
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: ZK9USJjVBaIRSSMbbo9ZtEo+j159Jg7fEhC0gJOpfqE=
Subject key identifier: 0A:86:05:A9:A4:49:F3:F1:D0:6E:78:82:BC:56:53:1B:0C:C8:8E:6C
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 01A113E0D2FE9838243CA8DBBE4F18D2AE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 1A90
Signing time: Wed 07 Oct 2026 01:01:03 +0000
Manifest this update: Wed 07 Oct 2026 01:01:03 +0000
Manifest next update: Thu 08 Oct 2026 01:01:03 +0000
Files and hashes: 1: G6FeIPbrFYt0Xs4RMbl3hxFSgPI.roa (hash: pCJOng4j62RgLgH4PaC9a8+B4/vINuGKFVNtITN4RoM=)
2: M_rnheFHEJEhvuv8N_w2Hds5XxU.roa (hash: 9c9DQN1bBCgnWk4FhLy9o/RslqwQ5t8KVo6nKa0ccUI=)
3: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: duofHWxq8hMquNJSPqbvW1fsoHxjEWLR/oTFRUSWB4k=)
4: nEGo15KsyAjBD-x5zbk8ARJINQU.roa (hash: 0lT9gQ6lEsFlDbleFuI9ud8vDG/jc8OcFzQhfPnweOI=)
5: vCLyUWR776gkWz1fg6zz0ef3IxM.roa (hash: SjoathDw0sUup7FL2NVGvfEYMvEvs24sBQi8PhmuU7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:e0:d2:fe:98:38:24:3c:a8:db:be:4f:18:d2:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Oct 7 01:01:03 2026 GMT
Not After : Oct 8 01:01:03 2026 GMT
Subject: CN=0a8605a9a449f3f1d06e7882bc56531b0cc88e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:b2:9f:06:5b:4b:af:60:4e:47:9f:c3:94:
cb:b3:e9:a8:9e:39:73:2a:e3:7d:e6:59:76:8e:52:
3f:8a:b8:d3:56:9e:1b:2d:de:5b:0e:c7:06:2e:26:
e1:da:97:f2:61:19:45:c1:7d:68:27:c5:ff:f7:82:
ad:db:54:d8:d8:e1:40:87:87:3f:0c:0a:9e:6f:69:
d9:a6:63:ea:14:ca:18:04:d5:03:d7:d4:e9:10:33:
b0:c6:b6:39:6a:1f:6f:55:3e:50:88:ad:45:ee:62:
4e:a8:59:b5:a1:cb:15:28:46:4d:5c:e3:6b:f9:08:
84:22:04:8e:ca:94:23:0a:cf:5f:0d:1e:09:c1:fe:
77:95:8a:9f:93:53:ad:ef:9b:61:ed:59:ff:4d:89:
2d:03:07:d6:ec:8a:6e:11:e0:01:73:f5:14:e4:05:
d0:a5:7f:e7:f9:14:3d:46:37:76:05:a5:f0:ca:96:
2a:88:57:0a:0b:f0:56:87:95:2c:18:31:33:d7:52:
a2:ba:c5:c1:3d:9a:ad:4a:78:f4:35:8b:f8:e7:db:
ad:04:24:a4:2c:df:4c:64:64:ca:15:10:8b:40:70:
7a:b8:5a:02:8b:54:97:01:36:3e:82:64:fc:99:90:
2c:32:7c:73:7a:d4:e9:af:5b:b0:0f:3d:d2:90:e6:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:05:A9:A4:49:F3:F1:D0:6E:78:82:BC:56:53:1B:0C:C8:8E:6C
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:09:8a:77:46:25:c5:f7:39:70:0a:ac:98:d5:99:a8:89:c8:
27:1f:ed:13:72:74:5c:d6:e1:eb:7d:45:6d:70:b2:8f:c0:af:
d1:6f:2d:60:56:ed:ba:aa:1a:2a:13:ff:fb:b3:0f:62:1a:05:
76:f3:a8:42:41:22:c3:a7:e9:28:9c:94:d0:d6:e2:bd:09:75:
bc:3f:63:11:f7:28:91:70:3c:37:e9:90:40:0e:4a:ad:22:f6:
15:97:6a:39:0e:d3:19:2a:61:ec:80:3b:50:d3:38:e8:dc:67:
4e:16:f3:a8:21:e7:93:ce:74:e3:96:59:97:49:d1:f8:3e:f1:
77:4e:8a:45:0a:90:28:51:f1:da:a5:43:5e:20:e9:ec:3d:74:
0e:e4:35:20:05:e9:db:8f:55:80:6a:6e:3a:0c:df:52:67:1a:
38:02:d8:41:b6:f4:1a:05:5e:5d:dd:9a:64:fc:7c:72:90:cc:
df:d4:85:de:be:b2:99:74:74:fa:a2:8a:51:60:f6:ca:10:b9:
fc:69:92:b5:f9:e4:1e:a2:c5:94:8a:32:a2:ad:10:61:ab:62:
d8:00:0c:c7:4f:cc:f1:4a:70:05:35:d1:7f:2b:ae:25:12:a5:
7a:bb:03:6b:5a:01:63:cc:22:5a:32:1e:ba:e4:3e:9f:eb:8c:
98:68:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:48:55 2026 by rpki-client