Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: H2IIZwu9F7Tequg04SdkSzbbJo4+D+Pnk0/G5P7X0P4=
Subject key identifier: 80:BD:D5:13:7A:CB:B8:28:43:3F:41:33:47:36:D3:B9:5D:06:E2:B4
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 01A020C37A66FADC01D06FEDDC59B1C34DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 1A11
Signing time: Thu 20 Aug 2026 20:01:16 +0000
Manifest this update: Thu 20 Aug 2026 20:01:16 +0000
Manifest next update: Fri 21 Aug 2026 20:01:16 +0000
Files and hashes: 1: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (hash: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o=)
2: S_kn4DkQroHqq7HAquDXguodEnE.roa (hash: 9xxNTgjpkgjoYZUn/S2u9DKQyLLVAn0QlTy3a/LjFvI=)
3: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: YqILIEtcT3V6sNWG0aHOS3JFFeFTG0hlK1fRvKXOd2M=)
4: wkBj6meKGNLkzfK8dNJpio292qU.roa (hash: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:7a:66:fa:dc:01:d0:6f:ed:dc:59:b1:c3:4d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Aug 20 20:01:16 2026 GMT
Not After : Aug 21 20:01:16 2026 GMT
Subject: CN=80bdd5137acbb828433f41334736d3b95d06e2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:cd:80:ec:eb:a3:a0:91:64:1e:d3:d5:a0:
98:d9:5b:eb:9e:fb:ff:93:c3:5f:3a:17:d8:bf:16:
1b:c5:29:0e:4c:37:78:c9:81:6c:c8:1d:0e:63:11:
2b:3c:2c:d9:0c:ef:b3:a0:e7:b3:2d:63:21:bc:71:
28:86:dc:82:c6:ef:ef:76:12:fb:4d:b0:52:1f:87:
b8:ba:d9:e0:a9:99:e6:b5:c5:0b:39:9e:2e:75:2c:
77:b7:77:fd:f8:a9:43:18:6f:27:dd:da:ab:b8:fb:
de:4a:71:f0:96:3c:52:c7:c8:7e:2e:8e:25:5a:f5:
1b:61:e2:4f:a7:4a:4a:da:62:5a:94:79:3a:09:b5:
f4:be:4e:5f:32:b2:9c:90:bc:b2:37:cf:40:b7:fa:
02:03:41:33:de:56:68:b4:03:b6:e9:31:e3:c0:61:
c0:48:c5:cc:0f:59:ce:be:3a:18:dd:79:34:93:df:
cf:a9:69:f3:c0:7c:5e:e2:4f:1a:c8:8c:18:83:9b:
47:ce:35:82:ee:69:0a:40:eb:36:cc:2b:b2:ac:cd:
d0:ec:be:72:c7:a0:50:cf:a8:12:57:e4:f0:5c:b1:
fc:16:79:e4:e8:63:1e:74:5a:cd:ec:e4:58:3f:90:
33:17:43:e5:10:63:09:6a:23:6f:80:f8:3b:6a:bd:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BD:D5:13:7A:CB:B8:28:43:3F:41:33:47:36:D3:B9:5D:06:E2:B4
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6f:46:0e:9b:8a:7c:dd:d9:f5:30:6c:82:b8:e5:37:d7:05:
a0:46:74:cd:fa:1e:1d:b5:ab:29:f9:d1:9c:af:50:cb:14:37:
5a:f8:e2:8b:c4:be:89:ae:4b:d9:c7:46:4d:ff:5a:6e:bc:7d:
e3:d5:9c:60:10:dc:50:28:2f:17:ed:b0:2f:51:66:12:51:62:
02:66:0a:ef:8b:5f:a1:98:67:9d:fb:c9:b5:6d:31:d0:49:89:
46:7c:dd:a6:02:6a:33:ad:73:2f:53:24:aa:82:ef:74:c7:b3:
e3:c3:23:23:2c:73:5b:a5:42:54:0a:98:d7:d2:26:70:06:3b:
e1:25:58:bb:39:f8:d7:85:d5:c8:9a:c0:33:05:93:e6:23:cf:
6b:75:fc:57:a8:06:bc:1b:cf:e8:4d:f1:b9:5f:a3:62:4a:23:
81:c1:b7:3f:27:f3:6c:ec:28:cd:a0:d5:f2:b2:d0:bd:27:f5:
3a:16:d0:c9:c5:05:82:d6:92:95:2b:13:97:7a:cf:49:27:57:
12:42:46:4a:5b:74:08:3a:b9:3b:01:7f:83:c3:72:cd:ac:52:
00:aa:e3:f0:8b:fd:45:d6:39:29:14:f6:71:15:c5:6d:af:e9:
68:be:bc:e2:40:07:97:78:3e:e7:83:87:18:b8:79:16:c2:6a:
a2:fb:70:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:33:21 2026 by rpki-client