Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
File: TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json)
Hash identifier: BZxuLMMjjBXnmvbsKuGU9BmE1hszMyzKAnd2ELoRRok=
Subject key identifier: D8:B8:FC:F7:74:F6:60:FA:74:78:FD:D8:77:0D:44:5A:EF:D3:61:7E
Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
Certificate issuer: /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Certificate serial: 01A178F17F7EFDC04274F6C597EF7471803F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 16:00:55 +0000
Manifest this update: Mon 26 Oct 2026 16:00:55 +0000
Manifest next update: Tue 27 Oct 2026 16:00:55 +0000
Files and hashes: 1: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: qHezrz0ZYJlaqymoaAw5yHUDAw0H3tjXmo7ijUsixpI=)
2: pFIm_tXx1_Q7aLzLZyGzh6liU0E.roa (hash: 167B7I1VfPre9EHJG3x87zKw2fq6pm8HbBnX2xQN/R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:7f:7e:fd:c0:42:74:f6:c5:97:ef:74:71:80:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3
Validity
Not Before: Oct 26 16:00:55 2026 GMT
Not After : Oct 27 16:00:55 2026 GMT
Subject: CN=d8b8fcf774f660fa7478fdd8770d445aefd3617e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:81:da:16:40:07:67:d4:df:5a:11:8d:df:1f:
c6:5a:88:fc:f5:89:ba:f1:eb:71:eb:f7:21:85:a6:
51:5e:fe:e2:5b:1b:d2:7e:8f:89:bd:0f:5d:04:fc:
50:23:77:57:84:6b:0c:be:11:74:b7:f6:69:26:66:
29:7e:cb:a6:47:20:41:0e:db:85:87:fd:86:d9:0c:
16:94:0f:db:ca:af:c2:87:7a:9b:c9:d1:97:24:ee:
df:f3:d3:28:41:a4:5f:a8:9c:27:b8:1b:38:f4:96:
dc:e1:15:66:22:31:9a:3f:6f:b2:24:a9:64:7f:2a:
db:45:2d:48:fa:6c:da:f4:1a:8e:4a:79:4c:4b:90:
02:7b:29:65:39:56:dd:0f:d6:83:aa:60:76:7f:8c:
4d:f2:c0:ad:1b:8f:a8:63:d9:ac:63:fe:6b:75:6d:
1d:f4:f1:28:ec:02:ef:93:b6:7a:0c:76:d0:12:22:
c1:af:d8:f3:e7:58:45:96:dd:7b:c2:0f:14:a7:2f:
2c:db:86:40:17:8a:77:88:48:76:ce:ae:39:17:ce:
5c:69:4f:e8:47:76:a0:1c:6c:18:a4:f4:f6:92:47:
9a:60:9f:ce:85:56:3c:53:65:b2:23:a5:9c:db:dd:
60:54:ee:ad:15:c9:1d:f4:f3:9d:6e:58:e2:28:39:
81:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:FC:F7:74:F6:60:FA:74:78:FD:D8:77:0D:44:5A:EF:D3:61:7E
X509v3 Authority Key Identifier:
keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:bf:83:13:41:d9:98:e6:d1:e5:9c:97:1d:20:66:78:47:b2:
56:e1:d9:02:1a:3a:e1:4b:fd:1d:78:1b:24:59:72:cb:61:09:
b0:a2:51:8b:fb:25:b2:ae:fb:0a:43:59:25:09:35:4b:7c:6a:
e8:b4:bf:af:30:73:86:04:39:1f:5d:17:e2:75:76:5d:99:dc:
5f:47:a9:16:a3:c7:bd:0e:d2:1d:21:25:56:f5:08:67:28:63:
b2:d1:05:e1:10:2b:de:e3:28:0a:90:4d:6a:c4:96:8f:44:0e:
56:b6:9e:55:f6:c6:1f:82:34:ff:60:ec:64:e9:c5:59:65:bf:
ec:5b:5d:f1:17:1a:3f:f4:fc:33:5c:7f:83:80:f0:41:b0:a1:
83:42:25:13:ee:24:8a:5a:ff:eb:bb:61:52:c0:09:f9:36:26:
83:9e:33:33:8a:86:11:97:e8:6f:9d:e2:65:77:8c:1b:82:97:
cf:ad:51:df:e9:99:bc:1c:ff:01:38:fc:6b:4d:c4:9b:03:22:
a4:fd:8e:83:c1:a9:83:be:ce:e7:23:84:8e:05:d7:1d:b0:9c:
68:24:2b:3b:cf:f1:bf:0e:0d:85:aa:68:be:03:cc:eb:53:1d:
79:f7:5f:2c:d6:d3:df:6f:37:87:08:39:02:d6:de:4b:b4:17:
e0:58:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:31:11 2026 by rpki-client