
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
File: Tni20AYU9VZdnYr4JHzHLqm4gz0.mft (raw, json)
Hash identifier: J5HiDKV+7Vm7PZAeYU4U/JkaA54Tax1lza1/jV3LmfY=
Subject key identifier: B2:B9:FD:74:49:DF:17:37:8F:7D:BA:D4:E4:30:01:C9:2D:A9:ED:12
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Certificate issuer: /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial: 01A08AFAB2D0A250B7E8CEFCAEBFC6D7EBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
Manifest number: 17B6
Signing time: Thu 10 Sep 2026 11:01:20 +0000
Manifest this update: Thu 10 Sep 2026 11:01:20 +0000
Manifest next update: Fri 11 Sep 2026 11:01:20 +0000
Files and hashes: 1: 1-SHXJ_9DyyLTiVml8FNZqLUqf4c.roa (hash: FC5kQ4eFUsIw6UyiwGZplBvHk2DJiPcZkZfYFEyA+1E=)
2: Tni20AYU9VZdnYr4JHzHLqm4gz0.crl (hash: wkyE4etELMHRjq5SjNXCVTU9jQsNknH50TDCsEC2HmA=)
3: cmhQu2Y8Xwpht0Kjbz9MmCetMFs.roa (hash: pcJNDwdU6KGUma0lCWCQ0yEE/DOjtWZEWz1DbRzVYOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:b2:d0:a2:50:b7:e8:ce:fc:ae:bf:c6:d7:eb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Validity
Not Before: Sep 10 11:01:20 2026 GMT
Not After : Sep 11 11:01:20 2026 GMT
Subject: CN=b2b9fd7449df17378f7dbad4e43001c92da9ed12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:1b:4c:5e:15:8c:6c:d0:a2:75:16:8f:3e:
cb:56:81:5f:7e:90:62:da:c9:eb:4d:62:b2:8e:00:
67:1e:6a:e8:38:6e:c4:e8:d4:ef:42:49:d0:36:3d:
0c:83:97:38:0e:3c:85:3f:2a:a8:91:64:01:7b:93:
33:17:7a:8e:77:09:34:ba:fb:33:ec:34:5d:d1:8e:
58:13:11:43:12:44:84:47:d1:3b:68:05:6c:72:9e:
09:26:ec:f4:12:5d:9d:a8:fe:fe:59:cb:9f:1c:3a:
ad:6b:4a:dd:7b:d4:b3:1f:4a:0e:51:6f:44:e6:58:
70:fe:69:5d:ed:81:de:2c:85:4a:3a:fa:95:9d:03:
cb:04:e5:6a:d3:4d:b7:a5:f3:99:c2:82:f8:c4:a9:
9e:d8:00:b0:04:db:d4:85:a8:9f:1c:09:c0:ff:66:
aa:ab:6d:de:4e:28:f8:ef:7c:e0:40:d3:85:7f:59:
9d:5c:78:c6:13:52:03:27:81:66:6e:0d:e3:f3:e5:
cd:27:5f:50:a1:6c:d5:e6:ec:b7:fd:45:25:96:39:
89:25:4e:81:a9:3a:b1:b4:07:c6:fd:d9:6b:b1:a1:
73:b7:40:df:02:7c:57:c0:cc:bd:59:ee:73:4d:2f:
b6:4f:24:1e:28:82:c8:27:f9:ac:66:f6:53:5d:f9:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B9:FD:74:49:DF:17:37:8F:7D:BA:D4:E4:30:01:C9:2D:A9:ED:12
X509v3 Authority Key Identifier:
keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fc:d7:b2:43:78:a1:96:4c:08:d0:f2:58:dd:59:72:b1:0a:
