +0000
Files and hashes: 1: 1-07ZjHZQ4JAS_TNnMMIuiuGHUu0.roa (hash: Wh4hYAahHN1SwbCKEhKPBAVeToja3QYblB0SUbJdjis=)
2: DnIOOoGWRavp5IqwW9ySIPh79lk.roa (hash: rq7BHpoO+/BSPP6hcjEqbUgUHas+lRS8Sfpjq0LOIgU=)
3: G2MOc8TWFDIMMJqGe6NYQzJGJRc.roa (hash: 6e+/w4+tJC0z0SxMPZdExM5pB9/UDFdAttq+Dk7OWZs=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: 0Qf3eWX54gvQ2KsTRpewPaPucFLE3ffQvSxDzp9Dino=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:30:eb:84:5c:03:39:73:40:55:49:f5:5c:8e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Oct 6 08:01:16 2026 GMT
Not After : Oct 7 08:01:16 2026 GMT
Subject: CN=019ddabc6def47200824af0e597cc312fa712653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:cd:a8:41:61:07:cc:fa:88:17:02:c0:71:
ae:35:ce:70:3e:eb:ac:04:ec:f8:d3:58:82:1c:f0:
68:4d:84:b0:0f:1c:c8:28:b3:50:ea:ad:30:5e:91:
26:0c:66:e4:e9:d5:a3:0d:2f:4e:62:b7:91:05:11:
94:24:87:3b:4d:f8:5e:93:77:f5:25:d4:02:3c:d9:
a8:51:71:b3:c3:80:7c:dd:35:ec:4e:5f:6d:81:a8:
de:73:e6:7a:4a:e2:d8:eb:e7:50:b1:10:0f:72:a7:
4b:9c:19:3a:d4:c3:76:2c:df:5c:c1:b0:8a:b1:d4:
d1:da:c7:ec:5e:a9:74:c1:95:9a:9a:cc:94:01:73:
af:1d:ad:9e:5d:5d:50:e5:29:ab:08:8e:dc:56:84:
bf:e9:61:c7:7c:8a:02:3a:f5:9d:fe:db:8b:a0:1c:
3f:6e:c0:47:8e:34:17:0b:11:d0:ff:56:b9:49:97:
fc:f7:ae:2a:2b:60:eb:31:bd:76:9a:b3:0a:15:48:
64:14:c7:9a:6a:7e:1c:d0:3e:63:1e:20:f0:65:09:
16:89:3d:23:d3:26:ea:a3:7b:71:1c:fa:c4:f2:0e:
49:cf:fe:a6:a4:5b:fc:ec:0a:49:59:a2:05:3b:93:
b0:4e:8a:e3:45:1b:5e:c9:f6:50:03:16:b0:26:67:
7e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:9D:DA:BC:6D:EF:47:20:08:24:AF:0E:59:7C:C3:12:FA:71:26:53
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cb:2e:8d:a0:67:89:4f:9e:46:54:b4:0f:02:34:d8:9f:b9:
6d:22:95:6e:24:68:8b:43:7b:ea:c7:9a:89:fd:c0:07:8e:36:
5b:ae:39:9b:2d:54:11:13:21:b4:87:94:22:57:a1:2c:55:58:
a5:02:89:21:4e:4c:4b:ec:4b:18:a7:e3:15:4d:6b:02:75:a7:
22:d3:1e:3e:fe:09:8f:55:26:47:1b:e6:99:95:29:df:53:57:
32:0f:59:e3:a3:97:f5:43:04:2e:8c:5a:7a:6a:61:02:21:1c:
89:1c:52:f5:8a:d1:9a:b4:44:2e:fe:e8:05:ff:af:33:41:3d:
dc:27:7a:34:cc:20:cc:22:85:67:ad:66:60:7a:dd:f3:64:3d:
8c:d7:96:13:d6:1e:0f:cc:af:fc:35:17:51:1c:1e:fd:82:0d:
33:a6:d9:22:2b:3e:6c:e9:30:aa:a9:ee:a1:49:60:c5:5b:53:
7c:6d:5c:06:79:f8:1d:f3:ed:17:4e:d1:56:f6:fa:d7:7a:fc:
71:e2:36:24:e2:ee:08:3f:b1:ee:84:34:a2:47:13:b5:92:28:
6a:67:3c:75:f8:d1:86:45:3f:6b:51:63:1f:32:d1:6b:eb:00:
f5:c8:51:97:4f:59:71:ce:8c:f8:55:fa:10:51:f3:6e:44:52:
d8:54:c0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:54:01 2026 by rpki-client