Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
File: TsTzl1j2BWug1JKloEudaGbGApI.mft (raw, json)
Hash identifier: jyqnusfzZjE8mHTOMKHLHQGm8tensQ/dwN15fIi/L3A=
Subject key identifier: 4A:59:1D:04:D3:BC:D4:35:B6:13:55:96:A6:54:2A:88:EF:F4:3E:F3
Authority key identifier: 4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
Certificate issuer: /CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Certificate serial: 01A1385AE3312A2B3B928600A83E977B6EC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
Manifest number: 011B
Signing time: Wed 14 Oct 2026 03:00:42 +0000
Manifest this update: Wed 14 Oct 2026 03:00:42 +0000
Manifest next update: Thu 15 Oct 2026 03:00:42 +0000
Files and hashes: 1: HGyrrFsoh_dkrLZZtnTJsMYjPOg.roa (hash: m3qcvytC4O+9pABPedPudw1QdoZyvWEqd2L9LP+DeoM=)
2: S8ku3gf4vWkmxFBDkBkEiAy9So4.roa (hash: DxiREQgQfDk48dsaRbdhgiH4PUmwi+B75L8QRMAKRYY=)
3: TsTzl1j2BWug1JKloEudaGbGApI.crl (hash: BuD/S8JSdr+/HZBRVtTx8epPylOJIY+mZ/IBGCpmai4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:5a:e3:31:2a:2b:3b:92:86:00:a8:3e:97:7b:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec4f39758f6056ba0d492a5a04b9d6866c60292
Validity
Not Before: Oct 14 03:00:42 2026 GMT
Not After : Oct 15 03:00:42 2026 GMT
Subject: CN=4a591d04d3bcd435b6135596a6542a88eff43ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:46:d7:a1:25:e6:8c:93:99:e5:26:1e:dc:
a3:29:7d:ba:fa:53:f6:3d:10:4e:39:d1:74:5f:26:
3e:32:66:48:8d:05:2c:cb:3b:46:0e:da:3b:ca:cb:
a5:f1:aa:ea:db:c4:9d:c2:eb:31:39:6f:39:65:35:
fa:83:3e:02:70:bb:db:05:f3:af:0c:95:2c:e8:f1:
c4:83:62:9b:42:ca:e6:48:81:0b:2c:7b:50:ef:af:
91:c0:96:3f:66:db:a8:58:b6:2c:16:59:65:e2:64:
a8:89:99:e8:86:88:b0:f1:25:81:8e:86:ce:28:25:
a4:bf:21:fe:00:ef:b3:1a:d3:2c:34:f0:29:5b:73:
a0:49:ca:c0:76:2f:75:6d:b6:b5:28:fc:3b:36:29:
d0:60:01:54:71:bc:f7:81:b7:98:fa:e2:bd:05:21:
c6:3d:02:9b:93:56:16:9b:09:ab:8e:b1:63:71:7e:
18:21:31:e2:51:30:df:3e:8b:f7:23:22:bf:40:34:
4e:eb:de:73:d8:60:08:4a:10:17:e4:4d:d6:45:04:
20:44:25:68:38:43:09:61:d2:93:f9:ac:f3:8c:70:
36:f0:90:1c:11:a4:01:b4:e5:23:a6:ec:5b:23:04:
2c:3e:95:3d:5a:8a:73:bb:87:3f:2d:15:95:31:e5:
ef:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:59:1D:04:D3:BC:D4:35:B6:13:55:96:A6:54:2A:88:EF:F4:3E:F3
X509v3 Authority Key Identifier:
keyid:4E:C4:F3:97:58:F6:05:6B:A0:D4:92:A5:A0:4B:9D:68:66:C6:02:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsTzl1j2BWug1JKloEudaGbGApI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f7a87a-c184-4904-94e3-2685986f6d01/1/TsTzl1j2BWug1JKloEudaGbGApI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:83:6e:78:49:1f:7e:9d:c6:aa:2d:04:17:fe:7a:63:97:26:
40:9c:34:42:0c:a9:65:bd:33:09:5d:ae:13:c8:ad:1c:d7:2b:
69:97:f3:b3:cf:1c:1c:ab:53:26:0e:dd:d6:53:fa:52:f3:73:
b5:c9:f3:96:82:e6:03:d3:de:56:be:f7:5a:97:2c:23:d2:a7:
41:f7:bf:f4:ba:b8:21:83:08:47:32:dd:c7:e1:6d:99:99:15:
00:62:ac:25:20:d3:36:7a:33:08:d9:d6:55:d2:c7:6a:2c:26:
21:b0:30:0e:99:18:5b:e1:41:3e:af:9c:27:09:e3:13:5f:d4:
ed:0b:48:39:de:09:c2:08:57:9f:f3:68:69:ba:a3:c7:cc:8f:
b6:1d:85:32:14:a8:77:8b:5b:99:de:d6:18:22:e0:8a:6f:e5:
a0:b7:1b:f3:2e:25:b8:85:7c:79:92:29:da:07:ea:aa:9b:c7:
29:20:8d:9a:48:44:23:83:9a:b9:64:58:cd:03:99:90:22:f2:
fd:13:8c:b4:52:02:01:4c:ae:f6:61:98:62:78:9a:28:68:80:
8b:9f:b0:fc:e6:24:4a:f7:36:c9:74:50:01:45:50:d9:53:b1:
be:ba:21:cf:22:4a:1d:96:88:db:0e:17:c0:c2:ba:38:68:02:
02:c2:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:07:17 2026 by rpki-client