Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
File: TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft (raw, json)
Hash identifier: mTluVcaIQk+A50VpJ2xWuy/2QusNGB1syUGJ4Q49pFE=
Subject key identifier: A1:79:42:6D:FF:F1:58:50:71:2B:76:76:6F:AA:70:71:1E:1C:F5:A7
Authority key identifier: 4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
Certificate issuer: /CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Certificate serial: 01A0F230D7DF242AA8B1BF95B249F617A863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
Manifest number: A9
Signing time: Wed 30 Sep 2026 12:01:22 +0000
Manifest this update: Wed 30 Sep 2026 12:01:22 +0000
Manifest next update: Thu 01 Oct 2026 12:01:22 +0000
Files and hashes: 1: 03isWsmaGVRk9tqcdmDKk9uA_-I.roa (hash: ScrT5FCc9rPEYk5wCLCQ97IXUmvu4SWDxXf7fq4zp6c=)
2: 226OYCKUmdi1S_3Pe-3PZ-iCAAs.asa (hash: X+ewLeQEwgG8XlmiwNHRk1JnO20h3xlra7zQCCYsiQo=)
3: TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl (hash: dy35EFuPp34RE07cL/eLs79W6l7BdZ/ZOg9BRuzoxuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:30:d7:df:24:2a:a8:b1:bf:95:b2:49:f6:17:a8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b5d48d7d1542b8681a4d59113e3ea1d4999a6
Validity
Not Before: Sep 30 12:01:22 2026 GMT
Not After : Oct 1 12:01:22 2026 GMT
Subject: CN=a179426dfff15850712b76766faa70711e1cf5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:e3:e0:63:03:8c:67:b3:69:01:0b:4d:9b:
bd:aa:c2:02:0e:89:9d:6b:42:fe:ce:cd:13:88:70:
b0:d2:4f:d5:cf:27:73:62:d4:aa:05:26:5d:7a:96:
36:49:cb:ec:9c:0f:74:e3:0c:80:e7:5c:7b:97:4d:
6e:30:09:fa:64:da:85:8b:90:1c:27:3e:fd:1c:9e:
f0:1d:b2:11:bc:5c:56:15:9b:d0:dd:dd:c8:d7:bd:
77:f1:55:6a:3a:8d:f7:7f:06:11:1e:cf:8e:f9:d3:
b1:ed:16:ec:32:50:2c:0a:6e:b5:8e:88:e9:e5:54:
4a:5b:d2:c5:58:b7:86:3a:44:d3:c5:90:0e:a6:a8:
13:9b:ae:e9:e7:dc:52:20:91:6f:60:70:be:13:72:
3c:02:1e:47:98:27:f7:f1:72:6a:63:c1:e2:dc:11:
7e:5f:33:a3:83:ca:24:eb:37:ac:e9:12:e6:41:83:
77:c2:ee:eb:7c:c0:4c:28:1c:a4:f9:92:fa:3c:4a:
d0:5b:c8:2d:5f:c0:b1:54:4d:56:d4:8e:c1:e6:be:
57:5b:01:fd:d5:f8:cc:fa:fb:45:b1:99:72:e5:22:
3a:e9:de:63:cf:e7:10:ba:70:12:cf:b6:6d:98:f7:
5c:80:6a:94:5f:8b:79:37:67:b0:8d:7f:cf:ab:b8:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:79:42:6D:FF:F1:58:50:71:2B:76:76:6F:AA:70:71:1E:1C:F5:A7
X509v3 Authority Key Identifier:
keyid:4C:2B:5D:48:D7:D1:54:2B:86:81:A4:D5:91:13:E3:EA:1D:49:99:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCtdSNfRVCuGgaTVkRPj6h1JmaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9075ad-9d3d-4c0c-b216-e48ab7aedb8b/1/TCtdSNfRVCuGgaTVkRPj6h1JmaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:30:0f:f0:56:d4:48:ea:56:fd:61:1f:12:f9:f7:1e:21:39:
c8:a2:46:a8:53:2a:8a:ae:80:87:a4:96:46:37:74:01:fd:56:
ef:83:5f:cd:9d:24:c0:5c:56:51:5b:1f:e5:f3:26:72:9d:1c:
51:96:4c:fb:88:fb:60:a9:12:27:46:56:55:a4:38:8d:3d:26:
ef:98:7d:15:0d:83:ce:81:a8:71:c0:d7:e7:38:b4:7c:c9:b8:
d7:40:ce:94:5c:c2:81:1d:39:34:52:10:1d:31:9c:a2:07:5c:
4a:a4:4e:a4:66:69:96:a9:42:2e:d4:e3:06:d3:e2:e5:c2:02:
87:9a:bf:b7:85:1f:47:c5:81:07:ff:b0:1f:d5:11:14:02:60:
f3:a7:f9:d6:2a:4b:ae:93:c3:cc:a9:2a:35:9b:a0:b0:9b:ac:
ed:bf:88:37:c6:66:8b:44:28:50:71:c4:f5:97:0b:9d:0c:4d:
53:8a:17:90:d4:2d:0d:0d:23:d0:9f:5d:39:cd:4e:98:b6:92:
35:6e:dc:ae:08:65:7e:d3:85:e2:b8:f4:fb:21:70:b6:dc:6f:
c0:b5:bc:91:c6:b3:be:06:6f:1c:e1:09:81:6a:7d:7f:22:74:
1a:94:97:6b:28:31:fa:89:46:d5:16:51:14:66:9a:8e:8e:10:
4e:1a:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:06:59 2026 by rpki-client