Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: QSlU4hG1/PLNm2CErYNergs1/yNIbv0QsUIeFicUeQ8=
Subject key identifier: 43:A5:AB:56:C7:ED:7B:F5:B2:5E:3D:13:EF:86:B0:04:53:3B:27:B8
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 01A020F9EDA9F353438E4868B9A9E007EC0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 1A17
Signing time: Thu 20 Aug 2026 21:00:45 +0000
Manifest this update: Thu 20 Aug 2026 21:00:45 +0000
Manifest next update: Fri 21 Aug 2026 21:00:45 +0000
Files and hashes: 1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: 7V6vToN5Tu5FiH+45GLpjAcvylwBwm236ExP/Jv54dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:f9:ed:a9:f3:53:43:8e:48:68:b9:a9:e0:07:ec:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Aug 20 21:00:45 2026 GMT
Not After : Aug 21 21:00:45 2026 GMT
Subject: CN=43a5ab56c7ed7bf5b25e3d13ef86b004533b27b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:91:c9:47:67:4d:60:c4:f4:70:29:28:57:ae:
2c:3c:ee:d5:e2:a0:99:c7:a8:a8:de:7f:30:ee:ae:
61:fa:a9:78:3c:41:0f:0c:bd:05:30:ab:ad:fb:7f:
e6:af:57:41:23:75:09:43:52:88:64:46:d3:be:66:
1e:d2:0c:38:08:aa:e0:f5:99:12:1a:5c:93:30:75:
43:f4:3d:64:9a:f4:fa:ef:56:de:08:dd:b0:00:d5:
7e:23:61:37:ca:7d:1e:be:b2:af:18:ca:65:41:c9:
e2:ab:6e:b7:f7:f2:5c:79:e7:80:46:a3:80:ec:a4:
84:da:3d:62:70:55:a6:73:19:f6:c2:00:b4:00:19:
12:6d:08:db:51:64:a3:a1:da:7e:3f:f9:0e:29:68:
b0:a3:5f:ec:a2:6d:88:03:f0:0f:bb:9f:dd:12:98:
1d:af:8d:b0:67:6b:bf:82:a3:46:70:26:ab:5b:01:
65:88:26:96:aa:cd:1e:18:5f:bd:b5:83:22:90:ae:
52:9b:ca:a4:c2:6d:f0:b7:21:1a:c0:4f:50:2a:1b:
76:68:ad:24:0d:7d:a2:4b:a1:ae:7a:e4:db:53:84:
99:78:9f:fc:14:1c:c7:3a:bc:95:d7:af:e6:45:48:
89:3c:ed:7e:10:31:87:05:d3:7d:46:f9:42:8d:f0:
48:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:AB:56:C7:ED:7B:F5:B2:5E:3D:13:EF:86:B0:04:53:3B:27:B8
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0a:67:46:97:71:d0:36:a2:34:ca:a6:34:aa:50:fd:d3:dd:
50:00:09:ce:d9:c4:36:57:e5:a5:1f:0b:f8:43:e6:f5:94:d4:
5c:16:e4:1c:8b:8e:88:3e:c8:76:ce:af:ba:e5:d5:7c:c3:cc:
d1:c5:51:1c:5c:f8:65:f0:02:fb:50:b9:26:22:ad:59:bb:98:
56:f7:88:67:3a:41:7b:51:85:1e:f8:69:29:9e:61:54:6a:e1:
c2:f3:ef:0b:e9:e4:67:9c:da:3e:d2:98:95:6d:47:ba:9d:f3:
7a:82:52:7c:e6:6b:f5:55:04:af:79:92:ea:a3:da:18:57:9e:
fe:62:ca:bb:4b:36:e8:a3:9f:b9:04:31:cf:59:5e:4c:cc:65:
7d:57:3c:69:9d:29:45:0c:29:29:2d:f2:ed:ad:39:00:c9:35:
ab:ae:e5:7d:37:17:ca:c1:a3:9a:20:b1:a2:cc:d6:74:2d:2a:
17:47:92:ea:d8:69:3d:2a:6a:d7:17:41:0f:f2:35:9e:1f:d9:
00:37:d8:9b:37:6f:74:88:a8:1d:b8:4c:4e:6f:bf:25:c6:f1:
92:c2:8c:e0:00:08:b6:f7:e8:70:99:84:bd:93:06:f1:a9:c6:
69:e5:ec:01:ae:12:d0:32:27:3d:7c:13:2d:0c:4c:05:ea:5b:
8d:c6:3b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:41 2026 by rpki-client