Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File: TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier: AzojUFwWO4wOkCsJujzMfHEBo7ygXFuvNo0g/UW+upc=
Subject key identifier: 87:F1:7A:20:83:CC:D8:44:AE:83:06:F4:49:C0:6A:98:A3:0B:ED:61
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer: /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial: 01A089E8087A64D525AE2AF0B8ABE6DE0A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number: 1A43
Signing time: Thu 10 Sep 2026 06:01:20 +0000
Manifest this update: Thu 10 Sep 2026 06:01:20 +0000
Manifest next update: Fri 11 Sep 2026 06:01:20 +0000
Files and hashes: 1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: MdrYNLJDs3n0hXp9Be6mFfX6uJ3YPKcNc4PwGX1a6Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e8:08:7a:64:d5:25:ae:2a:f0:b8:ab:e6:de:0a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Validity
Not Before: Sep 10 06:01:20 2026 GMT
Not After : Sep 11 06:01:20 2026 GMT
Subject: CN=87f17a2083ccd844ae8306f449c06a98a30bed61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ad:a5:21:bb:3f:1a:c5:0f:5d:be:2b:04:a9:
a8:83:f8:0b:17:f8:1d:3b:6b:38:75:82:f0:7b:ed:
bf:6a:ea:04:35:bf:3a:0c:c8:83:58:59:02:de:23:
ef:7b:69:04:3f:3b:ba:5d:17:29:0a:ff:ea:7a:72:
4d:12:f8:48:86:80:ff:67:1b:20:6f:9c:0b:12:c6:
71:1f:18:b2:c8:1b:8d:71:2b:1e:31:3e:1d:df:4e:
7d:fa:18:f5:ed:8e:24:c7:ad:83:99:e7:40:b8:7c:
e1:76:d8:56:44:d5:da:eb:78:cc:fc:f6:20:7c:78:
3e:65:10:ee:71:90:67:13:c0:11:22:27:d2:e8:75:
1f:71:c2:c5:f6:60:df:84:0c:af:88:ef:c1:b4:0c:
46:e6:48:55:a2:42:3d:18:65:0c:e3:45:db:96:ed:
36:e5:a1:0a:e0:35:47:60:8e:21:d2:5e:af:88:89:
9b:8a:ec:12:11:12:55:0e:75:76:ee:a0:b8:0f:fa:
f3:76:58:0d:94:6f:a9:00:39:14:87:16:78:7b:45:
41:24:45:0a:4e:e9:0a:0f:33:a3:bb:63:2b:58:41:
67:f3:73:ff:f7:83:dd:c5:db:4d:8e:bc:83:e7:7b:
92:dd:f5:a6:c4:25:c4:e4:78:5d:f9:f5:8d:01:ee:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F1:7A:20:83:CC:D8:44:AE:83:06:F4:49:C0:6A:98:A3:0B:ED:61
X509v3 Authority Key Identifier:
keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5c:76:3c:6c:23:71:18:b0:b3:eb:52:9e:8c:fd:84:b0:de:
86:34:16:04:21:34:7f:01:28:8a:03:ba:0f:36:2e:0d:78:28:
f2:00:4b:51:e6:af:2f:38:ec:e0:6a:c2:48:99:48:f2:cb:9f:
bd:7f:06:f8:3d:19:a7:ff:b7:e5:d8:23:ed:9d:18:5f:3c:cc:
a8:7a:90:2a:10:06:ae:2b:43:46:8d:ab:84:a4:09:ed:78:30:
fa:de:f8:07:88:1d:3e:d0:06:b2:3e:fb:46:6c:56:c3:11:aa:
dc:57:f8:f6:e7:82:fa:df:65:a5:32:5e:97:6d:d4:e8:cd:a1:
e5:a8:34:f3:bf:91:76:35:fe:bf:b8:94:a0:49:8a:87:63:d1:
ff:69:d4:86:72:8e:c8:d2:f0:82:ae:84:80:9e:94:4e:fb:e0:
02:e5:e9:5e:b1:2c:46:5e:d4:c0:aa:39:6c:11:ac:6f:5d:95:
b6:29:cf:fa:30:2e:a2:f9:e8:b6:19:9e:f3:fe:25:51:1b:58:
13:86:73:2e:0e:15:de:5e:c0:80:70:7c:85:6a:2f:5d:f2:4a:
e6:bb:e0:d1:77:e7:d1:07:40:1c:11:0d:e7:5b:34:ad:15:4b:
c0:14:56:9f:1b:e0:ec:ca:84:0a:c8:db:29:7c:0a:e4:2b:1d:
bc:bb:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:53:09 2026 by rpki-client