Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: fpncBLSkt18i2HgnxBfkcWkaTfHquaTH2pYIP/c6rxs=
Subject key identifier: D9:3C:58:59:E4:3F:47:C6:5B:60:74:3E:0D:7A:7C:EE:37:D4:A8:AB
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 01A17D0548D7AD24F585503F50F258B85825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 11:01:00 +0000
Manifest this update: Tue 27 Oct 2026 11:01:00 +0000
Manifest next update: Wed 28 Oct 2026 11:01:00 +0000
Files and hashes: 1: 1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa (hash: aDxytIY+QLBvjB+sNfj6erO7LbHVI7jcd1DbRYQbTzE=)
2: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: x7I8JO7Vz3nuHFTDCrLqSKPGkN6Olu78MxtUvRqbOw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:48:d7:ad:24:f5:85:50:3f:50:f2:58:b8:58:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Oct 27 11:01:00 2026 GMT
Not After : Oct 28 11:01:00 2026 GMT
Subject: CN=d93c5859e43f47c65b60743e0d7a7cee37d4a8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:a7:07:26:86:81:69:5e:64:5b:1d:1b:7e:
e9:2f:58:56:b2:0b:31:55:46:e5:58:18:ad:50:f5:
f8:a2:69:f0:f8:73:f3:90:e4:08:bf:aa:0b:40:ef:
37:30:f7:d9:69:cf:c9:1f:93:34:11:e6:49:e9:0e:
ae:7c:48:bd:a9:7b:6b:7d:72:0c:8d:12:5b:bc:06:
cb:eb:8e:d2:72:19:6b:35:ee:75:b8:6f:05:d7:6f:
86:f9:d0:03:79:59:04:4b:e0:d8:80:c2:2d:e5:a2:
c6:0d:96:62:13:80:be:8d:61:84:4c:c8:88:6a:c8:
93:98:c2:95:66:72:9e:89:84:44:c0:66:b6:03:9b:
6b:0a:d0:37:6e:49:00:65:bd:03:ae:96:c9:98:d4:
0c:98:bb:7a:13:fb:1e:1a:f1:2c:b9:d0:f0:24:d3:
78:2d:8d:9a:68:bf:6a:dc:cf:4a:ff:3f:93:40:9c:
5e:07:18:68:22:ab:26:4c:ab:dc:89:3f:c0:e2:af:
20:b7:74:7b:79:e4:84:da:e1:3d:38:67:3c:78:a5:
b8:ff:41:a4:6f:cc:a7:bb:1d:0b:66:2e:f8:87:5e:
61:eb:7d:ba:f7:ad:1b:ad:c4:45:e7:66:03:4f:c0:
5e:20:34:52:33:2c:b7:24:de:3b:cd:73:05:60:21:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3C:58:59:E4:3F:47:C6:5B:60:74:3E:0D:7A:7C:EE:37:D4:A8:AB
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ff:76:6c:a6:17:51:7f:8b:40:bf:6d:59:ce:24:4e:f6:eb:
9e:22:ed:c6:24:c0:0a:5b:a4:e9:90:29:96:75:cf:85:8c:8d:
50:bd:12:2b:3f:3a:f8:58:ff:e7:fe:5b:a7:41:06:ed:52:44:
24:40:9f:64:9f:bc:72:36:41:70:3d:54:5d:ae:03:6b:1f:ca:
74:31:59:6f:61:f7:8a:fe:b6:e6:5d:1b:9b:be:dc:f4:25:a7:
ff:68:e1:17:af:73:d7:f4:0d:b7:2b:cd:fc:e9:f9:f1:74:09:
4d:9a:d0:00:04:67:1d:bf:c7:f8:1d:ba:31:7a:36:0e:85:af:
f7:ee:11:c1:d0:10:62:8c:c5:bb:1b:94:51:f1:0d:38:5d:64:
9b:6c:89:48:93:a5:2e:67:94:65:14:db:9d:ea:e9:de:34:2a:
fb:e8:4b:23:bf:3f:49:3d:66:cc:86:04:cc:10:94:38:ea:7d:
a2:7a:97:e0:c0:26:ae:5c:26:49:2c:e7:00:ec:13:3e:cc:ee:
26:70:5d:09:b8:87:75:47:3c:2d:88:7d:7f:7d:69:a1:67:34:
b4:07:0c:15:b3:83:f5:3c:d0:64:1a:60:59:5b:37:62:44:1c:
62:15:73:97:f1:a9:5c:d9:d9:1a:92:cd:dd:d8:da:d4:4a:03:
ec:52:22:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:32:11 2026 by rpki-client