Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: G2ZNXw7O3fFsPZbBVS9GJCDKYyqEPuuYTaFu8aRV29Y=
Subject key identifier: 21:CA:BD:C4:E0:B0:FA:42:83:96:C0:CF:34:54:2B:9D:44:B9:C4:B4
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 01A08B31AA53DC0CA3F83F543CD973EC956A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 1A42
Signing time: Thu 10 Sep 2026 12:01:22 +0000
Manifest this update: Thu 10 Sep 2026 12:01:22 +0000
Manifest next update: Fri 11 Sep 2026 12:01:22 +0000
Files and hashes: 1: 8yi1LBcjZuFqYFbdgC_s2aSxkWc.roa (hash: iWLx5N8cPN2G1zQ0siO1bQR7tW0bfENSaMdy9lql9Uk=)
2: FKdM40ixAn5Mv7sd-loN1AAlLBg.roa (hash: oxhIXVSaVG2AzY2umVVW0jiHJlu6SrIl96kfe/IkKnU=)
3: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: dkmVhH69lmqugauW66BxJEOLB5UKgyjAVsML1QerxqQ=)
4: XQyVVxaL-SdHJ4wD0gRKxpiqWbc.roa (hash: xaYqQflJcYim9yjUKuHpULSvGoUaQ7dk6PnJOftMQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:aa:53:dc:0c:a3:f8:3f:54:3c:d9:73:ec:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Sep 10 12:01:22 2026 GMT
Not After : Sep 11 12:01:22 2026 GMT
Subject: CN=21cabdc4e0b0fa428396c0cf34542b9d44b9c4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:bd:9a:70:e8:13:a7:12:96:73:25:5d:69:
a0:e6:c2:ee:23:14:de:79:92:82:a9:8c:f8:30:29:
0f:ef:6d:37:95:95:03:46:d0:ab:1a:aa:0c:18:96:
2b:75:cb:11:db:c2:9a:18:02:b8:b1:de:5b:21:bf:
71:fe:fe:94:9d:4e:3d:00:60:b9:d8:6c:bc:06:d4:
13:bc:c6:cf:61:69:76:14:33:39:8d:d7:d0:71:4c:
68:84:ba:8e:62:00:25:84:40:67:8c:c7:e8:2a:65:
ee:60:70:d9:f2:ee:00:3f:92:fe:c3:97:ae:ac:9b:
77:09:8d:a5:ad:0e:67:7f:76:5f:3e:9c:2b:cd:9a:
de:11:48:ab:98:d0:d4:84:11:ea:d6:0d:98:28:d0:
1a:23:63:d7:02:fa:be:aa:74:8e:ad:fc:11:26:56:
22:98:53:75:9e:aa:ff:bd:a4:58:86:4a:74:2c:97:
43:3d:cd:29:b7:8a:48:09:49:e1:05:65:fc:8e:f5:
5c:2b:99:ae:c8:39:3b:9e:cb:5c:03:63:8f:fe:31:
b8:f6:ed:db:2f:c3:89:65:26:33:20:27:c4:ce:ff:
b7:03:24:83:38:3a:15:f5:6b:fc:28:67:ca:08:11:
03:b6:c5:f5:f7:fc:3a:05:ee:2b:3f:89:9b:f5:9b:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CA:BD:C4:E0:B0:FA:42:83:96:C0:CF:34:54:2B:9D:44:B9:C4:B4
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:f4:41:85:6d:4d:52:58:74:c0:83:a3:90:4e:c1:ea:9d:b0:
a6:78:97:5c:ea:ae:9a:3c:d3:a1:08:fe:27:29:7b:0f:63:aa:
03:57:e8:45:33:da:68:46:f7:13:84:f8:d4:b0:a7:f8:9b:e8:
b0:ec:cf:45:7f:a0:ce:99:93:52:47:e3:97:05:55:4b:b9:da:
eb:bf:30:6d:d1:98:d6:1b:f0:ed:96:38:ef:2e:c5:9e:34:2a:
da:64:ca:e3:b5:f5:5d:6e:9c:e9:4b:b1:16:d8:c4:37:4b:de:
3d:29:52:7b:54:e1:33:8e:f1:90:dd:6b:95:6f:33:58:a9:4b:
41:88:5c:ea:6c:17:60:f8:34:c9:90:cd:01:96:08:f4:5a:da:
c9:0b:3d:f8:e4:d7:d8:bb:d1:c5:cb:2c:20:84:5d:b7:bb:d7:
ce:26:03:6e:bd:9c:ad:a0:bc:41:a5:91:ec:ac:e2:d5:3e:bc:
67:8a:ce:71:54:e5:9a:99:7b:44:82:f4:6d:e7:39:81:ff:e8:
e7:fb:b1:31:6d:20:04:24:90:49:8c:74:fc:2f:5a:a7:0f:3c:
0b:29:80:84:cd:4b:d9:7b:55:00:84:a6:9c:3e:84:ac:d6:b7:
7c:0a:a4:25:62:f1:57:bb:1f:87:ea:6c:c0:52:2d:c2:85:a8:
98:2b:72:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:25:16 2026 by rpki-client