Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: VWEBQgn+Qh4xRD+LyeSxQ2TuhrYEPSqV1m2JZd1Dzz0=
Subject key identifier: 4E:F0:86:A7:1C:5C:C3:DA:70:4E:8F:D9:53:BE:FB:DB:85:3B:99:62
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 01A18F7903950781ABAADCD7115D0CE78BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 08F6
Signing time: Sat 31 Oct 2026 01:00:34 +0000
Manifest this update: Sat 31 Oct 2026 01:00:34 +0000
Manifest next update: Sun 01 Nov 2026 01:00:34 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: PlAkR0p6EUeUMVaXR5uOjtXXDhg.roa (hash: GmzVV0u4SOKyF7bQ648PPO4x0f48XGEC/CDH+VzyXi8=)
3: t4HkSR49kbnH3Md8VLmkvowwv5c.roa (hash: PlMc98JPUnLzb7As5Be/OWrN/vV15yWuIzHBD4KUiKQ=)
4: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: x+fwxmShJDg5yqMcF98Phl9Z9CUC1MiQYz13kZTX1Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:79:03:95:07:81:ab:aa:dc:d7:11:5d:0c:e7:8b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Oct 31 01:00:34 2026 GMT
Not After : Nov 1 01:00:34 2026 GMT
Subject: CN=4ef086a71c5cc3da704e8fd953befbdb853b9962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:98:54:41:a7:75:a2:fd:7a:ad:e4:5b:ac:
d4:4f:ea:e3:00:8d:9f:48:30:d2:16:96:9b:59:a9:
fd:7e:79:cf:8a:b2:23:67:88:58:9f:4e:16:54:1d:
b6:88:4b:0c:9a:40:53:9a:23:6b:ad:f5:ff:6d:7d:
07:94:7f:13:1e:e7:2b:a3:02:1b:6e:18:71:77:4a:
9f:45:86:c4:ac:39:10:55:9c:d7:d1:33:69:0d:df:
6d:45:7d:05:57:f0:3c:1c:11:dd:1b:4f:7a:d3:32:
29:27:72:6a:56:78:17:2e:59:58:c2:30:9c:de:76:
0b:76:ac:ae:ff:5b:fa:a7:4b:5a:4c:e5:51:a3:84:
09:b8:4d:99:fa:7e:80:89:21:7a:51:0e:16:b3:ce:
94:d6:d7:95:54:b0:ab:9a:36:3b:59:91:be:98:9d:
f9:d8:c8:fd:18:fd:7e:ef:41:92:a9:ff:9e:de:e3:
c5:b2:b1:b9:c4:28:87:71:31:2b:7c:0e:1d:67:c0:
b0:21:aa:88:28:36:33:2c:db:c0:07:67:24:eb:12:
d9:29:02:2d:d4:f4:cf:2a:4c:96:f3:c7:d6:ee:71:
a1:6b:be:28:6f:19:1f:5b:c4:08:db:2f:36:e6:3f:
5f:48:20:9e:15:b8:0f:a2:71:84:e0:75:4a:10:9c:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:86:A7:1C:5C:C3:DA:70:4E:8F:D9:53:BE:FB:DB:85:3B:99:62
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:07:e4:14:59:01:4a:be:c6:d7:6a:be:74:4b:f1:b7:ae:ec:
4c:35:8c:f1:47:6b:70:69:84:c5:9e:38:8e:b3:a8:45:d8:29:
2f:8f:6b:e4:20:50:f9:aa:2f:2f:e4:d7:1b:ed:d6:c0:75:31:
3f:9d:ad:cf:d1:96:cc:0f:51:0d:82:9c:72:a2:8d:7b:c6:be:
63:71:2c:0e:e8:b0:44:1f:c5:7e:3f:86:07:c9:29:4c:75:4a:
aa:01:ec:03:13:7f:2c:a4:26:24:c2:08:ac:e8:8a:44:15:a5:
50:8e:ac:af:f7:68:2b:33:3a:94:23:fe:26:60:e8:c2:3b:dc:
2b:0a:29:1f:42:84:94:ac:99:73:f9:5e:f2:85:6b:a2:de:b5:
39:06:b2:5f:79:cb:41:9a:db:56:93:9b:f5:93:9a:a1:95:aa:
38:cc:0c:c9:a7:d5:ac:68:af:78:3d:dd:59:a2:80:c3:97:bd:
43:3d:f3:45:0f:df:2a:49:42:7e:83:af:bd:1e:de:11:ef:05:
80:8e:76:f3:49:8d:09:5b:5a:ee:65:f3:64:f5:16:02:b2:19:
5b:42:a7:8a:67:2f:d4:9c:a5:44:a4:96:bd:bc:d0:6d:c1:41:
53:87:ce:64:15:54:56:64:62:a3:24:cd:6d:2c:a6:2c:fd:38:
ae:8a:af:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:49 2026 by rpki-client