Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: KXZkROkB09lKup/e409VlzQVVL6N4gfLpkQV4sLqn34=
Subject key identifier: 72:DF:42:D7:7A:32:26:FC:28:A0:FD:33:FE:C0:29:7E:C2:C6:5A:43
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 01A0016FF81E2A628EEA717A515F6E4A99C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 18:01:50 +0000
Manifest this update: Fri 14 Aug 2026 18:01:50 +0000
Manifest next update: Sat 15 Aug 2026 18:01:50 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: lbFB9RnVcEK2HEVECYK4/f8lY0R2TCpuNoIEDF7ynIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:f8:1e:2a:62:8e:ea:71:7a:51:5f:6e:4a:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Aug 14 18:01:50 2026 GMT
Not After : Aug 15 18:01:50 2026 GMT
Subject: CN=72df42d77a3226fc28a0fd33fec0297ec2c65a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:ae:5d:3b:0c:a8:32:e1:cd:1e:7a:2b:74:
06:04:4b:b5:fe:aa:09:27:88:05:8d:2e:4d:88:5b:
1d:7c:29:18:f7:4f:82:91:1f:31:92:0d:51:72:31:
9a:c4:b0:73:5e:6f:12:77:1d:f8:a5:ce:0f:90:4d:
01:b6:d0:75:bf:12:10:9f:f2:a6:bd:38:11:82:2b:
14:70:8f:15:4b:89:99:20:50:8b:f6:13:62:80:fa:
3a:45:d5:e3:a4:d7:ae:16:1c:55:89:7c:77:ba:a7:
5b:d3:73:74:2e:00:cb:4e:65:ac:e3:86:02:1d:c9:
c3:8f:c0:0c:a7:e6:ed:c9:e2:34:23:7f:29:ce:9a:
4f:c7:03:02:65:8b:09:6c:86:78:1c:67:e5:a4:c1:
ac:74:91:61:cc:56:b3:a8:3d:49:b9:1a:bd:0c:d8:
9d:dd:36:b3:d9:5c:ad:22:fb:cb:a9:f0:c6:32:08:
e4:49:7e:63:cd:80:e5:c4:08:3c:1c:cf:60:66:9f:
99:30:28:a6:78:36:cd:1d:a3:e7:9a:b4:51:b2:ae:
a5:fc:b1:c0:18:1d:db:29:7a:23:54:73:af:47:b4:
c3:57:63:41:69:0b:5a:8f:be:0d:1c:a7:29:54:f6:
fa:f6:c2:8f:7f:be:40:07:7e:3b:38:3a:d3:36:99:
5b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:42:D7:7A:32:26:FC:28:A0:FD:33:FE:C0:29:7E:C2:C6:5A:43
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a0:ee:1c:72:d5:8d:ff:7d:40:86:0b:39:d0:48:fd:e0:b0:
5e:44:8e:ee:8c:96:02:d3:74:30:6b:ef:22:70:11:05:0b:f9:
92:31:57:38:b4:07:db:43:fd:f7:06:bd:38:9b:11:87:48:00:
2e:5a:8b:e6:9f:cd:ad:31:42:bf:37:1f:63:0b:06:f2:0e:5c:
fb:71:4a:e7:3d:9e:68:1d:61:4d:34:86:6d:21:94:3d:d5:82:
e2:a3:70:8e:18:d3:29:fa:d2:65:56:b0:80:da:7b:b5:eb:47:
16:8b:99:66:4b:71:44:8f:9b:b4:09:34:17:b8:1e:a1:41:30:
df:45:e2:f1:92:d8:4f:56:88:57:e6:eb:5d:ac:d9:a3:df:62:
be:0b:d0:2c:46:2a:af:8e:67:3d:6d:63:8e:02:84:ff:80:0f:
a2:84:2f:8d:61:a4:60:f6:36:97:c6:0e:30:b7:16:a2:e6:1f:
02:a6:1f:50:28:07:d8:0e:43:a3:da:00:e4:fd:ca:bd:4d:0b:
06:63:c1:74:9f:71:20:4a:f1:f6:89:81:a5:ce:da:05:bc:c6:
5a:5b:2b:b9:28:6b:32:bc:4d:37:a9:78:48:6d:4b:aa:7e:38:
99:3e:c2:f2:e8:06:7d:36:1b:7a:86:3f:57:1f:2c:b5:6e:15:
02:9b:6b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:05 2026 by rpki-client