Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: EtJpJXtjMLTMVWmndCbUMHIDHpH2ayKQii9277oQMgY=
Subject key identifier: E2:07:F8:62:FB:DA:30:29:07:93:52:EB:6B:39:A4:96:28:37:E8:E3
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 01A08E6A5D8E4209A70B385F281B939F7D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 03:02:10 +0000
Manifest this update: Fri 11 Sep 2026 03:02:10 +0000
Manifest next update: Sat 12 Sep 2026 03:02:10 +0000
Files and hashes: 1: Q_cKojzZsCR7sHqcACX5_Xsszdg.roa (hash: 13DJN0AYMyq7FKRePbvdklWh/SNv0jTV2Z45dv8uucM=)
2: RBXH0ektt1CQc3W3hp-LoPyoFDI.roa (hash: n7TnoGzFQ9ajRDTZ9C84X5KWHPVtB0cd7T1ju2YPzsI=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: mvj2ZeXNOBw331g2SDRgwkIuvaJ8rBZesp5DXaeSlt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 03:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:6a:5d:8e:42:09:a7:0b:38:5f:28:1b:93:9f:7d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Sep 11 03:02:10 2026 GMT
Not After : Sep 12 03:02:10 2026 GMT
Subject: CN=e207f862fbda3029079352eb6b39a4962837e8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:98:da:17:7d:d4:3b:1d:f7:07:df:f1:a8:
d5:e0:e6:49:55:b9:f5:48:65:9d:0a:fe:5b:09:d0:
f6:cb:bf:62:91:33:2d:a5:10:93:62:13:42:1d:c9:
2b:bf:ec:7d:ae:94:2f:eb:1b:88:4f:15:b2:b1:44:
fe:8a:29:89:5b:5e:b0:43:50:80:6c:43:1d:a0:50:
e8:5a:58:09:a5:96:e7:df:11:d4:c4:79:79:27:6a:
72:22:3c:4e:18:55:5d:dd:48:9e:8b:88:d6:35:62:
79:43:22:72:f5:d5:35:43:ca:7f:39:16:67:92:5d:
26:a2:2b:2f:43:35:4c:54:11:93:8e:4a:f3:e4:23:
6e:f2:97:74:bf:46:39:f9:e3:4b:e1:6c:1f:f4:ae:
d0:a8:5c:1a:fe:96:4d:de:36:7c:41:c3:95:32:3d:
6a:e4:88:81:d3:37:e2:27:6e:ba:09:ec:e7:7b:23:
47:74:1e:76:95:b7:2c:97:f1:65:1f:ed:89:82:bc:
03:90:74:0c:3c:e8:c0:a8:16:0d:20:af:d7:98:9c:
e1:4f:65:0f:be:f8:4f:8d:b0:92:e3:45:19:9a:98:
3e:bf:94:05:ad:6d:dd:57:ac:01:8e:af:72:83:aa:
0b:65:45:3f:7f:0c:99:e1:8f:68:bd:2f:9d:27:fd:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:07:F8:62:FB:DA:30:29:07:93:52:EB:6B:39:A4:96:28:37:E8:E3
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:24:3c:21:3d:32:57:30:8e:06:a6:96:d4:36:13:4c:4f:f8:
6b:a4:7b:33:07:a9:69:ca:de:67:10:12:91:31:ce:df:21:cd:
3c:64:cf:90:ab:fe:bf:58:52:6b:c3:c4:35:b9:92:22:2b:ea:
c4:fb:31:8e:29:56:50:4c:f9:6d:7a:d4:20:ce:5c:c1:b2:a0:
6b:b1:c0:b7:94:17:04:37:6d:5e:5f:8a:73:fb:3d:e7:d0:7f:
45:20:4c:f2:58:78:69:57:cf:e9:50:4f:2f:3c:3c:a1:b9:86:
52:c5:94:1e:75:c4:6f:e9:47:7e:81:f5:c5:3b:34:5e:0c:1d:
ba:ff:31:d5:03:a3:ab:c5:5d:59:38:46:98:1f:3b:77:e1:71:
4e:e7:51:8d:42:84:b0:24:1b:ee:57:f5:77:e8:93:3d:35:ec:
65:fd:4e:c9:27:98:52:3c:fd:a1:ba:5c:d1:66:26:d4:a4:c2:
d2:5c:9e:7d:20:e2:ad:29:e3:f5:3b:77:55:15:47:88:f1:c1:
d6:a8:4d:b9:63:47:25:9e:77:03:31:66:8f:a8:6c:3b:24:24:
49:ac:4e:52:4a:d7:eb:a3:04:f2:c8:e2:1a:b1:44:b7:ad:8a:
65:8e:2b:86:74:cd:28:32:92:6e:25:1d:1c:1e:0e:77:f2:71:
2f:61:34:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:30 2026 by rpki-client