Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: tKNvLlWPiYxgi9Vv0zapZiNLd/B2OThV3QMAPYNCqaU=
Subject key identifier: 04:6B:D4:10:58:1C:A2:06:9A:BD:27:5C:49:DB:F3:74:E0:D4:68:07
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 01A165A1EC0D29E7F9C0B1AF80488D64A925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0A08
Signing time: Thu 22 Oct 2026 22:01:12 +0000
Manifest this update: Thu 22 Oct 2026 22:01:12 +0000
Manifest next update: Fri 23 Oct 2026 22:01:12 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: HLoISw1srYHzZbVbCiud6nEFXMKuAkBrz+kXIEgEHYA=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a1:ec:0d:29:e7:f9:c0:b1:af:80:48:8d:64:a9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Oct 22 22:01:12 2026 GMT
Not After : Oct 23 22:01:12 2026 GMT
Subject: CN=046bd410581ca2069abd275c49dbf374e0d46807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:0e:a0:d0:4e:6a:5f:6f:c0:04:c7:b0:ac:
5f:da:75:f2:1b:f3:5d:14:97:24:9e:4a:f6:a5:21:
be:d7:25:26:3a:55:15:31:6b:a2:c0:68:e3:83:16:
b6:66:81:14:a1:99:c6:9f:5b:d7:67:91:d1:87:81:
ee:ca:1e:a2:22:b7:d3:7c:dc:b7:17:32:55:a8:cc:
8a:d8:e5:ba:13:75:32:8f:c6:ab:91:b3:6f:3d:e0:
6f:e2:df:f5:6a:1f:d8:21:bf:2f:15:ec:01:0d:3e:
64:3c:3a:f5:4c:59:50:0e:5b:2a:c3:e4:65:9a:a6:
eb:08:c2:95:ee:a5:23:ff:08:a5:62:2c:1b:91:04:
29:9a:8d:b5:38:b8:98:85:f8:59:09:7e:7b:4f:ff:
94:80:cc:4b:54:f1:80:0e:a5:97:f7:4b:1b:3f:fd:
52:d8:75:f7:f1:63:ec:2c:25:2b:05:d0:c7:fc:9b:
26:fb:f1:8c:5c:8f:8b:33:ee:b1:62:d2:5d:44:51:
8f:db:fd:73:6e:98:5f:58:7d:1b:d8:5d:73:9a:4d:
01:b6:c5:5d:44:8c:b4:40:74:91:1c:e2:9d:65:e1:
d9:c2:bb:05:99:a1:b6:ea:44:e2:97:45:33:c1:4c:
bb:da:11:27:73:52:98:12:bc:0f:b8:cb:e9:be:b0:
6b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:D4:10:58:1C:A2:06:9A:BD:27:5C:49:DB:F3:74:E0:D4:68:07
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:5d:67:1f:2e:f5:a5:35:b2:ea:5b:ae:90:0f:a2:33:51:
2a:47:7f:7e:ab:a4:4c:45:2c:50:75:66:04:cc:6a:4c:c9:f5:
12:d2:55:95:5a:19:25:7c:22:55:6d:81:8e:bb:19:af:a5:9d:
3f:59:9b:05:00:37:89:1b:f1:5e:11:15:41:ec:9d:79:85:e7:
08:a5:65:be:3a:eb:4d:b3:a1:15:21:f4:db:a0:c9:1a:66:9e:
d0:97:8e:f8:86:71:bb:57:36:4a:2b:65:22:d9:50:1c:08:5f:
b5:26:66:83:1a:ea:a0:a6:a8:0d:5f:8b:36:0e:d9:71:5f:fd:
83:6d:ac:f9:c4:03:f7:d4:56:4d:84:df:92:78:04:45:3f:21:
10:ff:5f:e8:c9:46:68:b8:58:fe:b4:65:71:d6:4b:0a:1b:44:
13:2f:d9:5d:93:33:a9:57:30:a6:b5:59:c3:08:c2:8e:82:89:
f7:04:8f:a0:03:d5:d6:00:37:b5:d2:b2:96:63:4c:59:b1:ca:
b2:ef:49:36:01:95:a3:9d:c6:a7:a0:c9:7c:95:f0:1b:70:cf:
53:3f:4c:e8:4d:22:14:9f:7a:cd:77:27:79:6e:ed:9a:6b:e2:
3f:85:47:62:84:f3:1d:47:aa:d7:d3:dd:3b:5f:36:dd:81:23:
a8:11:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 08:43:29 2026 by rpki-client