Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: U9T3/PBjhHjqwsnV9sdj7yeF1Iz8sK4m+15J90JETvI=
Subject key identifier: E3:1B:35:08:77:6E:77:00:DD:6C:9F:66:8B:17:34:DD:61:37:A7:F0
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01A18D54B21362F09A042EBCA064F816AE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1AD1
Signing time: Fri 30 Oct 2026 15:01:40 +0000
Manifest this update: Fri 30 Oct 2026 15:01:40 +0000
Manifest next update: Sat 31 Oct 2026 15:01:40 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: FEme5QDmXeFLifdRlP7DM3Vjo8aZuwWNIW+mzVvfJyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:54:b2:13:62:f0:9a:04:2e:bc:a0:64:f8:16:ae:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Oct 30 15:01:40 2026 GMT
Not After : Oct 31 15:01:40 2026 GMT
Subject: CN=e31b3508776e7700dd6c9f668b1734dd6137a7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:5a:eb:f9:bd:f2:d7:c0:d4:b9:cd:54:bf:
a5:99:4c:49:45:15:87:d5:af:76:79:9c:c7:2a:c1:
b9:8a:f0:f0:2d:45:f3:bd:d2:76:38:41:23:17:df:
3e:b6:9d:30:11:11:e9:ce:78:13:35:50:1f:24:fb:
fd:60:5d:9a:be:84:71:a2:9c:3c:ca:74:1f:a0:75:
64:2d:06:5c:e1:19:cf:5f:55:1f:cd:3f:aa:99:f6:
c2:d1:15:ca:0d:12:1b:57:e8:ae:25:68:d0:46:1f:
74:7c:94:c2:ef:01:c8:d3:41:03:3c:f7:9c:a5:fe:
3e:3e:4a:e3:e3:75:db:85:3a:ef:f2:f5:35:09:9b:
c0:34:4c:8b:68:76:9c:b1:4d:34:08:ec:cf:86:d3:
ed:4d:fc:88:3a:e6:e6:cf:96:d1:e4:21:31:41:e5:
77:5b:ef:a9:9d:70:26:8d:45:f4:17:36:32:d4:2d:
ad:c7:86:1f:c3:89:05:75:de:1c:d9:36:d9:ce:c5:
19:71:f4:fb:a8:cb:d2:27:18:11:31:23:19:29:3b:
0f:41:13:c4:6d:09:7e:97:e8:b1:2e:02:11:53:3f:
2f:0c:55:64:a6:76:fc:3a:8f:bc:3e:7d:50:8b:54:
c3:d3:22:6a:76:1d:6b:87:39:3f:60:3f:dc:2e:af:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1B:35:08:77:6E:77:00:DD:6C:9F:66:8B:17:34:DD:61:37:A7:F0
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:5a:7b:2e:14:48:59:d1:4c:ad:9d:6c:bf:c0:0a:c7:26:cc:
fe:17:f5:01:f5:91:d5:1f:60:07:db:95:3b:3c:d0:0a:3f:61:
60:b8:2c:e0:ac:b8:cb:53:3f:d9:95:f1:ac:1e:b3:c0:f6:47:
ad:db:79:a0:2d:ec:8e:20:31:de:1b:68:1c:23:ed:61:4b:c1:
0d:e7:3b:40:b4:92:5b:72:a0:5a:50:71:a6:6f:7d:8a:a9:ac:
58:7d:bb:0a:fc:b7:c7:7f:7d:cb:56:55:8c:62:90:15:7a:21:
92:e6:98:6c:76:68:b4:61:61:40:66:55:5a:4b:bc:fd:ab:5a:
a0:ca:c3:35:0f:c3:10:d9:f2:09:e0:7c:27:be:6f:9f:8f:b0:
a8:e3:c3:f7:cd:d8:ea:43:cc:ba:af:0d:4b:35:48:b6:f5:fa:
bc:95:01:9a:41:29:76:88:d0:d7:92:24:b7:49:95:97:90:db:
a9:33:02:b0:1a:b2:91:8f:36:4d:ad:1f:00:a3:2e:d2:a4:9c:
c9:07:dd:ac:18:d3:58:a7:b7:54:65:09:a8:2e:3d:16:79:c5:
21:8e:3e:68:b0:ef:c8:ee:84:4d:8c:23:33:51:96:69:b6:bc:
9a:ab:27:cf:7c:d1:68:5a:4e:e1:af:b2:2a:62:ad:d3:d6:31:
ce:2d:9a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:09:37 2026 by rpki-client