Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
File: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft (raw, json)
Hash identifier: j46RPS0rehG3uYHp9EzaJXwHtTH9++nUACeUxcicpog=
Subject key identifier: B2:97:85:BE:CE:BB:FF:58:69:1B:ED:41:0D:74:1C:76:9E:98:EC:1E
Authority key identifier: 4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
Certificate issuer: /CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Certificate serial: 01A17AA8703EE8982B3E2F754881E039CAAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
Manifest number: 1A57
Signing time: Tue 27 Oct 2026 00:00:21 +0000
Manifest this update: Tue 27 Oct 2026 00:00:21 +0000
Manifest next update: Wed 28 Oct 2026 00:00:21 +0000
Files and hashes: 1: HPyXpgvZq0DmF5lYqywyaXxXuLs.roa (hash: xJJdHEjB0zhK0uHLhPfuryAT20NVmJFJDeJjva/xFEM=)
2: Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl (hash: lzztbqVERYXdc8ziDEmaqBIvFSgux+WleG0LOP4ujiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:70:3e:e8:98:2b:3e:2f:75:48:81:e0:39:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaefc49e6cd67e25996a2c0fc57b80cc23dba44
Validity
Not Before: Oct 27 00:00:21 2026 GMT
Not After : Oct 28 00:00:21 2026 GMT
Subject: CN=b29785becebbff58691bed410d741c769e98ec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:17:ad:a9:58:f2:2d:1f:58:86:cc:bc:ec:
b5:f7:5f:e3:ca:e4:ad:d8:2f:e7:bd:da:ae:d9:68:
46:da:7f:9a:34:9e:65:89:ff:c4:07:96:b4:44:eb:
3b:7e:31:ba:47:13:7c:a5:f1:5d:7e:4c:34:f1:12:
02:61:bf:dd:cc:a6:54:bd:60:79:87:79:f0:b9:66:
a4:a4:77:d5:75:7f:ea:29:21:fd:05:4d:c3:5d:70:
24:88:dc:16:a2:04:d5:5b:5a:fc:6d:07:b0:c3:18:
31:a4:23:4a:08:52:4e:9b:ce:96:72:19:cf:ea:1f:
19:fa:1e:0b:9f:b6:d8:ae:d9:d8:4f:43:ff:74:d0:
2c:31:ab:43:09:a2:8e:f3:fd:65:a8:cf:5c:44:d3:
3e:59:b9:06:1c:e6:43:4c:0b:1d:73:53:39:63:26:
61:cf:b7:16:f0:b2:a6:d4:f9:7f:13:d7:c4:db:32:
b7:1e:ba:90:99:17:19:dd:37:28:0b:4f:30:6d:0d:
3d:a7:d2:a0:5f:ff:25:b5:86:7c:d3:d0:41:a2:cc:
1b:d7:9b:aa:73:eb:ac:c5:36:43:45:a4:bf:85:53:
5e:1f:c5:0f:96:57:5c:58:9b:37:3a:b2:43:a1:6a:
8b:23:f7:c3:39:90:e3:a1:91:a9:bd:85:a0:b3:81:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:85:BE:CE:BB:FF:58:69:1B:ED:41:0D:74:1C:76:9E:98:EC:1E
X509v3 Authority Key Identifier:
keyid:4E:AE:FC:49:E6:CD:67:E2:59:96:A2:C0:FC:57:B8:0C:C2:3D:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9f58f2-7919-4bfc-8f73-e7073cfe134f/1/Tq78SebNZ-JZlqLA_Fe4DMI9ukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a9:29:45:43:d6:11:da:5c:e5:9f:68:2d:38:f0:8a:9e:82:
3b:41:fb:41:1a:db:ab:cc:2c:01:99:64:73:4c:f9:f7:ff:04:
ba:34:68:90:d3:e8:eb:ae:f3:22:bc:d8:27:d6:7b:b5:97:cb:
bb:24:76:62:55:5d:1f:88:63:c2:28:da:a2:b5:66:ae:0e:f2:
8c:64:8b:ed:b5:4b:6d:56:b5:fb:35:fd:83:13:0e:fe:87:65:
2d:ab:f1:cd:a0:eb:da:a4:8a:0f:b4:70:49:24:a8:f9:50:95:
bf:7f:f5:96:be:f2:28:f0:c7:d8:05:22:dd:5d:6f:6b:a1:b2:
45:8a:89:cd:e2:d3:07:e6:9a:59:44:27:33:2c:15:3e:63:98:
9a:90:1a:42:af:8e:d0:e0:01:98:93:e3:fa:5c:1a:74:09:96:
d3:f4:6d:25:7d:36:0b:84:3c:0f:20:09:30:ed:a0:d4:a0:3a:
57:67:26:42:2d:30:16:97:e6:2b:61:d3:9a:96:cd:43:21:98:
bf:76:d1:6c:06:93:79:6c:34:ad:58:ed:7a:15:57:9a:bb:74:
2c:25:00:7d:a2:20:62:fa:49:17:1d:39:95:f0:9e:1c:b0:28:
a1:44:8c:18:a0:58:79:d0:f9:bd:82:19:27:a3:0a:87:37:72:
18:36:d0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:50:17 2026 by rpki-client