Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
File: TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft (raw, json)
Hash identifier: w48na6PRocFd6TXKqnPkQO2j51hYgplxywMmHv1LOtU=
Subject key identifier: C9:D7:E3:F8:74:04:D3:EC:4A:D2:4E:F9:DE:FA:FF:04:D8:71:3A:56
Authority key identifier: 4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
Certificate issuer: /CN=4c92657196d39360f3201338f4b13805ba69e230
Certificate serial: 01A0B79BD4EB3C26FE61852E1BAA35FB28D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
Manifest number: A0
Signing time: Sat 19 Sep 2026 03:00:38 +0000
Manifest this update: Sat 19 Sep 2026 03:00:38 +0000
Manifest next update: Sun 20 Sep 2026 03:00:38 +0000
Files and hashes: 1: GsCWehWfuR0Y5YAQxihGBdvrxRg.roa (hash: z7BYtMDbjCrW08d8JA7x90045Wib1Z+pxaVr97f8FKU=)
2: NNYJKSx4PH4wHLznLKSJ_tdSV74.roa (hash: tz4qDyJHR65GtxJWUzlYMsmg6QvJmo2pArNsj2Sgvek=)
3: TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl (hash: laRad4m5k+733BFDXQT6fT/saD6Y8CW/v2uolDF/93g=)
4: luf1YTB9xStV-pMcK9RhrzVtwoI.roa (hash: diCNzTBi/BtQjQQlSYdbD6MqDG03HWPnxAs6lAtK11o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:9b:d4:eb:3c:26:fe:61:85:2e:1b:aa:35:fb:28:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c92657196d39360f3201338f4b13805ba69e230
Validity
Not Before: Sep 19 03:00:38 2026 GMT
Not After : Sep 20 03:00:38 2026 GMT
Subject: CN=c9d7e3f87404d3ec4ad24ef9defaff04d8713a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9d:14:ad:43:5c:40:a9:4f:ea:6a:9e:da:9f:
4f:46:a7:b1:ad:81:be:60:cb:69:be:16:32:f9:c3:
4e:8a:fc:38:12:5b:a5:7c:34:af:31:29:a4:c5:52:
9d:05:8b:db:fb:4a:48:3e:42:03:4e:6e:ac:da:04:
e9:33:e9:dd:3e:88:5d:ad:7a:ca:33:1f:ee:17:6d:
39:6c:bd:52:e1:61:f1:fe:7e:87:a7:f4:db:b5:d4:
ce:82:45:29:da:3e:84:0c:22:17:42:f6:af:96:b1:
8a:59:54:24:de:23:28:3c:0e:e6:7d:22:88:6b:7d:
1a:fb:0b:86:d1:6e:b6:70:29:25:55:60:a7:db:84:
ab:3e:33:42:83:4b:86:aa:46:cf:b4:01:53:c2:5f:
d6:77:e6:48:b8:20:2b:1d:ee:a6:f9:19:d6:6c:f4:
2e:11:b2:03:3e:ea:16:d8:7a:04:3f:fc:9a:7a:58:
12:c9:ee:3c:63:e5:c1:d2:52:b5:f3:4d:7b:77:80:
d8:4a:53:8d:8d:33:0c:55:68:2a:80:30:b7:9d:d2:
c8:30:c0:8e:d8:16:11:36:91:76:1c:2d:c0:a8:51:
c9:6f:d8:48:80:fa:e7:12:86:31:04:d2:ec:63:35:
dc:0a:fa:a4:12:7a:b3:81:19:f0:2f:fa:05:b4:78:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:E3:F8:74:04:D3:EC:4A:D2:4E:F9:DE:FA:FF:04:D8:71:3A:56
X509v3 Authority Key Identifier:
keyid:4C:92:65:71:96:D3:93:60:F3:20:13:38:F4:B1:38:05:BA:69:E2:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJJlcZbTk2DzIBM49LE4Bbpp4jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c45a9c-b983-43f6-a449-cd9d6ac801bd/1/TJJlcZbTk2DzIBM49LE4Bbpp4jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:38:57:de:7c:cf:ef:72:5e:7a:72:00:74:91:ca:3e:0c:2f:
b3:9b:53:f9:bd:df:51:8a:fe:fc:06:24:dd:70:26:69:5f:f1:
c9:73:19:36:28:a4:98:25:c2:c8:ff:c3:57:eb:f2:e5:bf:ff:
6b:c6:9b:17:c8:78:89:29:df:be:d1:5e:57:b4:90:40:89:1f:
02:a7:15:17:39:23:64:ac:5a:14:60:f4:d4:96:53:94:11:9a:
8c:a8:85:8c:90:c0:3f:05:27:60:18:95:e6:12:c6:a0:c9:5d:
7e:b3:89:a7:81:46:45:f9:24:ca:1e:05:4d:2e:4a:bd:b8:1a:
43:04:7c:9a:b4:37:67:e2:52:2d:48:6b:2b:c2:ce:9c:7b:c0:
7a:50:7d:cf:a6:d7:e3:72:ee:24:2b:cc:ec:18:39:e7:86:d0:
b2:15:33:68:62:c7:82:d4:51:9e:dc:86:1e:0f:ff:2f:78:52:
92:d4:5a:31:12:ff:e8:50:95:90:25:d5:31:c8:ab:ff:17:0e:
1e:37:cf:2c:ef:91:21:6c:1d:76:f2:93:87:64:16:d1:4b:9d:
d5:2a:9c:4f:97:14:23:50:32:a9:18:3b:24:a8:37:ac:79:7a:
eb:4a:3f:07:36:36:80:75:4d:94:25:88:97:2c:ee:c5:4e:4a:
56:59:00:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:42:18 2026 by rpki-client