Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File: tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier: wdAWUi6aeTkWkV1GgQkXy5Y3RkFS+UjNUXeI5OlLbbg=
Subject key identifier: BD:A3:F5:AB:4C:F1:D9:1F:E7:96:05:D4:F4:49:61:A5:BB:54:A7:01
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer: /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial: 01A1E027F99C3D2B4412B6F99A469447F434
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number: 0954
Signing time: Sun 15 Nov 2026 17:01:18 +0000
Manifest this update: Sun 15 Nov 2026 17:01:18 +0000
Manifest next update: Mon 16 Nov 2026 17:01:18 +0000
Files and hashes: 1: q-r2zDjO2sGmoc9QswQFQyhASW8.roa (hash: RdehwxnZtuAfNN5Ll+yv9MNFac3Y26/8VjA+iUeTNWw=)
2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: zu+sJXt8sE1wUO4uupxjjlluv+hqiO5MrPd4ic9vt80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:f9:9c:3d:2b:44:12:b6:f9:9a:46:94:47:f4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Validity
Not Before: Nov 15 17:01:18 2026 GMT
Not After : Nov 16 17:01:18 2026 GMT
Subject: CN=bda3f5ab4cf1d91fe79605d4f44961a5bb54a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:df:dd:81:3b:49:2c:b1:33:8c:dc:e9:20:33:
47:0c:b3:dd:ac:dd:82:cf:ee:7c:c0:5f:28:94:cb:
b5:4f:95:0a:cd:f1:47:84:f7:8c:c7:f8:58:ca:44:
22:5d:1e:54:8b:bd:98:7e:5e:3a:ff:e1:dd:ae:8e:
0a:be:ae:9c:6d:73:b1:2e:32:0a:2c:51:8b:93:4a:
e9:46:e7:fa:88:54:8f:46:2c:84:32:55:21:8f:1d:
e8:01:77:7b:e1:5c:fb:b1:81:01:92:be:b5:a0:40:
be:ae:c1:7d:be:0f:f8:70:f5:aa:f6:ca:dd:93:fe:
32:b5:2e:bc:39:bc:08:4b:55:1d:93:06:30:7e:ea:
3f:99:d6:8f:73:63:c5:00:a4:3c:d7:73:af:10:86:
56:73:6b:00:16:52:f3:40:23:bd:ed:b6:38:8a:ad:
13:e2:d6:f1:d3:24:d4:b2:51:3e:d9:43:58:d1:1f:
26:26:fa:9b:16:c1:1c:13:16:b4:28:16:fc:d6:b7:
f1:7e:5f:69:61:d9:ea:05:82:b3:73:91:d6:5c:7b:
86:8d:68:d4:22:95:1f:22:f5:be:10:0e:3e:d5:80:
1b:08:59:ed:ae:7d:93:af:b7:d3:7e:3a:14:2c:b4:
fe:40:cd:cf:1f:57:69:cf:7e:79:20:c7:95:2a:8f:
03:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A3:F5:AB:4C:F1:D9:1F:E7:96:05:D4:F4:49:61:A5:BB:54:A7:01
X509v3 Authority Key Identifier:
keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:1a:87:e1:89:bf:7d:fa:d2:5a:32:da:f7:a5:39:3d:17:
b6:ab:14:aa:8b:82:c7:de:9f:7d:80:3b:09:80:6a:43:f3:30:
80:ad:f7:cb:7e:34:22:e5:ef:dc:3a:a0:6b:6e:bd:4e:23:65:
23:45:c8:0e:59:8e:91:fd:ed:e5:7b:79:d9:01:8b:4d:d0:b4:
81:12:f2:ff:48:a4:27:98:78:5c:8b:39:f3:9a:12:1d:8d:21:
b4:d0:8c:f8:0c:5b:45:d9:93:fa:c5:d5:25:6b:b0:df:f8:17:
77:03:f1:6c:c0:34:59:71:73:83:cf:cf:4c:f1:c9:32:4b:df:
df:b0:21:9b:af:aa:bd:84:51:6d:47:d5:6b:7b:a1:2f:75:40:
8b:7a:8a:c5:7a:da:a0:88:8f:fb:09:19:ed:93:7f:71:2a:d4:
ea:7e:9d:6f:42:b5:27:1e:d8:31:92:eb:65:29:28:58:f8:e2:
34:9a:1c:3e:3a:ac:0f:bf:e0:0f:1b:55:c1:cd:d6:d7:87:91:
06:d2:d0:c8:40:2b:86:6f:eb:13:81:ad:68:e3:c7:45:4b:e4:
e2:c1:6c:51:7b:67:04:ba:be:6b:7e:9a:c4:9b:2e:11:37:20:
4a:44:ae:f0:70:a1:23:b6:a7:52:45:ce:77:37:4b:ca:b2:ba:
ef:f7:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:54:30 2026 by rpki-client