Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File: TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier: iGuL6tUd5eKdw8jWqaqBaFRurZMOT7ghxNggqAX3xYw=
Subject key identifier: 23:29:AD:6D:1B:95:8E:F4:73:EF:FD:51:1F:77:A3:83:71:E3:4F:6D
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer: /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial: 01A089E781D06749718F80FF243F687D7FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 06:00:45 +0000
Manifest this update: Thu 10 Sep 2026 06:00:45 +0000
Manifest next update: Fri 11 Sep 2026 06:00:45 +0000
Files and hashes: 1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: vkQbOTdTkczcBuiER1+ZjHdc7F/NxSYDXiOqy3xV73c=)
2: rYWvgBpIwofNn7aLhB0mJ0iM21E.roa (hash: my07QvKsBSoGPzx9lWKg1TKeZIOPYji+dEgnbV20gxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:81:d0:67:49:71:8f:80:ff:24:3f:68:7d:7f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Validity
Not Before: Sep 10 06:00:45 2026 GMT
Not After : Sep 11 06:00:45 2026 GMT
Subject: CN=2329ad6d1b958ef473effd511f77a38371e34f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:49:5b:a2:8b:7b:e8:ca:68:bf:23:44:bf:f5:
ca:6e:77:bb:c2:71:24:e7:45:5c:09:75:48:1b:64:
d0:1d:f7:3f:1c:34:97:07:00:c4:df:07:74:fd:0e:
65:5d:a7:0e:49:13:f9:60:2f:a7:aa:c0:64:80:95:
79:e4:d7:77:65:0f:34:69:66:41:f5:2a:d6:d9:22:
a5:4f:7c:cc:04:50:26:f1:c3:b1:fe:a4:81:1a:c6:
c6:b7:f1:37:72:18:bc:75:49:8c:db:c2:e2:fe:f5:
75:67:24:ce:e7:77:a6:93:bd:5f:57:54:d1:7a:40:
c5:99:e1:ac:c0:cf:da:53:31:87:de:5c:8a:11:76:
8c:1d:b8:98:61:10:84:f6:7a:c7:bd:34:8b:9d:2b:
3b:b0:ed:c5:df:60:c1:2b:64:1c:dd:7a:08:31:47:
b1:2a:7d:f5:c8:61:c7:85:41:18:91:24:f7:13:30:
6a:5a:88:b7:b4:47:2a:c8:67:e0:62:d0:c1:b2:43:
00:8b:aa:7e:57:5d:ce:f3:75:42:b0:e4:20:29:d7:
bf:dc:f5:8a:a6:a9:ab:04:3e:fe:cb:73:50:47:29:
f3:ea:ce:22:ae:1f:b5:0a:3d:51:9a:e8:6a:e6:4a:
76:0a:0a:22:bf:45:d5:f1:c4:df:a3:1e:dd:80:6d:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:AD:6D:1B:95:8E:F4:73:EF:FD:51:1F:77:A3:83:71:E3:4F:6D
X509v3 Authority Key Identifier:
keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:90:fe:ea:a5:90:2f:4c:05:fd:66:b9:f1:68:32:64:05:54:
75:e4:29:ab:08:d0:76:af:69:65:de:88:5d:41:0a:8c:06:fd:
11:ac:57:7e:06:84:19:32:1e:dd:db:ae:e8:d3:bc:e7:e9:42:
3b:56:8d:73:e0:dc:9a:14:8b:7b:14:f3:82:1d:4b:43:81:a3:
ec:2a:f9:8f:00:b0:25:2c:1a:bc:78:b4:83:a0:05:b4:c8:7c:
60:42:a1:6e:86:10:30:b3:10:25:b7:b6:35:48:fc:1f:06:ae:
3a:4a:bf:33:e5:f0:bb:2c:f0:31:5a:de:1d:e9:f5:37:36:4a:
d8:67:f5:df:93:65:c8:3a:e6:dd:60:aa:0a:16:aa:58:1d:4c:
2d:cd:76:f9:22:86:ae:14:e4:7c:01:1c:d7:e2:c4:8e:48:de:
3e:18:6b:e8:29:07:27:5b:06:41:66:8e:ad:44:1d:5d:ee:cf:
6e:42:18:09:e6:50:43:2f:fd:77:f5:57:56:df:78:a3:03:5c:
16:1b:d3:9a:fd:52:54:56:18:ea:58:97:f2:8c:c1:d3:87:a4:
21:13:33:ad:73:4d:52:dd:b0:21:d9:fe:0f:8a:8a:c8:6a:a3:
0b:cf:d2:88:ed:38:2f:15:06:c8:20:4e:f8:fc:ea:2c:c6:32:
03:1f:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:46:00 2026 by rpki-client