Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
File: TKha1Dt7R-dSh4MHGEeU1woCdmw.mft (raw, json)
Hash identifier: vIyhEaO02gIohc+PXyDL77Qb7CL3esEk7Txu3f6KD+U=
Subject key identifier: 8F:D3:E1:C4:DE:24:31:31:95:8E:8C:A9:94:B3:C5:5D:5E:8C:58:81
Authority key identifier: 4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
Certificate issuer: /CN=4ca85ad43b7b47e752878307184794d70a02766c
Certificate serial: 01A0BC1D31FE4B458B35F7BD264BE49C2A2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
Manifest number: 05E7
Signing time: Sun 20 Sep 2026 00:00:24 +0000
Manifest this update: Sun 20 Sep 2026 00:00:24 +0000
Manifest next update: Mon 21 Sep 2026 00:00:24 +0000
Files and hashes: 1: 1-w3-HT-b4gN55Ez02d0Ltxhd_18.roa (hash: SZE3EWQBz3QYJjq31FoNPzS9VUyILcF5vCKxR6HmvGg=)
2: TKha1Dt7R-dSh4MHGEeU1woCdmw.crl (hash: GOyWBlT2mXocL3Sa4ADLOEaPm9V7HSr6ocDRXHb2WuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:1d:31:fe:4b:45:8b:35:f7:bd:26:4b:e4:9c:2a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca85ad43b7b47e752878307184794d70a02766c
Validity
Not Before: Sep 20 00:00:24 2026 GMT
Not After : Sep 21 00:00:24 2026 GMT
Subject: CN=8fd3e1c4de243131958e8ca994b3c55d5e8c5881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:e3:c8:20:c4:cf:95:5d:c3:b2:8d:ec:1f:
27:8e:c4:d7:cb:07:e2:3a:b2:66:c4:24:87:73:ab:
41:e4:62:d7:67:7b:fe:e4:da:4f:a8:7a:c1:9f:ad:
87:4b:f7:c3:6f:f8:c8:6b:51:1f:24:da:e7:10:e0:
90:01:fe:0a:bb:b5:f1:c3:eb:f0:8a:98:3e:90:e5:
3d:99:21:30:28:7c:5e:d7:81:13:37:25:7c:36:25:
1f:4f:59:8b:61:1e:a5:ed:f4:d6:c7:74:e0:7e:62:
a1:72:dc:1d:bf:63:af:54:62:21:64:db:6e:85:1d:
87:f2:64:e0:c9:8b:10:33:61:09:31:1a:7a:b0:c7:
c0:7b:2e:51:7d:0d:e8:55:08:e8:29:d6:35:f5:42:
3b:f8:79:91:df:e1:c9:42:d1:99:4c:f4:48:f9:9e:
81:ba:96:db:88:25:72:c3:47:a3:25:5f:a4:b3:76:
0d:e8:ea:36:3a:2d:ff:dd:d8:c5:ad:4e:42:3a:bd:
1f:41:49:3a:07:a1:aa:c4:8d:f5:e4:a5:c7:7f:eb:
ec:a4:ea:d7:22:a9:51:8b:8b:5f:c1:d1:56:33:3b:
99:82:67:66:73:69:f3:3e:12:2a:c9:de:b9:db:eb:
55:93:87:7b:6a:fd:de:13:3c:2b:b4:1a:f3:46:d2:
72:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:E1:C4:DE:24:31:31:95:8E:8C:A9:94:B3:C5:5D:5E:8C:58:81
X509v3 Authority Key Identifier:
keyid:4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f8:f5:a1:17:c0:d7:07:6f:01:db:47:c2:2e:67:75:91:4b:
3e:35:a2:74:cc:80:31:f7:47:ac:8a:f3:1c:04:1b:13:02:3d:
4f:12:70:23:e6:de:39:e9:83:bf:75:34:e3:72:d9:14:d6:79:
38:a8:18:6b:7a:bd:c6:0c:0f:d7:b0:02:e1:0a:3a:7b:52:8c:
15:be:6b:05:eb:2b:4a:0c:87:20:2a:c0:09:a8:b5:74:e0:b3:
7d:93:4c:5c:62:81:d2:2f:82:f6:aa:4f:11:c6:1c:2b:80:26:
b5:a3:be:4f:9c:83:cc:65:00:74:95:b1:b1:3b:b2:26:60:d6:
d4:b8:fd:11:d2:4a:ab:95:81:52:e2:17:ca:0c:1c:46:84:02:
99:1d:75:71:0a:b2:f5:86:a0:6d:0b:af:e3:e8:99:99:35:ab:
4c:6a:13:5e:91:15:ff:eb:75:6b:a8:a4:aa:0b:72:ea:ba:fd:
10:2a:6e:54:6f:bf:85:a3:06:79:67:d9:03:64:e5:79:43:07:
66:1b:96:f6:89:26:ff:24:34:46:2c:70:b1:93:73:e9:ce:30:
a4:2f:b0:5a:fd:9f:b0:2f:4e:1c:09:80:b8:fb:bd:9b:11:b9:
84:16:be:4f:5a:82:76:c7:b5:93:20:94:4a:6a:7e:8f:b6:78:
c9:fa:0f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:23 2026 by rpki-client