Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: eW/KQjhcBdx4nGsj0Ki2/dMgV+gu1f4ZJ2CIdgyI0/o=
Subject key identifier: 5B:0D:B2:83:A5:FB:A9:F7:9C:DB:05:73:B9:21:31:93:55:9F:EF:1B
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 01A08AFA426C50117165CC4747071AE2E41A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 11:00:51 +0000
Manifest this update: Thu 10 Sep 2026 11:00:51 +0000
Manifest next update: Fri 11 Sep 2026 11:00:51 +0000
Files and hashes: 1: OivHzY1Owmf_t0MGp9f5pENVwKc.roa (hash: AGN5cPkAaLuiB5y5JBq+hIUbcPiUDqUPHZPobtq+scE=)
2: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: Zb7byHii6PG6hzb3yrOuPengNmsiAunxTCqCYHPa+dM=)
3: x3MPjpAMv8jy4dhfPiDorj_3tLI.roa (hash: 0SB+6P5HbotJTZwxWuM7rwLO4yE+FQC9GnNEzbQTjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:42:6c:50:11:71:65:cc:47:47:07:1a:e2:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Sep 10 11:00:51 2026 GMT
Not After : Sep 11 11:00:51 2026 GMT
Subject: CN=5b0db283a5fba9f79cdb0573b9213193559fef1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:1b:1a:b4:9e:85:32:34:f1:1c:f7:74:ae:
ce:6c:0b:4f:27:2c:90:ec:8b:19:70:a9:22:a7:cf:
b5:d2:d3:54:71:b9:3f:9d:98:6e:e2:2c:c8:c0:80:
da:e0:32:49:7b:c3:1a:b1:67:95:f9:4f:ad:87:d4:
a1:36:5b:aa:4f:c4:99:15:29:8d:5f:6c:c2:91:7d:
68:df:fb:52:a2:be:35:54:14:48:82:65:11:a9:d1:
02:2b:09:30:0e:1b:64:dd:fc:29:da:6d:94:2e:7b:
89:37:ff:8a:5e:7e:6d:53:70:a2:c4:ca:4d:94:0a:
76:34:a7:fe:ec:0d:4a:1e:70:fa:32:c3:54:91:b9:
66:71:f7:8f:59:af:4e:16:b7:15:7f:3b:4a:6c:93:
96:f9:99:ca:45:15:11:31:87:03:97:f1:60:f6:cf:
52:f8:5f:0c:b9:f1:0b:44:14:a5:f0:95:f3:9c:58:
7d:36:f9:02:5c:47:6b:18:9b:94:2c:18:6c:65:94:
e6:44:25:58:bf:3b:23:29:55:9c:52:40:17:9f:b3:
70:df:28:de:39:fe:62:6c:01:ee:c1:fa:cc:4c:8e:
78:90:ad:15:a6:8c:bc:10:a2:7a:71:b5:10:2d:b9:
00:1d:fd:fd:5b:0e:96:db:30:81:21:b7:5f:07:5e:
9f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0D:B2:83:A5:FB:A9:F7:9C:DB:05:73:B9:21:31:93:55:9F:EF:1B
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:43:1a:33:3e:4f:18:89:8d:a7:99:2d:ac:c3:21:de:c1:d9:
9f:be:c9:5f:b7:c2:82:cd:4a:80:b8:73:13:35:ca:7b:37:fb:
b6:1e:ee:5e:45:0b:62:b5:b7:f0:d5:78:e5:54:80:db:bc:cb:
86:40:7a:b0:e5:e8:02:28:67:b3:a9:7a:ef:f4:2b:fb:2d:ee:
0e:eb:ba:d2:32:b9:f4:63:74:03:01:8f:ae:ac:cb:21:3a:82:
c1:9b:d6:50:52:33:64:54:0a:24:a0:68:9c:38:2c:01:94:9b:
6b:59:73:35:56:37:70:31:68:19:60:ce:de:b6:e8:ff:bb:28:
58:ba:63:04:6a:a9:c3:d3:77:fd:f6:0b:99:04:b8:93:6f:db:
a4:b7:e9:f7:25:71:a7:4b:b8:7e:70:45:87:35:41:16:7e:d7:
ec:50:1a:75:4a:c0:6e:2b:30:25:11:56:db:70:86:3e:3a:d7:
a5:6c:6f:4d:6e:ac:7e:07:f3:85:58:7e:95:34:a6:55:c7:fa:
40:ce:41:49:bf:14:c6:be:97:7e:30:d3:fa:72:02:88:ee:d3:
a2:64:2b:2e:84:f1:47:9c:54:65:24:58:28:e1:bb:fc:0f:52:
7b:b2:09:eb:f5:92:cc:70:a3:b2:5a:3c:e1:36:76:05:5e:dc:
26:9b:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:30:53 2026 by rpki-client