Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: qBPB/oSo1zjtDnG1cQtmYJJaipNEyyE6qdzv7NcCBo8=
Subject key identifier: 79:29:59:E0:BA:F6:5F:F4:73:80:09:E9:66:C0:B2:24:9A:7E:83:42
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 01A17F2AD95CC66A55AC3A4B119A485CADD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 21:01:16 +0000
Manifest this update: Tue 27 Oct 2026 21:01:16 +0000
Manifest next update: Wed 28 Oct 2026 21:01:16 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: 4ICH/Bia7Qb4OYTP7aQntsbzgKGFNBfwssCuMu1WXNA=)
2: rYWvgBpIwofNn7aLhB0mJ0iM21E.roa (hash: my07QvKsBSoGPzx9lWKg1TKeZIOPYji+dEgnbV20gxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:d9:5c:c6:6a:55:ac:3a:4b:11:9a:48:5c:ad:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Oct 27 21:01:16 2026 GMT
Not After : Oct 28 21:01:16 2026 GMT
Subject: CN=792959e0baf65ff4738009e966c0b2249a7e8342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:76:d9:97:5b:a8:b6:04:a1:eb:f1:b0:44:
fd:45:cb:53:a8:b2:2d:7c:02:41:22:f1:94:49:0d:
ad:ee:7d:14:56:cf:e8:f4:9c:eb:12:4f:6b:cc:b4:
90:d5:68:d3:78:bc:4a:5a:1a:75:37:06:7d:7a:5e:
83:4d:f1:68:69:31:3e:14:96:a6:7e:0f:86:1b:41:
a9:8b:b9:c5:03:5e:b7:9f:0d:b4:83:7d:34:a3:b7:
e4:15:fd:e2:52:fc:67:96:db:f0:83:90:2f:b8:86:
f7:de:c7:51:4c:66:6d:25:66:cc:34:81:18:25:37:
ea:fa:13:3f:33:ae:ba:a8:e9:ca:79:1d:c7:9a:7d:
5a:d0:b0:7b:03:17:16:0a:ab:bd:cb:c9:5f:41:69:
c2:67:ec:8e:d4:39:5b:4f:26:b1:e8:75:88:54:2f:
09:e7:3a:dc:4c:c5:7e:0a:6e:96:1e:21:ff:3f:7c:
8d:d5:46:3e:de:59:33:26:87:6e:48:7c:3c:85:ee:
e6:15:15:7d:5c:ea:e3:07:4e:9e:09:e2:ec:c9:ea:
9d:82:99:01:6c:b4:db:55:3b:3a:8d:86:b2:3f:41:
34:1f:4c:9c:94:65:7d:fa:26:07:1a:a7:7e:84:19:
b0:bd:85:3f:e3:97:57:d7:64:4b:bd:a1:96:4a:51:
40:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:59:E0:BA:F6:5F:F4:73:80:09:E9:66:C0:B2:24:9A:7E:83:42
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7a:77:e3:4d:c0:8a:3e:c5:f6:1e:8d:ce:7e:9b:22:27:fb:
e0:23:2b:ed:2f:d1:05:f6:25:2e:03:ef:62:2b:15:da:15:61:
11:68:22:16:5c:94:15:7a:97:1c:3a:10:16:ca:70:78:99:aa:
05:24:81:3b:3c:65:35:37:ee:af:01:ca:0b:9e:ee:ce:e7:33:
79:b0:cd:3c:a3:43:d8:30:c9:41:73:f6:ad:b8:b6:5e:a5:10:
7b:4f:c7:6f:4c:2f:c7:84:66:8b:62:84:76:9a:e8:4c:d9:31:
98:e9:62:0b:8b:c9:8d:9e:fb:4c:d0:cc:66:2e:fc:80:39:39:
b2:e6:91:e7:2f:5c:1d:b0:fd:ab:73:e6:ce:1d:54:1b:f2:b4:
b1:3a:5c:44:f8:71:ef:38:9a:7f:a3:77:d8:18:fc:5a:4f:83:
1c:ff:93:79:88:51:00:e3:14:33:c4:c4:e3:79:ab:a5:48:5e:
77:c4:15:45:9e:4e:d2:52:59:06:1f:5a:77:b8:21:2e:02:97:
6f:7a:bf:8f:6f:6b:23:be:fa:76:25:4f:3b:53:48:e5:f5:73:
27:52:13:94:4c:1e:2a:94:f9:d0:dc:33:0f:4e:5c:cd:ab:17:
97:07:fc:55:8b:9d:f6:e7:d8:e5:68:c5:fa:c6:6a:f7:46:06:
96:cb:77:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/KtlcxmpVrDpLEZpIXK3RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOThmZTUwMmFjMTZlOTU3Y2MzM2ViYzJlYzFiZTgzYmJl
ZDdjYzQwHhcNMjYxMDI3MjEwMTE2WhcNMjYxMDI4MjEwMTE2WjAzMTEwLwYDVQQD
Eyg3OTI5NTllMGJhZjY1ZmY0NzM4MDA5ZTk2NmMwYjIyNDlhN2U4MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnh22ZdbqLYEoevxsET9RctTqLIt
fAJBIvGUSQ2t7n0UVs/o9JzrEk9rzLSQ1WjTeLxKWhp1NwZ9el6DTfFoaTE+FJam
fg+GG0Gpi7nFA163nw20g300o7fkFf3iUvxnltvwg5AvuIb33sdRTGZtJWbMNIEY
JTfq+hM/M666qOnKeR3Hmn1a0LB7AxcWCqu9y8lfQWnCZ+yO1DlbTyax6HWIVC8J
5zrcTMV+Cm6WHiH/P3yN1UY+3lkzJoduSHw8he7mFRV9XOrjB06eCeLsyeqdgpkB
bLTbVTs6jYayP0E0H0yclGV9+iYHGqd+hBmwvYU/45dX12RLvaGWSlFA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkpWeC69l/0c4AJ6WbAsiSafoNCMB8GA1UdIwQY
MBaAFE2Y/lAqwW6VfMM+vC7BvoO77XzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYt
Y2QwMDliMzAwYTZjLzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wOWRhODctYTJiMi00MjliLWJlOTYtY2QwMDliMzAwYTZj
LzEvVFpqLVVDckJicFY4d3o2OExzRy1nN3Z0Zk1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXp3403A
ij7F9h6Nzn6bIif74CMr7S/RBfYlLgPvYisV2hVhEWgiFlyUFXqXHDoQFspweJmq
BSSBOzxlNTfurwHKC57uzuczebDNPKND2DDJQXP2rbi2XqUQe0/Hb0wvx4Rmi2KE
dproTNkxmOliC4vJjZ77TNDMZi78gDk5suaR5y9cHbD9q3Pmzh1UG/K0sTpcRPhx
7ziaf6N32Bj8Wk+DHP+TeYhRAOMUM8TE43mrpUhed8QVRZ5O0lJZBh9ad7ghLgKX
b3q/j29rI776diVPO1NI5fVzJ1ITlEweKpT50NwzD05czasXlwf8VYud9ufY5WjF
+sZq90YGlst3qg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:50:02 2026 by rpki-client