Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
File: TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft (raw, json)
Hash identifier: DkqVG+68Xybt3hI3GL2YMoaSyrk0zI57yNxb0/f3qKM=
Subject key identifier: CD:FB:5B:45:72:81:DB:58:83:53:1E:A8:A2:DD:A1:04:75:03:8A:C2
Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Certificate serial: 01A15251CB4B14A935EECB0B50669CAB3DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
Manifest number: 1AAE
Signing time: Mon 19 Oct 2026 04:00:54 +0000
Manifest this update: Mon 19 Oct 2026 04:00:54 +0000
Manifest next update: Tue 20 Oct 2026 04:00:54 +0000
Files and hashes: 1: 1-yMlj_lfkJoYBfYvpMydeDjmgSM.roa (hash: K/sPdE3c5W5fRpAqOLm5bFgaW4DKI4EBlPvEPl32aOM=)
2: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (hash: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg=)
3: TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl (hash: kFFdIL6lhrdk3I8xU0L7pAz4HYlbOqvMBQJKXkO3Y5E=)
4: tCb5DC6zfb4vzHPOix2UvW9ndS4.roa (hash: ntxgYvCvFvJADG1N43LItMS9Zjg6jG20YT8FEIvxIu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:51:cb:4b:14:a9:35:ee:cb:0b:50:66:9c:ab:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8
Validity
Not Before: Oct 19 04:00:54 2026 GMT
Not After : Oct 20 04:00:54 2026 GMT
Subject: CN=cdfb5b457281db5883531ea8a2dda10475038ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:3e:82:3f:64:36:77:94:5b:52:17:18:38:
0d:d3:9f:6d:b6:99:8f:9c:8e:a4:2b:ed:74:89:35:
4f:da:34:7b:c7:23:53:0f:26:69:54:c1:4d:5b:a7:
18:96:d9:e9:98:76:f2:5b:4b:81:2d:65:69:df:77:
23:48:55:0a:cd:db:51:4f:47:72:38:55:70:fc:24:
cd:ed:d4:aa:eb:fb:9b:42:cb:ad:f9:ce:a1:0e:03:
94:43:11:95:af:7c:9f:66:21:92:49:9d:11:6f:c6:
c9:ab:a6:fd:d9:7f:53:41:e3:4a:90:9b:d2:67:be:
a3:d7:04:b2:af:55:5b:bf:46:c6:af:07:45:e8:af:
1d:67:34:fe:3d:6f:3f:be:cc:ad:15:6f:b9:b1:83:
07:51:52:dd:63:80:82:2f:57:a5:b4:b3:06:70:11:
fe:d1:f9:b6:9d:f7:b2:7f:0d:84:1f:09:c5:33:d5:
9f:69:a2:06:be:8c:db:21:70:4e:db:d7:c5:03:99:
67:e3:87:c2:82:67:b5:07:f6:f2:84:ba:72:d8:2b:
5c:53:f8:8a:a4:f3:96:96:48:52:e1:e9:c6:f3:03:
8c:0f:16:d5:b8:5d:11:44:e6:25:24:4a:26:8d:62:
92:e2:b2:c5:8d:bf:6c:ee:66:07:42:c0:bb:c9:3a:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FB:5B:45:72:81:DB:58:83:53:1E:A8:A2:DD:A1:04:75:03:8A:C2
X509v3 Authority Key Identifier:
keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:9c:a0:40:0d:f8:b7:51:c5:0a:57:f7:b2:44:43:a7:6f:86:
db:56:38:94:8c:47:27:22:c4:38:ae:e8:5a:a2:64:e0:e0:59:
cb:2c:2c:f3:25:54:68:86:8e:86:eb:b4:a4:5c:ab:e8:20:47:
dd:de:63:9f:d7:56:77:57:d1:95:e5:8a:2c:82:d1:32:56:df:
11:ba:1c:17:99:1f:5e:a9:f3:df:36:d1:b1:af:2d:fc:6e:e5:
bb:7f:f2:6c:c8:0c:f5:da:65:1e:40:e8:62:2e:35:a6:5e:af:
32:2c:7f:fd:7f:ef:e7:16:83:7c:5a:ee:bd:e2:cd:af:30:de:
e9:d4:b7:b7:c2:92:3b:d4:05:5d:2f:8c:8d:cd:bb:e3:8a:99:
4d:e1:30:6d:f4:cd:97:2b:ef:16:20:5e:5e:f1:6e:01:5b:9f:
7e:b6:8f:7c:8a:4f:f6:2f:13:2b:2b:36:9e:54:d5:44:99:30:
c5:14:27:56:46:83:ca:15:b5:6c:7f:d7:59:c7:af:a2:38:64:
3d:83:f9:2e:30:29:a9:8c:a5:25:d7:5e:03:eb:a1:44:0f:0c:
a5:ff:48:d8:73:86:65:8f:5b:33:aa:a7:66:50:17:20:7a:19:
a9:8e:a5:6d:89:d3:aa:96:21:41:53:f2:ee:99:5c:ae:b4:91:
a7:65:c3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 14:29:24 2026 by rpki-client