Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
File: TNkIkaeTL3NWqAMznaDM32OtLTU.mft (raw, json)
Hash identifier: sUN5ybiMV5eG49Axe1azh+EdXsThDZX94ty5yLmGoTw=
Subject key identifier: 7A:26:44:F3:0E:A9:A2:08:89:BA:5D:17:FB:02:80:D0:A0:68:29:1F
Authority key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Certificate issuer: /CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Certificate serial: 01A08C0D3EFB01CD38D3EF69D3EC04DDC350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
Manifest number: 0533
Signing time: Thu 10 Sep 2026 16:01:13 +0000
Manifest this update: Thu 10 Sep 2026 16:01:13 +0000
Manifest next update: Fri 11 Sep 2026 16:01:13 +0000
Files and hashes: 1: SyOMrq9ZPqa-CxddJFs4EYM4Fbg.roa (hash: wy5+/o73Vk3SAFiCb5cli4N7qOzZBJq1Ya6ET4kdAcw=)
2: TNkIkaeTL3NWqAMznaDM32OtLTU.crl (hash: 50N5ZWP2x73HfdFsvz0iuj4/nBFU1TaObLiuNiBu+gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:3e:fb:01:cd:38:d3:ef:69:d3:ec:04:dd:c3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Validity
Not Before: Sep 10 16:01:13 2026 GMT
Not After : Sep 11 16:01:13 2026 GMT
Subject: CN=7a2644f30ea9a20889ba5d17fb0280d0a068291f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:47:f6:b9:f0:80:0e:20:b1:42:a3:84:08:
f8:88:85:fa:5b:5a:e9:0d:5e:0c:a7:93:0e:e8:26:
a7:e1:3b:1f:d3:08:42:3a:3f:3e:cb:13:d8:5e:f6:
b3:2b:83:c6:23:5e:f8:db:f1:88:84:9e:e3:2f:cb:
74:42:21:76:47:f4:eb:c1:0b:ec:ae:73:85:cf:c2:
f9:a9:a2:b9:de:d1:57:c0:bc:17:6a:85:6f:52:8e:
40:fe:17:cd:5a:41:b5:3a:72:1c:67:4a:5a:76:65:
be:81:fc:59:d2:00:6e:05:ea:1d:87:1c:45:2f:85:
25:b0:85:5d:16:61:c6:1e:b9:50:7b:55:67:15:5c:
aa:35:f2:98:42:a8:49:85:7d:4a:70:25:1f:e7:fd:
3e:57:78:0b:bb:54:3f:47:24:d6:be:4b:0c:1a:15:
35:ab:4e:32:86:d1:d8:74:58:9e:9f:67:aa:7a:80:
17:3b:c6:88:62:97:6a:b8:c0:75:83:60:24:ba:11:
6a:9b:11:69:f0:88:d0:44:ad:01:43:6a:54:96:9d:
d9:ea:cb:d2:08:51:37:46:43:1a:d7:72:fb:b3:cf:
3d:0f:fa:08:93:55:68:45:ea:aa:01:10:5f:59:19:
ba:50:b5:aa:53:7a:2b:b2:2d:bf:6f:f4:d5:3f:12:
0b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:26:44:F3:0E:A9:A2:08:89:BA:5D:17:FB:02:80:D0:A0:68:29:1F
X509v3 Authority Key Identifier:
keyid:4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8c:09:b5:8b:42:55:4d:a5:23:54:db:c9:9a:61:56:98:34:
dc:e0:6f:58:ed:58:e9:b8:5a:74:91:3e:64:e4:61:55:86:2b:
8f:65:04:bd:26:1d:2a:f0:0c:85:dc:ee:36:74:ed:1c:dd:d1:
4b:24:07:4f:d8:f1:27:a2:d9:57:98:01:83:da:86:62:4d:ee:
51:cd:ec:45:cd:c8:23:ce:b5:07:cd:4b:0f:1d:a3:4f:8a:9d:
a8:7f:62:12:eb:11:5b:50:cd:fb:cd:c0:06:38:06:3a:d5:98:
01:6b:ba:8c:3f:3b:fa:f1:e5:36:16:7b:5c:45:09:ac:13:83:
de:7b:80:e2:4d:c4:63:96:d6:cc:0b:fb:c6:6a:66:35:ef:2f:
0a:ed:bb:43:80:87:a7:48:35:90:8e:1d:38:9b:c4:8f:f5:c4:
32:ef:76:91:0f:14:e2:a8:c1:98:82:06:13:87:8b:72:ca:eb:
91:91:21:84:0b:91:12:6b:65:42:dd:ec:56:4a:d0:a6:18:36:
72:d9:95:c0:fd:06:1c:22:87:94:58:1c:f7:8e:00:91:f1:86:
b4:d3:46:2a:91:fa:5a:9c:46:e0:2e:49:d5:0d:4a:d0:c8:e7:
25:bc:84:84:a9:09:ed:8e:c0:27:b5:b3:80:e6:69:24:5c:8f:
15:bc:61:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDT77Ac040+9p0+wE3cNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZDkwODkxYTc5MzJmNzM1NmE4MDMzMzlkYTBjY2RmNjNh
ZDJkMzUwHhcNMjYwOTEwMTYwMTEzWhcNMjYwOTExMTYwMTEzWjAzMTEwLwYDVQQD
Eyg3YTI2NDRmMzBlYTlhMjA4ODliYTVkMTdmYjAyODBkMGEwNjgyOTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tRH9rnwgA4gsUKjhAj4iIX6W1rp
DV4Mp5MO6Can4Tsf0whCOj8+yxPYXvazK4PGI1742/GIhJ7jL8t0QiF2R/TrwQvs
rnOFz8L5qaK53tFXwLwXaoVvUo5A/hfNWkG1OnIcZ0padmW+gfxZ0gBuBeodhxxF
L4UlsIVdFmHGHrlQe1VnFVyqNfKYQqhJhX1KcCUf5/0+V3gLu1Q/RyTWvksMGhU1
q04yhtHYdFien2eqeoAXO8aIYpdquMB1g2AkuhFqmxFp8IjQRK0BQ2pUlp3Z6svS
CFE3RkMa13L7s889D/oIk1VoReqqARBfWRm6ULWqU3orsi2/b/TVPxILDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHomRPMOqaIIibpdF/sCgNCgaCkfMB8GA1UdIwQY
MBaAFEzZCJGnky9zVqgDM52gzN9jrS01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2Mt
NjljYTRjYjY1Zjk3LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82YTkzNzgtMmZhNy00ODJkLThjN2MtNjljYTRjYjY1Zjk3
LzEvVE5rSWthZVRMM05XcUFNem5hRE0zMk90TFRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4wJtYtC
VU2lI1TbyZphVpg03OBvWO1Y6bhadJE+ZORhVYYrj2UEvSYdKvAMhdzuNnTtHN3R
SyQHT9jxJ6LZV5gBg9qGYk3uUc3sRc3II861B81LDx2jT4qdqH9iEusRW1DN+83A
BjgGOtWYAWu6jD87+vHlNhZ7XEUJrBOD3nuA4k3EY5bWzAv7xmpmNe8vCu27Q4CH
p0g1kI4dOJvEj/XEMu92kQ8U4qjBmIIGE4eLcsrrkZEhhAuREmtlQt3sVkrQphg2
ctmVwP0GHCKHlFgc944AkfGGtNNGKpH6WpxG4C5J1Q1K0MjnJbyEhKkJ7Y7AJ7Wz
gOZpJFyPFbxhjw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:41:09 2026 by rpki-client