Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: sOrpU3lAU70ko8Rf5+mhjpkfppH/doT/Wm6J+huJCoY=
Subject key identifier: F1:43:BC:76:C0:D2:00:D3:36:84:D3:EE:67:FE:CA:35:E6:1D:9D:22
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 01A0599FE165BC8C0EFB81FCE5CF79EEDE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 1A2E
Signing time: Mon 31 Aug 2026 21:00:45 +0000
Manifest this update: Mon 31 Aug 2026 21:00:45 +0000
Manifest next update: Tue 01 Sep 2026 21:00:45 +0000
Files and hashes: 1: 7nORkz-7qToh44AbRCrHCl9vv3E.roa (hash: xBt5aq4rSmZs31Jle6K9vL3XZBjZD/54M66ZODWqUSs=)
2: 9BMpPQCXYa9iAWdP2TQAreaKWyQ.roa (hash: xV21n8W5dIy0xlrUtRbBzIVLWmesJ+mUBCHJFnPnvhs=)
3: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: D0Vtj1oRZnzaMPKDY+hh8gvwnQeMURUdTZwKGfY3wew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:9f:e1:65:bc:8c:0e:fb:81:fc:e5:cf:79:ee:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Aug 31 21:00:45 2026 GMT
Not After : Sep 1 21:00:45 2026 GMT
Subject: CN=f143bc76c0d200d33684d3ee67feca35e61d9d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:93:d1:a9:cd:8c:37:9d:04:19:af:9d:8c:
b9:e4:46:02:06:b6:ef:8c:28:06:9c:0f:60:38:e7:
ce:98:aa:5e:ba:a0:9b:80:03:c5:fb:94:42:d4:0d:
27:b4:3d:a2:d6:c7:22:f4:45:18:41:59:1b:7e:fb:
dd:75:22:a4:bb:1c:0f:32:59:a5:5c:1d:7f:df:89:
15:3a:7b:68:95:61:e1:0e:4a:9c:04:16:1f:de:08:
ae:6f:b1:1f:70:b7:8f:98:93:b6:b8:de:c0:cf:71:
80:fc:88:ed:e0:44:b2:04:34:74:bf:b9:15:a9:84:
9b:78:5b:21:a9:cd:cc:f8:71:94:f5:c4:02:db:a5:
08:a7:ca:0d:65:32:db:96:2d:eb:15:8e:34:56:9d:
5f:04:8a:fe:f0:f1:9f:03:57:70:ea:ab:2e:d7:89:
91:b8:42:8c:0f:7e:19:ed:63:d4:7b:cd:ab:a5:7e:
7d:d2:75:12:37:a4:99:9c:2e:e2:fd:3b:f9:d8:9a:
4b:be:df:c3:70:c2:b6:98:a1:c1:b4:60:00:1d:a1:
3c:f3:89:81:5b:fb:d8:ea:90:ad:d1:f5:e2:9b:1e:
c7:80:50:bd:1c:f5:c3:62:1d:82:91:b2:3a:82:6f:
35:c3:c4:08:91:5d:54:eb:43:e1:13:9d:88:42:cb:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:43:BC:76:C0:D2:00:D3:36:84:D3:EE:67:FE:CA:35:E6:1D:9D:22
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b2:cf:01:f8:69:11:fb:d2:62:79:5b:f4:1a:99:02:0b:83:
bf:29:4a:8d:36:14:c4:bd:dd:0c:a3:1a:ad:81:84:25:6d:d8:
1d:bf:f2:6e:49:73:d0:c2:a8:3c:f8:4c:59:c5:d6:8b:3c:40:
ab:84:55:04:00:a6:b1:1c:68:0a:e9:e7:52:41:f8:3b:06:af:
ab:bd:44:6c:a9:2e:26:6a:2e:fe:35:69:56:1d:9a:be:88:43:
a3:02:13:bf:42:4c:68:f6:da:19:96:d5:d8:62:ae:2b:05:62:
ae:24:4d:e5:85:67:2b:7a:b2:d8:9f:e2:95:f2:8e:c9:c3:41:
4c:fb:cb:3b:09:02:13:c4:16:76:7f:f4:36:bc:82:c6:c4:6c:
8d:ae:29:50:0b:82:9e:67:63:46:39:38:c5:36:d7:65:0b:e0:
b1:4a:50:07:b8:d5:3e:5b:dc:2c:5e:1d:4f:14:24:c0:88:4c:
2d:69:de:c6:75:77:62:cc:91:17:6a:76:5d:bf:7f:eb:67:9b:
07:65:e1:81:a6:83:db:56:e2:d3:2a:a4:94:29:09:b6:3d:fa:
67:dc:bf:30:8c:dd:ef:1e:98:72:af:0b:46:3d:c8:a2:38:f2:
92:5a:53:76:be:a4:4d:16:75:10:13:db:fe:de:ae:c7:da:a2:
eb:b4:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:41:43 2026 by rpki-client