Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File: tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier: vpxcsvS1to/z73BFU93SULmVvspq9xSCtfe+YjyPrGw=
Subject key identifier: 32:62:02:D0:CC:44:F9:16:18:24:3E:01:3D:5C:EF:72:82:E8:C1:AC
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial: 01A11DF5E0E05071F2845080A41ED17FB118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number: 1A9A
Signing time: Fri 09 Oct 2026 00:00:15 +0000
Manifest this update: Fri 09 Oct 2026 00:00:15 +0000
Manifest next update: Sat 10 Oct 2026 00:00:15 +0000
Files and hashes: 1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: jMoa7hclXKMCSGVuhHzJEptIqLj8NrekblUG0WCWfEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:f5:e0:e0:50:71:f2:84:50:80:a4:1e:d1:7f:b1:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
Validity
Not Before: Oct 9 00:00:15 2026 GMT
Not After : Oct 10 00:00:15 2026 GMT
Subject: CN=326202d0cc44f91618243e013d5cef7282e8c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:c6:7d:39:c0:9f:f2:0a:5f:7f:4f:fa:c4:
0c:b1:d1:ad:f2:2e:65:17:6b:94:32:5c:57:e1:9b:
a1:7e:56:c4:24:a9:e4:d4:c9:ba:15:4e:ef:5e:3a:
19:97:b7:a3:45:cf:74:fb:9c:b8:01:57:4e:e6:b3:
11:a4:33:e2:c0:9d:74:45:7b:65:a0:1b:2c:48:20:
54:43:bf:28:d9:59:c2:e2:b2:de:3f:81:34:dc:ce:
ee:c1:94:e2:21:6a:54:0b:06:ea:cd:d4:e2:d2:9a:
bb:44:23:13:ed:6f:5e:65:39:e8:41:f0:50:50:ed:
a0:c7:b8:fd:26:fe:55:f7:75:0f:4d:07:9e:b8:65:
1d:6d:1c:c9:20:f8:5a:29:b7:19:21:37:af:2f:e4:
a4:d3:ac:6c:b9:bb:ec:11:d2:92:9a:bd:9e:96:eb:
f1:8b:68:78:b6:a7:84:c9:98:77:c3:28:c3:4f:99:
6b:6e:7f:5a:49:e6:7f:2b:6a:08:66:15:d5:73:87:
73:0c:db:4c:f6:04:9e:12:ed:1d:1f:2a:9a:94:19:
5e:a6:da:2d:c8:01:e1:34:39:f2:51:cb:b3:27:79:
75:2a:cf:ee:3d:98:4a:3a:f8:2f:20:3d:d1:9d:06:
4c:36:81:47:a4:a0:b7:c4:d3:f3:97:fe:f1:8a:09:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:02:D0:CC:44:F9:16:18:24:3E:01:3D:5C:EF:72:82:E8:C1:AC
X509v3 Authority Key Identifier:
keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3b:e9:e6:b9:bd:97:02:d4:47:66:f7:ab:09:d0:02:2b:2e:
d4:0f:4b:a2:3e:cc:23:ff:72:1b:1a:80:c9:57:d1:b1:1e:bc:
25:c4:fc:82:98:8c:ed:d3:35:67:a9:1e:1f:ce:a1:6b:f4:8e:
05:37:6d:51:dd:d5:a4:db:a9:a4:b8:a9:59:fa:d7:ed:b4:1a:
45:d4:d6:e9:57:a1:5b:3d:73:07:fe:64:ae:69:e5:49:40:3b:
73:c4:02:4c:b3:e2:99:9e:63:6f:21:19:33:85:9b:c7:06:e2:
4c:38:60:70:ca:95:82:45:e9:19:f5:c3:52:10:b1:12:d0:ce:
e9:2b:b7:35:22:71:4b:e7:b7:ba:88:ed:b9:2f:eb:6a:2e:f1:
b7:92:88:9d:a3:0a:36:48:49:6c:46:12:ab:11:e2:2f:32:06:
e6:b4:72:50:0f:f2:b3:dc:7b:a9:48:80:26:d5:5a:6c:b7:25:
6b:a0:01:bf:9c:4a:9d:7f:14:6e:6b:d9:bd:e3:7c:9e:c1:7b:
1a:01:78:f1:e1:ff:d1:cd:21:11:57:1b:ad:80:0a:c0:b1:05:
43:83:63:8d:83:b5:9f:f1:3b:36:69:d5:5a:23:26:ff:a2:73:
0b:ef:d5:a3:78:27:6b:6f:7e:00:8a:26:33:13:63:81:47:e5:
cb:55:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 10:47:11 2026 by rpki-client