Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
File: TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft (raw, json)
Hash identifier: OcOMDYsadwxIYvvwTN+7sifqvOkqFaCwCwu94DfYSs8=
Subject key identifier: 48:56:FD:BC:61:71:17:95:6E:7E:78:BB:66:6D:5F:04:D0:1D:1C:94
Authority key identifier: 4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
Certificate issuer: /CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Certificate serial: 01A089B0C9E41753E4A7B36C0B4F205DFBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
Manifest number: 044B
Signing time: Thu 10 Sep 2026 05:00:59 +0000
Manifest this update: Thu 10 Sep 2026 05:00:59 +0000
Manifest next update: Fri 11 Sep 2026 05:00:59 +0000
Files and hashes: 1: LnjNGcMyH3MeERFj_pC3gRzTFnU.asa (hash: qASxAPP9ucQL4oyglFA6dDLN1CVjgDXdRMKgSKCNRhg=)
2: TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl (hash: lxS/UjjW8bkobmc1QAQuTe+YCS9sORHeczpWEd93ukQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:c9:e4:17:53:e4:a7:b3:6c:0b:4f:20:5d:fb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cde7b38beaf3c63879ff930973d163f1e88e7e6
Validity
Not Before: Sep 10 05:00:59 2026 GMT
Not After : Sep 11 05:00:59 2026 GMT
Subject: CN=4856fdbc617117956e7e78bb666d5f04d01d1c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:a2:2c:9a:ad:8f:8b:d8:31:51:f6:51:bd:
6a:e0:26:e7:60:c2:c8:17:b1:2f:a3:8d:c9:be:53:
92:25:04:82:03:d9:53:ca:34:46:66:82:d7:8a:3e:
cd:6c:59:91:7c:60:69:3f:52:e1:a4:52:be:25:05:
d4:27:60:3f:49:d6:58:05:ec:8d:f7:92:a9:09:1b:
c5:e1:57:0f:78:75:d4:33:7f:73:46:62:73:19:3a:
df:69:b4:bd:e3:38:05:8f:35:ac:8d:c6:4c:b9:ba:
4d:c7:6b:c8:a1:3c:5e:1e:94:eb:fa:9d:05:73:d7:
ad:35:f4:4a:88:59:0e:9a:1c:fc:86:0b:4a:ff:55:
39:04:28:69:11:5d:15:b1:db:da:5f:09:91:3c:fe:
05:b0:c6:80:3c:61:12:25:5f:24:7a:14:ca:cb:c2:
f9:0c:7f:0d:16:da:2a:67:c1:1e:f3:31:68:26:98:
e5:e6:51:7c:1d:23:1e:62:20:b3:96:ef:2c:2d:98:
4a:cc:6d:00:a4:d2:71:ba:5b:dd:bf:e0:2c:0c:d6:
11:42:8e:bd:b4:ba:59:c8:81:3a:bb:9a:fa:0a:84:
d4:1e:1a:bb:74:81:db:68:a6:b8:76:30:a3:dd:30:
b2:05:bf:3b:e8:8e:0b:c6:40:41:3c:1d:65:99:8e:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:FD:BC:61:71:17:95:6E:7E:78:BB:66:6D:5F:04:D0:1D:1C:94
X509v3 Authority Key Identifier:
keyid:4C:DE:7B:38:BE:AF:3C:63:87:9F:F9:30:97:3D:16:3F:1E:88:E7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN57OL6vPGOHn_kwlz0WPx6I5-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/32619c-76a0-4a5d-b5d8-375c6b689e2f/1/TN57OL6vPGOHn_kwlz0WPx6I5-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7d:da:4f:c3:f3:b3:07:b7:dd:90:3d:f0:ba:32:72:65:4f:
8b:76:98:40:2c:fb:de:5b:74:b6:32:7d:fa:c1:da:75:b0:29:
ac:85:ed:26:63:31:72:d9:1c:e5:54:85:4f:77:b5:f5:d6:f2:
fe:3d:ff:5c:61:0c:11:20:16:8a:c3:5f:1c:d8:a4:7b:4f:81:
90:6c:92:1c:78:53:08:26:20:b5:ad:5a:e7:83:d2:3c:5b:b8:
67:d2:3f:ff:2b:47:bf:d9:ef:e8:4e:7f:e7:e1:ee:a8:25:d5:
58:bc:a1:f4:36:82:77:be:08:1a:fc:5b:aa:b1:1b:d8:46:93:
dc:fb:a1:5d:e0:4e:bd:86:ab:4f:be:cc:9d:17:6c:33:f9:a2:
fe:53:41:cc:29:73:0d:14:f3:7c:63:75:f2:61:cf:b0:18:5b:
fe:25:f4:6f:e8:56:3c:91:18:95:a8:2d:41:66:9f:4c:48:11:
d7:9d:1b:04:92:1d:01:68:70:54:98:11:23:5c:47:a3:ee:aa:
e6:57:73:d6:3b:c8:0e:7b:e2:29:f2:cf:a4:ca:92:02:ed:4b:
40:ff:f1:df:b2:26:59:fa:fc:64:48:84:a5:9e:28:30:62:8d:
b7:29:18:1b:10:f7:66:11:e8:b9:ee:5b:91:2d:56:fc:3f:8c:
83:cc:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:19:02 2026 by rpki-client