Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: 0z2a8kPDTBXVwj380Gh4mqTsNci7lD12M9HipaHVd0U=
Subject key identifier: A7:6E:BD:F4:0A:2A:9B:07:28:93:4C:D9:72:E9:C5:78:2C:A0:2F:A5
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 01A14A2A1B4833E8C4EEEE503F390C66FA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0CF9
Signing time: Sat 17 Oct 2026 14:00:35 +0000
Manifest this update: Sat 17 Oct 2026 14:00:35 +0000
Manifest next update: Sun 18 Oct 2026 14:00:35 +0000
Files and hashes: 1: 4rBeJt2gTE44sAknjaU9icbf798.roa (hash: ZYDnszD6TdxQH5b/70FLacYtJ5dXx4AM/j4gatDDLJQ=)
2: FznKlNjPtV7CgIvm3j4yrj4Hfic.roa (hash: FZIfFOE2MnfZCsnXNURSud4raCCnVXaurgVHkGDoOTc=)
3: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: W86YhvFlsiTOKSTQnBuAgkbJvrGtjkfGoJbTvu+Ekp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:2a:1b:48:33:e8:c4:ee:ee:50:3f:39:0c:66:fa:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Oct 17 14:00:35 2026 GMT
Not After : Oct 18 14:00:35 2026 GMT
Subject: CN=a76ebdf40a2a9b0728934cd972e9c5782ca02fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:49:52:c9:47:5f:24:12:71:f2:77:1a:9c:
94:46:5c:58:8e:c7:94:fc:b6:29:06:55:e1:98:92:
fa:59:34:41:31:d8:4a:70:37:37:ef:a5:3d:3e:5d:
67:99:db:8c:8d:1e:65:77:73:5c:dc:1d:f1:69:12:
89:a8:95:98:82:77:86:1f:46:25:9b:42:76:66:4c:
0d:c3:5d:f1:9e:8f:ca:44:0e:74:53:67:97:3c:5a:
46:a8:4e:31:f1:4b:4c:e9:8f:d3:60:d0:6e:5f:cb:
24:8a:93:ae:6f:b5:3d:bc:81:b7:e0:ab:d3:4c:c1:
f5:dd:b9:14:07:f2:d8:be:b5:55:2a:6a:35:ae:e0:
55:85:9d:b1:0a:d9:5a:d8:dd:60:d9:4c:15:0f:8e:
29:60:ad:c2:60:d9:c8:38:f4:96:92:d5:ec:a4:3c:
90:62:27:e5:c0:2a:d9:b1:f4:91:0c:a7:11:e4:fc:
50:54:e7:ad:4e:b3:71:be:fb:6f:4e:26:bc:5f:d3:
a0:09:58:d2:84:3d:c3:37:b8:3d:01:f8:0a:ea:14:
93:8f:f8:16:3c:54:ac:cf:55:c9:6a:45:4e:5f:ee:
bd:e5:d5:d7:57:6b:ae:f1:e5:b7:11:53:4f:f9:71:
5c:3f:e1:19:fd:37:7c:0c:7b:5f:c0:69:28:8a:83:
a2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:BD:F4:0A:2A:9B:07:28:93:4C:D9:72:E9:C5:78:2C:A0:2F:A5
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:22:05:43:68:2d:6d:b4:70:d0:85:64:2b:81:a6:59:3f:de:
68:7d:52:b0:a3:ab:74:f1:3e:78:90:8b:54:0f:86:9c:97:aa:
81:3f:a0:1d:09:c6:0d:79:53:2c:d0:8c:1b:47:a6:50:c3:8d:
42:8c:37:99:51:21:0e:37:26:24:94:a5:b0:95:59:77:1a:c0:
d9:8a:0a:47:c6:45:11:7b:cc:e3:19:85:68:0f:83:e2:85:42:
29:4d:69:fd:6f:b6:ba:b6:24:0f:f7:ac:66:5b:ea:51:96:2d:
21:06:1f:31:d9:23:5c:88:4c:22:ea:27:06:77:1b:fc:22:0e:
31:4c:29:fc:c7:79:fe:92:77:b6:9d:ea:71:73:df:36:a4:be:
17:74:32:a8:c7:15:fe:6f:ac:b3:b1:5c:c9:13:65:d8:b6:e2:
0f:ed:c1:91:ee:2a:b4:9f:6b:2a:fc:2d:fa:f5:6e:f5:14:00:
cf:e6:ad:39:c3:aa:cd:db:2d:bb:cd:6b:b4:c5:f9:e5:66:e1:
18:86:09:99:f7:46:50:91:7e:59:34:ae:7f:73:89:02:05:22:
5c:d6:81:20:11:3b:01:ed:a5:44:5c:7b:02:f8:f5:4f:15:50:
76:70:f5:03:64:1d:82:70:21:a2:1b:1c:36:dc:88:b4:2a:3a:
1a:73:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:30:52 2026 by rpki-client