Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: wLFtsiIN1h4KOaiWlxdFEdmBFkUMMQTX6t3ZCrfK0/o=
Subject key identifier: C6:36:C4:1C:D9:19:CB:1A:F9:83:E5:24:6F:E4:11:CF:54:6C:42:11
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 01A11B62B3948D5E2855EC3C9D378BFA729A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 12:00:15 +0000
Manifest this update: Thu 08 Oct 2026 12:00:15 +0000
Manifest next update: Fri 09 Oct 2026 12:00:15 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: KocLjPW9CJvaGSNefHywli60KTPG75mcF0W+JUh5uPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:62:b3:94:8d:5e:28:55:ec:3c:9d:37:8b:fa:72:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Oct 8 12:00:15 2026 GMT
Not After : Oct 9 12:00:15 2026 GMT
Subject: CN=c636c41cd919cb1af983e5246fe411cf546c4211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:30:b1:80:a5:3e:83:33:42:00:cc:42:66:
5c:2d:82:4c:a8:17:b6:47:0c:d2:a6:39:97:f8:b1:
20:11:cc:53:92:af:5d:8e:24:63:b4:42:19:c6:ed:
e7:59:d9:91:52:d6:a6:b4:aa:6b:9a:d3:df:e5:2a:
32:b6:33:42:4e:68:a9:c6:c3:4f:ac:70:cd:2e:3c:
37:0e:ec:2d:cc:32:f0:21:95:b6:c4:37:88:86:7d:
f5:a3:83:71:3f:e7:eb:b0:e2:df:e0:f9:99:ee:05:
62:fc:08:2f:eb:81:a1:df:42:6d:62:23:32:99:63:
e5:54:ec:72:da:b6:36:5a:28:7a:19:90:b4:3c:81:
e6:87:9f:96:de:57:9e:50:c8:a6:2c:6a:cb:25:9b:
52:75:48:78:56:91:d5:18:99:88:94:5b:7d:db:48:
c8:1b:fe:b9:1c:42:30:66:ea:23:69:96:9b:84:ea:
cf:16:9b:64:c4:9b:f2:13:83:1a:92:49:83:95:11:
7d:7a:1f:cf:e7:b4:39:99:b1:32:be:15:c1:19:2b:
d5:ac:71:9a:8a:0d:b4:54:8e:c7:cd:dc:56:46:0c:
b0:49:49:4f:f5:22:a9:a8:df:78:61:d8:28:db:16:
39:aa:b6:fd:65:da:7b:e1:90:4d:59:18:06:29:19:
42:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:36:C4:1C:D9:19:CB:1A:F9:83:E5:24:6F:E4:11:CF:54:6C:42:11
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:26:f6:e1:93:ef:24:16:7d:52:8a:a7:e5:b1:59:13:e0:0d:
96:df:2d:b5:40:e7:82:47:dd:ce:6c:7b:7a:d5:dd:03:f7:57:
dc:97:d5:b0:fc:cd:45:c4:5e:19:34:ab:1a:4a:21:59:83:15:
62:37:08:c0:62:d2:5f:57:43:5e:1a:4b:a1:de:1c:7a:c2:83:
b7:9e:05:69:ac:70:73:84:50:0a:a2:d6:7b:cd:dd:d1:36:66:
45:eb:b8:4e:42:84:c7:79:85:de:1e:70:d4:7a:62:10:20:83:
71:b4:e3:28:d8:9a:0a:cb:07:0f:f3:39:bd:c6:4e:13:d7:b8:
89:01:d0:a2:2c:65:ba:4f:bc:07:20:71:82:6d:50:c7:22:da:
a4:bc:c4:0b:96:1b:fe:23:3a:14:0a:ef:4e:86:1b:35:88:e2:
38:dd:29:89:42:06:62:b8:e9:2b:ce:87:c2:11:99:2e:d7:c6:
1c:68:06:e1:f9:31:2c:38:0d:0d:7d:be:2c:ae:ee:7b:4c:08:
ff:7b:1e:41:23:02:0e:d2:27:a1:6e:d0:16:9b:ef:50:ab:a7:
2e:df:96:a2:74:de:62:86:1f:be:42:c0:54:50:16:8b:f8:c1:
70:45:86:84:26:6b:a9:22:06:7d:e0:15:37:d8:b8:8e:29:4e:
15:da:52:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:09:38 2026 by rpki-client