a3:c9:98:83:dc:18:4b:cd:41:1d:2b:c4:a2:72:ae:38:4e:cb:
62:ea:a8:4d:34:ae:7f:23:c2:bf:7e:1a:74:91:05:97:bc:cb:
97:21:51:08:05:4d:08:1c:7d:c8:70:cd:f6:12:02:a7:2f:a9:
cc:11:d1:e9:e2:5c:05:47:f3:7f:75:3d:bc:f9:96:6f:b3:2b:
df:0b:ea:95:cb:06:02:6d:8b:2e:a3:be:c2:ee:ec:4c:f3:2a:
93:af:c4:25:75:91:c2:04:4c:1f:d7:38:6b:d1:67:a9:a7:47:
2e:7f:f7:d6:35:33:b3:53:a8:3b:f0:a7:1d:73:2c:58:09:dd:
e2:f8:3d:92:d8:54:83:64:65:09:3f:68:c6:93:d0:1a:30:37:
5f:a5:fd:bc:cb:61:52:5a:ab:9d:f6:21:37:25:ef:c4:d5:67:
38:f0:87:5a:26:79:d5:64:71:8a:9c:91:4f:57:7f:0e:06:ac:
e8:42:ef:b1:21:21:a2:78:f1:87:b4:49:a5:53:6d:10:23:16:
e7:c1:62:39:82:44:64:03:cc:44:a8:87:7b:6b:3b:ff:aa:f9:
3a:b3:4f:47:96:28:60:2f:bd:9e:7a:e8:d7:b6:8a:a3:f0:87:
47:8c:43:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+rLQolC36M78rr/G1+uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNzhiNmQwMDYxNGY1NTY1ZDlkOGFmODI0N2NjNzJlYTli
ODgzM2QwHhcNMjYwOTEwMTEwMTIwWhcNMjYwOTExMTEwMTIwWjAzMTEwLwYDVQQD
EyhiMmI5ZmQ3NDQ5ZGYxNzM3OGY3ZGJhZDRlNDMwMDFjOTJkYTllZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhEbTF4VjGzQonUWjz7LVoFffpBi
2snrTWKyjgBnHmroOG7E6NTvQknQNj0Mg5c4DjyFPyqokWQBe5MzF3qOdwk0uvsz
7DRd0Y5YExFDEkSER9E7aAVscp4JJuz0El2dqP7+WcufHDqta0rde9SzH0oOUW9E
5lhw/mld7YHeLIVKOvqVnQPLBOVq0023pfOZwoL4xKme2ACwBNvUhaifHAnA/2aq
q23eTij473zgQNOFf1mdXHjGE1IDJ4Fmbg3j8+XNJ19QoWzV5uy3/UUlljmJJU6B
qTqxtAfG/dlrsaFzt0DfAnxXwMy9We5zTS+2TyQeKILIJ/msZvZTXfm5MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLK5/XRJ3xc3j3261OQwAcktqe0SMB8GA1UdIwQY
MBaAFE54ttAGFPVWXZ2K+CR8xy6puIM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgt
ZGVmMzg2NzQzZjMyLzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jYjgyNjUtYzYzMi00ODEzLWI4NTgtZGVmMzg2NzQzZjMy
LzEvVG5pMjBBWVU5VlpkbllyNEpIekhMcW00Z3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/zXskN4
oZZMCNDyWN1ZcrEKo8mYg9wYS81BHSvEonKuOE7LYuqoTTSufyPCv34adJEFl7zL
lyFRCAVNCBx9yHDN9hICpy+pzBHR6eJcBUfzf3U9vPmWb7Mr3wvqlcsGAm2LLqO+
wu7sTPMqk6/EJXWRwgRMH9c4a9FnqadHLn/31jUzs1OoO/CnHXMsWAnd4vg9kthU
g2RlCT9oxpPQGjA3X6X9vMthUlqrnfYhNyXvxNVnOPCHWiZ51WRxipyRT1d/Dgas
6ELvsSEhonjxh7RJpVNtECMW58FiOYJEZAPMRKiHe2s7/6r5OrNPR5YoYC+9nnro
17aKo/CHR4xDAw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:42:50 2026 by rpki-client