Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: Bdcjor7aw9AHDcQbYH11CsJmJN1LSfn9pYdM/l/F2Nw=
Subject key identifier: B4:4C:CD:6B:A4:87:22:1D:7E:FA:F1:B7:2C:B2:AF:60:73:2B:FC:61
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 01A06E70C2596112B64D15FF7EA81D1885D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0988
Signing time: Fri 04 Sep 2026 22:01:18 +0000
Manifest this update: Fri 04 Sep 2026 22:01:18 +0000
Manifest next update: Sat 05 Sep 2026 22:01:18 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: UccHjpjOf6m/vP5wWryVSnzJJvUsFwc0e1z4bFPYIYI=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:c2:59:61:12:b6:4d:15:ff:7e:a8:1d:18:85:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Sep 4 22:01:18 2026 GMT
Not After : Sep 5 22:01:18 2026 GMT
Subject: CN=b44ccd6ba487221d7efaf1b72cb2af60732bfc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7e:d9:24:3c:e8:fb:1c:76:3f:3f:8f:22:36:
09:be:0c:3d:1d:05:bd:0d:a2:9f:74:ba:98:26:67:
a2:f1:5c:61:bb:97:8b:55:a5:2b:77:9d:18:1d:2d:
20:2a:05:29:80:30:b1:aa:54:ea:d2:96:17:d0:c5:
98:bb:53:f1:73:e0:57:16:38:3c:d1:7f:0d:a6:8e:
a1:10:8c:ee:13:98:bf:cd:ca:95:62:b6:b9:07:56:
11:37:82:82:23:92:9d:f2:03:d5:90:31:37:55:b0:
09:1c:0c:f2:c8:85:2c:5f:9b:6d:88:ae:be:a6:cd:
8e:35:98:6a:0c:1a:9b:9b:3d:af:06:68:3c:25:76:
d7:1d:8b:6b:2f:1b:6d:c8:2f:a8:89:5d:6f:8e:2d:
c1:05:59:8d:02:8e:17:26:d6:9b:08:67:ca:db:5b:
7f:5f:04:df:94:c2:4e:64:75:b4:f6:5c:d6:fb:dc:
53:6d:24:4a:c6:0e:7f:75:06:89:7c:78:a8:c3:d0:
4c:93:91:f1:17:14:e6:07:a8:bf:46:70:d3:92:90:
92:34:04:2c:80:35:76:b0:5d:84:67:86:84:63:30:
3e:73:f5:2a:e7:2e:19:48:a1:4a:32:b5:10:e4:07:
27:60:15:9f:c2:71:bb:c4:65:fa:6b:68:1c:e0:93:
45:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4C:CD:6B:A4:87:22:1D:7E:FA:F1:B7:2C:B2:AF:60:73:2B:FC:61
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:5f:4b:ac:a3:e6:3e:32:95:94:5a:34:dc:5d:7d:6e:b6:fd:
8e:82:4f:41:90:9c:0b:5c:8f:eb:c7:38:9e:8e:c7:08:35:37:
98:82:d0:fc:71:b2:5e:45:c5:4e:06:cd:bb:07:8a:a6:d7:45:
27:06:f6:11:5c:19:07:c7:a7:08:5d:ec:2b:b9:5a:05:ae:a7:
54:95:f3:63:ae:e9:da:bb:aa:68:87:1e:d9:07:85:2b:b0:17:
18:37:0a:41:a3:0a:49:ff:47:02:c0:85:03:14:f4:4f:af:d0:
2c:65:fb:a8:50:cf:10:58:30:ce:a9:07:c0:8b:10:0b:91:c3:
fd:a1:30:a4:a8:93:33:43:7e:1f:71:7c:af:d2:7b:ee:26:e5:
af:80:b6:ba:c3:02:05:c8:40:ec:9e:75:c9:a5:5a:f0:32:a2:
85:74:fb:f1:6c:7d:ce:ee:70:33:15:fa:a4:3a:0d:78:43:99:
7c:77:27:30:07:01:c4:11:25:fc:ed:e7:77:78:c9:87:f0:2b:
98:83:33:68:61:26:1c:d2:6b:b8:fb:f6:1a:77:1c:ae:a4:d3:
9d:32:e5:01:5a:3a:c5:2f:05:b2:99:8d:9b:20:db:7b:20:06:
2c:87:6f:50:96:5a:e2:72:3e:39:7d:29:e7:ea:bc:dd:aa:16:
d8:05:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:12 2026 by rpki-client