Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: AyyHdAMF7CMiyLkRt/eh/jAfXlAxWq6rQlMSCZWSRl4=
Subject key identifier: 0E:B7:14:6A:0A:16:83:6A:01:09:00:22:0E:45:D1:D3:B0:00:1F:92
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 01A06D278DFAED9C8A1A89A63AD872A955F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 16:01:43 +0000
Manifest this update: Fri 04 Sep 2026 16:01:43 +0000
Manifest next update: Sat 05 Sep 2026 16:01:43 +0000
Files and hashes: 1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: 1zKN2KOVKfGOyibnl1QP16bdq/rQ0bW7cArqVAAdEPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:8d:fa:ed:9c:8a:1a:89:a6:3a:d8:72:a9:55:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Sep 4 16:01:43 2026 GMT
Not After : Sep 5 16:01:43 2026 GMT
Subject: CN=0eb7146a0a16836a010900220e45d1d3b0001f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:f6:69:1d:c0:e6:8e:56:44:d4:a2:57:4a:
5c:5e:cb:b8:5b:f1:82:3c:41:b5:87:44:e5:b4:71:
d8:ff:cf:1f:58:b5:0b:45:16:32:a5:2d:93:e6:f6:
0a:d5:d7:94:2a:5a:b8:67:7b:f9:72:4f:64:9a:0c:
f8:9c:da:99:d7:49:9a:7c:eb:0c:bc:06:55:4f:ca:
a7:36:ff:a6:e1:ab:c7:12:35:66:3d:b7:87:e3:8b:
45:3e:35:3a:78:ab:fe:82:66:33:10:82:ba:fb:35:
78:99:25:9f:ae:b3:25:0e:90:40:1f:0b:8e:39:1b:
11:8e:3f:ea:40:49:72:8e:9a:32:7c:3e:8c:61:5c:
70:d2:fc:b4:09:c4:01:51:a3:40:2d:bf:e2:f5:1e:
2f:f5:24:20:f4:05:49:3e:1d:60:d9:e3:7b:6f:45:
8b:5b:8d:de:b1:24:60:6d:68:e5:32:a3:3a:ec:b2:
20:ef:c8:34:b5:26:eb:aa:d5:ac:83:a3:cc:3f:7e:
ac:ca:26:18:32:48:2f:2b:a1:af:7d:65:4a:93:6c:
db:5b:43:d1:84:8d:b6:71:85:a5:d1:e7:db:44:b7:
45:22:53:b6:f3:74:f7:a9:81:7a:38:61:c3:74:6d:
9e:28:63:0d:be:e6:3e:a4:19:c6:78:36:c1:64:ec:
17:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B7:14:6A:0A:16:83:6A:01:09:00:22:0E:45:D1:D3:B0:00:1F:92
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:e8:bd:7a:e0:10:d2:9d:b3:19:65:13:a5:45:2e:c1:cc:
e9:0e:69:dc:ac:e8:6b:de:3e:d9:be:f0:2a:92:e3:96:f8:b3:
5f:7a:11:e6:2c:14:02:5b:d2:38:b5:40:00:c2:ba:3a:f4:af:
e6:ca:b9:82:6a:6b:f0:d7:9d:9d:52:dc:7e:af:da:65:4d:0e:
39:5a:f3:3c:54:ce:38:44:2e:3b:36:19:c3:0a:00:73:a6:b2:
58:d2:97:44:98:ea:95:af:cf:ac:c9:41:98:9d:bf:a7:75:55:
46:0d:1c:02:87:3d:fc:85:6f:ab:d9:68:3b:0a:78:c9:d5:a0:
09:ab:8b:ff:c4:2d:7d:a9:23:a0:e4:83:22:79:d5:ef:c5:b9:
2f:23:25:e3:08:3a:78:18:59:c4:d9:6b:8a:9a:95:ea:d0:0f:
ef:94:ae:87:ca:ed:61:d3:b3:9e:c2:4d:71:69:79:77:2f:bd:
de:cd:4b:be:e3:02:bd:2e:97:28:fd:cc:00:a0:e9:df:86:ea:
8d:7c:39:cc:b6:5d:01:50:34:38:5c:d4:70:ab:26:68:0f:2b:
ab:ea:08:9f:5f:86:91:7a:29:52:f5:c8:cc:75:fb:a6:0d:5e:
68:ee:63:d8:b2:11:ed:3e:3d:8f:74:59:c6:89:c4:9f:c7:58:
ca:3c:44:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:13 2026 by rpki-client