Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
File: TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft (raw, json)
Hash identifier: m9zl8KX+jRaHBdYOqB+4LSl4MZKt9cViIgUP8eaasaY=
Subject key identifier: 8C:83:27:8F:F9:30:F5:0A:0D:89:FC:03:48:4C:C4:17:06:C9:C6:90
Authority key identifier: 4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
Certificate issuer: /CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Certificate serial: 01A17582942D71D61C2E75313447DF6203B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
Manifest number: 076A
Signing time: Mon 26 Oct 2026 00:00:54 +0000
Manifest this update: Mon 26 Oct 2026 00:00:54 +0000
Manifest next update: Tue 27 Oct 2026 00:00:54 +0000
Files and hashes: 1: GHKMa_KSipTSmf3pI2wnkS6Tr20.roa (hash: OnS7nAX4PtptEhEkwUT11ufA7pPlMC3cHL0kMdeoeW8=)
2: TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl (hash: tbqAFEOOd9C8yjv5sISbhvLgF6uVvVgZ2pyVFvlmWtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:94:2d:71:d6:1c:2e:75:31:34:47:df:62:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Validity
Not Before: Oct 26 00:00:54 2026 GMT
Not After : Oct 27 00:00:54 2026 GMT
Subject: CN=8c83278ff930f50a0d89fc03484cc41706c9c690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:5a:61:22:fe:03:ed:84:ab:23:3f:22:48:
41:8f:fe:e0:10:40:2e:83:74:2a:2b:6a:ae:c3:82:
1f:a5:d8:69:94:6b:99:ff:ff:16:ed:56:15:56:4c:
42:88:4d:d6:cf:b7:b7:11:f8:68:8a:5e:d5:94:4d:
7e:7d:51:24:e4:65:d8:79:d9:38:70:93:73:24:a9:
ac:5f:b5:1b:2f:63:6d:46:b9:f3:ad:4b:88:ec:00:
92:8a:66:aa:f4:38:d5:a5:80:c5:e2:18:2c:db:bf:
81:5e:a6:08:e2:2b:53:0d:d3:64:07:05:a6:2f:cc:
9a:00:6b:7a:49:60:49:7d:cc:0c:64:bf:07:0c:5a:
2f:10:9a:24:8f:95:6f:ae:35:e8:48:b2:d3:18:3a:
f6:69:be:f0:a9:4a:84:ce:5c:ff:a3:57:62:0a:28:
81:a5:da:8d:0a:4c:c4:ac:b9:41:44:0a:31:0d:7d:
83:a3:e9:8b:f1:9a:ef:f6:e3:77:3a:4a:89:fa:89:
60:4d:19:02:02:dc:c8:51:d2:0b:08:b2:80:d6:d5:
34:1d:46:80:2f:27:21:c6:bd:fb:58:2b:4a:c2:7d:
64:2a:0e:f9:09:de:7e:94:2a:5a:93:5a:c4:c8:67:
9e:2b:a0:ba:01:27:ab:1f:e3:53:55:e6:4b:8c:98:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:83:27:8F:F9:30:F5:0A:0D:89:FC:03:48:4C:C4:17:06:C9:C6:90
X509v3 Authority Key Identifier:
keyid:4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b4:50:53:92:37:b4:a8:5c:55:b9:fa:99:77:f5:f3:36:09:
7d:02:b5:1b:e0:15:91:5a:0a:e7:a8:12:94:d1:cc:39:2d:8e:
2d:e7:66:66:13:66:8d:52:ee:18:b6:4f:6c:89:fc:fa:a5:2a:
f5:6f:ca:d7:5c:5f:c9:cb:c3:98:bb:ac:57:14:fc:f0:f1:b7:
8f:39:98:0e:7b:d1:7d:e6:d4:62:1b:80:a1:3c:f2:6d:dd:70:
f3:6d:0a:17:04:eb:89:7d:c7:7f:ed:e2:59:51:d2:81:58:69:
d6:e7:b9:bf:e0:41:7e:b5:83:d5:74:4e:e7:b5:dd:f2:57:88:
49:fc:a2:46:63:b1:82:3c:c1:55:b9:34:e0:c8:c7:49:17:8c:
04:6f:26:f8:34:7a:fe:4d:a6:b8:a9:20:4d:65:44:3a:91:d7:
02:71:ec:8a:d9:c8:a4:34:e0:9a:48:e5:c4:a9:63:af:39:62:
db:09:08:ae:64:42:96:04:14:67:f8:47:11:89:bc:b0:3b:13:
2b:62:9b:5a:ce:44:ba:a4:d2:6d:b6:f5:80:a0:ff:c8:45:b8:
cb:66:a2:78:55:5e:39:d2:8e:da:bb:27:f0:d6:3a:8d:9a:8e:
ce:47:3c:70:7d:e9:73:ec:33:17:71:23:0b:cc:30:fb:72:db:
0d:7a:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:55:59 2026 by rpki-client