Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
File: tMQeWYNNphLYPKJBlPAsptdgJEg.mft (raw, json)
Hash identifier: DE1vIi/H1AVrd6ZrpEpZ2Lp+zsJv57ghvqbFoKVE5K4=
Subject key identifier: C4:2C:43:D7:56:35:71:23:81:50:6F:16:37:FA:E2:1F:1A:52:CB:24
Authority key identifier: B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
Certificate issuer: /CN=b4c41e59834da612d83ca24194f02ca6d7602448
Certificate serial: 01A08AC3D462F576D1390EA44FCCEDC2090B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
Manifest number: 086F
Signing time: Thu 10 Sep 2026 10:01:24 +0000
Manifest this update: Thu 10 Sep 2026 10:01:24 +0000
Manifest next update: Fri 11 Sep 2026 10:01:24 +0000
Files and hashes: 1: JNBeyrY-s5eopsp59vWk83HFU5c.roa (hash: gsrDZu7NeQ1/vZ7JzsrWfUrloQVAyva35jOSVpK+lhg=)
2: PlAkR0p6EUeUMVaXR5uOjtXXDhg.roa (hash: GmzVV0u4SOKyF7bQ648PPO4x0f48XGEC/CDH+VzyXi8=)
3: t4HkSR49kbnH3Md8VLmkvowwv5c.roa (hash: PlMc98JPUnLzb7As5Be/OWrN/vV15yWuIzHBD4KUiKQ=)
4: tMQeWYNNphLYPKJBlPAsptdgJEg.crl (hash: Xa+ihIWKm/UwliGkS3b2m5wJmexrH0sKi1mqfMLqpRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:d4:62:f5:76:d1:39:0e:a4:4f:cc:ed:c2:09:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c41e59834da612d83ca24194f02ca6d7602448
Validity
Not Before: Sep 10 10:01:24 2026 GMT
Not After : Sep 11 10:01:24 2026 GMT
Subject: CN=c42c43d75635712381506f1637fae21f1a52cb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:38:9e:e8:51:b1:62:5b:42:0a:16:2c:30:
dc:50:17:4d:db:04:79:ab:83:ac:3b:ba:d2:15:7a:
5b:7d:35:5b:7e:bf:bd:6d:be:5c:f2:9c:99:6f:4e:
19:e1:cb:90:8d:6f:ec:5d:79:96:f1:de:fa:03:c6:
53:24:d0:50:ec:e4:ee:f8:c2:c4:32:13:33:59:10:
19:41:ad:1d:1a:47:9c:d7:7e:85:0f:80:91:2d:e0:
40:41:b5:39:2c:dc:28:94:9b:55:9b:cd:b4:2f:1e:
0f:41:21:bf:25:e5:af:57:0e:e8:0b:ed:c1:b8:d4:
f2:17:27:b3:2c:07:bb:c0:50:4d:95:82:5f:5f:0a:
c6:51:1d:30:b4:76:a4:b6:58:37:38:ca:93:f8:ad:
5c:49:9b:3c:f5:b1:b2:e6:5d:a4:2b:bd:49:80:4f:
b2:e1:e8:92:e4:f4:ae:dc:68:ad:aa:a5:66:7a:c7:
70:2c:d2:b9:fa:43:26:90:9a:29:d5:ff:e8:0c:db:
7b:10:98:07:f4:a5:c0:7e:4c:26:50:c3:8c:86:b3:
fd:b7:56:ba:99:71:2c:b6:4c:57:01:67:6f:21:fc:
e8:fa:3f:80:fe:4d:6b:4e:e2:ce:55:df:40:3f:0b:
2b:81:75:b2:be:59:50:ef:8d:38:a0:0b:ff:32:cc:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:43:D7:56:35:71:23:81:50:6F:16:37:FA:E2:1F:1A:52:CB:24
X509v3 Authority Key Identifier:
keyid:B4:C4:1E:59:83:4D:A6:12:D8:3C:A2:41:94:F0:2C:A6:D7:60:24:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMQeWYNNphLYPKJBlPAsptdgJEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a3baca-437d-4607-9c1a-557a4c31e02e/1/tMQeWYNNphLYPKJBlPAsptdgJEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:43:b2:39:a3:df:34:e6:71:33:20:29:f0:da:a5:18:b2:a7:
ef:21:ba:7a:d6:89:5d:db:2d:91:25:00:6d:66:0f:d9:e9:f4:
a6:8c:e4:8e:2d:d6:66:d3:ec:c4:df:11:57:27:47:f1:d5:e8:
bf:04:38:e9:de:90:0f:b3:97:f0:93:bf:79:cc:13:4a:15:f5:
12:75:e9:ef:67:81:4b:0f:d7:23:6a:4a:86:40:eb:20:94:fb:
89:ea:54:6f:a7:5c:0c:55:19:48:3b:46:52:d2:34:b3:b2:d0:
89:cd:a3:8d:20:e4:5f:fe:cd:bf:4d:c4:44:cf:63:79:84:06:
8e:a9:a3:09:2c:4a:8f:60:3b:2c:cc:47:a4:4c:59:34:20:eb:
ae:0a:ab:89:e5:9c:46:a4:41:bb:41:a6:96:17:31:33:2c:5d:
6f:96:f3:d7:f4:cb:c5:c1:41:67:c1:ed:8d:ff:7d:b0:50:83:
2f:29:24:a1:33:ef:39:a7:04:8d:03:4b:89:40:1b:91:fa:a3:
ea:04:e8:63:ad:fe:6e:41:ce:26:1a:1f:c1:55:06:7d:b1:56:
0a:92:b3:43:3a:b8:6b:97:02:5e:da:f4:68:c8:cf:e5:08:7f:
46:5e:2f:d0:23:33:c5:3a:80:42:a7:a9:2c:36:ff:4c:b7:45:
e8:3a:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:12:13 2026 by rpki-client