Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: jogxFpSBGw+IZXMzoh2aG+7FcKeXTbiIKsrbV3QYD6M=
Subject key identifier: 92:D3:E8:CC:58:28:D1:A3:EE:06:76:E7:1A:25:66:8E:F4:DE:3B:B6
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 01A08B686EF326D885633188074113A18E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 13:01:12 +0000
Manifest this update: Thu 10 Sep 2026 13:01:12 +0000
Manifest next update: Fri 11 Sep 2026 13:01:12 +0000
Files and hashes: 1: LgGfCw5P6EPS02odz9L5gtFB9CY.roa (hash: TMsWFDEHJPQcP7QFpiFpw7haPOsCTPLSZXPOO1J1hGg=)
2: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: H+iZwEHTfYmtF6aF4oBvRqmsXKt6lDTMsfr1zBwf6IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:6e:f3:26:d8:85:63:31:88:07:41:13:a1:8e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Sep 10 13:01:12 2026 GMT
Not After : Sep 11 13:01:12 2026 GMT
Subject: CN=92d3e8cc5828d1a3ee0676e71a25668ef4de3bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:3e:ed:e9:d3:7f:46:6c:e9:bb:af:59:82:
ca:f8:14:0a:53:3a:ed:15:21:8d:64:19:27:ed:46:
e5:63:bb:8e:74:06:a9:d0:fa:f9:6f:22:35:ec:65:
a9:8d:68:64:b4:00:c0:cf:a2:27:25:e6:e3:9c:d5:
01:f8:2f:db:54:ab:dd:54:11:65:7e:a9:d8:99:cd:
7c:b8:1a:df:4a:b4:d6:7c:31:58:16:9d:25:4d:77:
3d:03:b3:7a:bd:b4:96:a3:e4:4b:23:cb:5c:68:25:
0d:1b:b6:7a:72:40:3e:08:d9:e2:3a:ac:ed:e2:39:
7e:ac:3e:05:c0:4e:92:eb:eb:b2:1a:37:ad:6b:09:
3e:eb:cc:fb:19:27:47:2c:08:7d:41:b7:3f:f3:54:
82:a8:8b:ef:72:c2:cf:e1:5c:58:cc:e0:82:06:96:
2c:e9:da:51:a8:f5:23:27:2b:60:c4:5c:e5:56:46:
e1:cc:e9:74:8b:d2:ad:12:78:99:02:b3:95:ea:2f:
56:3e:5a:00:b9:20:9b:fd:a5:9a:97:fa:a5:a1:22:
0f:cf:de:41:b0:f6:1b:ae:e5:6f:04:47:bd:3b:d8:
a4:09:4b:e8:60:ad:c0:d7:87:4d:f5:3b:5a:29:1f:
f7:c2:1c:ae:bc:18:11:a1:dd:9c:0b:d0:3c:68:05:
24:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D3:E8:CC:58:28:D1:A3:EE:06:76:E7:1A:25:66:8E:F4:DE:3B:B6
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:5d:ae:44:54:c2:eb:32:ae:06:a1:53:00:5b:6b:90:95:86:
cf:f5:31:81:5b:0b:3e:cc:76:a6:0e:1e:3c:87:fe:a1:bb:29:
07:53:d9:a5:9a:7b:71:c9:2b:b8:9c:85:68:2c:fc:8d:09:1e:
18:8c:77:2e:9a:35:b7:6d:96:eb:f6:83:09:29:9b:ed:ea:23:
80:9e:56:8d:ba:19:6e:39:2e:07:0b:54:a1:05:92:93:54:2f:
f0:e3:e4:c0:74:f8:4a:30:98:0b:f6:56:80:95:f0:bf:c6:c7:
8a:01:bd:6e:b2:36:20:10:01:3c:83:bf:b5:2b:30:d1:21:a0:
db:e5:f4:26:2a:bf:77:15:e3:5c:5e:36:24:11:85:6c:12:13:
f1:91:36:08:1a:dd:b3:e5:4c:96:db:40:65:fb:b6:ac:27:25:
2c:ef:eb:ec:1a:ff:95:3f:fb:a2:14:19:4e:1a:6e:d6:97:25:
59:53:12:04:50:34:30:c5:af:8a:ed:c0:f9:c6:bf:ea:2c:0e:
78:90:7d:aa:c7:f0:13:65:31:48:e2:9c:04:0f:9b:50:cd:0f:
22:04:b1:0b:b3:94:54:05:43:4c:b9:44:38:bc:25:3d:3a:67:
ae:8c:2a:35:52:44:61:3c:5c:f7:75:14:b0:57:74:a7:41:3a:
06:d8:cb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:42:31 2026 by rpki-client