Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: WlyzXb6nTSDFoghwtH49+zgSdJCZ3wr2OTpVWbrPC3k=
Subject key identifier: BF:90:F0:0C:EE:96:29:84:16:29:15:2D:DE:95:92:12:6C:F3:DA:5D
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 01A19A33E7AD3528FCFEDAE04AACA355A0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1AD2
Signing time: Mon 02 Nov 2026 03:00:55 +0000
Manifest this update: Mon 02 Nov 2026 03:00:55 +0000
Manifest next update: Tue 03 Nov 2026 03:00:55 +0000
Files and hashes: 1: LQJRQQjbwBZBO6fcDK7TBARIRcA.roa (hash: kgMdOcv0hribs4xM8yAxDMw6nXQ/d8F0OHR9C1YIdKg=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: IS2wyFqTTctE4MphivAWLj/KHsnQoBgZMgkWV6Lz1pA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:33:e7:ad:35:28:fc:fe:da:e0:4a:ac:a3:55:a0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Nov 2 03:00:55 2026 GMT
Not After : Nov 3 03:00:55 2026 GMT
Subject: CN=bf90f00cee9629841629152dde9592126cf3da5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d7:16:d0:da:1e:0c:38:25:1f:fe:a0:2d:f3:
9f:b0:b1:04:33:52:06:3c:e0:f9:36:5c:ac:cf:84:
1a:84:d1:5a:e4:4a:72:13:55:d8:a2:6d:27:95:a0:
94:a6:60:4f:30:03:cd:d7:be:68:0a:72:40:cf:24:
23:55:10:7c:b8:f1:90:17:74:f9:94:64:ad:39:a8:
6a:3d:f9:0d:5e:85:f5:85:50:19:76:1a:52:75:e9:
c7:44:46:42:34:f0:a8:e0:30:59:43:b6:7b:c8:c6:
44:9e:cb:50:f4:46:84:a5:46:ea:1b:7a:c2:53:03:
c4:c5:1e:33:10:09:cd:8f:4f:ef:84:ab:2a:17:89:
0d:0c:35:f6:69:ea:04:05:04:3b:1e:66:65:b4:e8:
24:e9:e6:99:c3:86:b5:72:19:c8:d3:45:8a:dc:62:
5b:6c:bc:98:09:af:38:78:7e:fd:71:90:97:67:c5:
2c:c0:eb:07:de:41:9d:a1:e6:12:69:fa:cb:70:b3:
23:5e:1a:6f:91:c0:94:6c:95:02:3f:44:9f:8c:bf:
e3:f5:93:c0:58:db:90:df:88:10:bb:0a:69:69:22:
c7:1d:a0:20:0b:5a:e2:c4:76:5b:4c:a2:a5:a3:96:
cc:a2:94:31:8e:20:c1:68:88:76:68:ad:0d:bb:77:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:90:F0:0C:EE:96:29:84:16:29:15:2D:DE:95:92:12:6C:F3:DA:5D
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:88:b9:58:fd:ac:b3:c0:f7:9b:6b:25:e0:8d:45:9f:08:4b:
89:10:ca:8d:d5:0e:37:2d:a6:65:ea:c7:b2:d0:a1:51:32:95:
a3:91:b7:a3:1f:0e:ab:42:d0:43:cd:fa:fc:fe:88:ae:54:de:
29:a9:d5:0e:2a:d5:7a:ff:f2:c8:e0:9f:d3:c3:9b:01:47:49:
f5:3c:4c:d0:c5:85:c8:9c:d5:d4:91:8c:3a:21:ae:a0:6e:04:
69:98:01:b0:ec:e3:5d:3d:48:d1:b2:dd:3c:fe:86:ec:a8:2a:
51:3e:2b:80:8b:19:df:e3:ee:36:6f:d4:52:0b:73:62:f8:45:
36:6b:fb:7f:ee:6e:b9:36:27:99:1e:11:1e:8d:17:d0:80:bb:
5f:3c:6a:7f:9e:fc:d7:27:81:08:26:1a:5b:1c:2b:84:44:85:
fc:58:d1:64:b1:53:f1:90:e3:4f:6d:1f:c9:d4:35:45:34:1b:
2f:ed:bd:d4:dc:c0:b1:2a:9e:58:fb:c4:11:f4:ac:1f:dd:fb:
fd:e6:d0:9e:13:7d:61:c9:11:08:b1:51:f5:c9:f9:5c:11:d4:
91:c6:44:a3:02:e7:f8:cb:b3:bd:79:d1:b5:fa:ab:c0:f6:17:
2e:06:ec:64:7c:62:b1:44:57:55:2f:6d:e5:8f:74:51:e1:d7:
44:6a:48:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGaM+etNSj8/trgSqyjVaDEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2N2YxYjg3ZTY3NTJmNDU0MzliODUyOGNjOTY4YjQ3NzBh
NWEwZmIwHhcNMjYxMTAyMDMwMDU1WhcNMjYxMTAzMDMwMDU1WjAzMTEwLwYDVQQD
EyhiZjkwZjAwY2VlOTYyOTg0MTYyOTE1MmRkZTk1OTIxMjZjZjNkYTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdcW0NoeDDglH/6gLfOfsLEEM1IG
POD5Nlysz4QahNFa5EpyE1XYom0nlaCUpmBPMAPN175oCnJAzyQjVRB8uPGQF3T5
lGStOahqPfkNXoX1hVAZdhpSdenHREZCNPCo4DBZQ7Z7yMZEnstQ9EaEpUbqG3rC
UwPExR4zEAnNj0/vhKsqF4kNDDX2aeoEBQQ7HmZltOgk6eaZw4a1chnI00WK3GJb
bLyYCa84eH79cZCXZ8UswOsH3kGdoeYSafrLcLMjXhpvkcCUbJUCP0SfjL/j9ZPA
WNuQ34gQuwppaSLHHaAgC1rixHZbTKKlo5bMopQxjiDBaIh2aK0Nu3dMewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+Q8AzulimEFikVLd6VkhJs89pdMB8GA1UdIwQY
MBaAFLZ/G4fmdS9FQ5uFKMyWi0dwpaD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDkt
N2ExODkzMWQ5ODViLzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85ZmY0M2UtZjgxNy00ZWJlLWEwZDktN2ExODkzMWQ5ODVi
LzEvdG44YmgtWjFMMFZEbTRVb3pKYUxSM0Nsb1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4i5WP2s
s8D3m2sl4I1FnwhLiRDKjdUONy2mZerHstChUTKVo5G3ox8Oq0LQQ836/P6IrlTe
KanVDirVev/yyOCf08ObAUdJ9TxM0MWFyJzV1JGMOiGuoG4EaZgBsOzjXT1I0bLd
PP6G7KgqUT4rgIsZ3+PuNm/UUgtzYvhFNmv7f+5uuTYnmR4RHo0X0IC7Xzxqf578
1yeBCCYaWxwrhESF/FjRZLFT8ZDjT20fydQ1RTQbL+291NzAsSqeWPvEEfSsH937
/ebQnhN9YckRCLFR9cn5XBHUkcZEowLn+MuzvXnRtfqrwPYXLgbsZHxisURXVS9t
5Y90UeHXRGpIOg==
-----END CERTIFICATE-----
Generated at Mon Nov 2 12:42:11 2026 by rpki-client