Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: pZ9bDVlJJgCqNrR8IitPaOiG659wjlO5OTGJe57egIY=
Subject key identifier: 0D:E0:C1:38:8C:46:4D:B3:BC:D0:DF:3F:EC:26:0E:B2:44:DD:E0:D3
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 01A0B7D320F5D9326329353B40E0919A8051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0AB4
Signing time: Sat 19 Sep 2026 04:01:01 +0000
Manifest this update: Sat 19 Sep 2026 04:01:01 +0000
Manifest next update: Sun 20 Sep 2026 04:01:01 +0000
Files and hashes: 1: 75HOIa64fDxinyOIx01Blej1elM.roa (hash: EnalwxHiL7Yvbfzav+WqLHXQw4xqRSm24VA6Qft2ERI=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: 5Q8O2Uql4PwNyGMsdBPWqo0oQi38ubM7FqzCFjcBC64=)
3: gNIwlQhqrQHrAmcQt_v7U7yPQls.roa (hash: m7SKJRURhbOe8VuRCSBhxT8f7MRPwICOeiYwoIYek9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b7:d3:20:f5:d9:32:63:29:35:3b:40:e0:91:9a:80:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Sep 19 04:01:01 2026 GMT
Not After : Sep 20 04:01:01 2026 GMT
Subject: CN=0de0c1388c464db3bcd0df3fec260eb244dde0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:fb:41:ca:94:e5:83:ca:51:17:2a:40:92:
ab:b6:39:fb:5b:66:07:d0:6a:77:77:89:ad:f8:b0:
7e:d3:83:67:1c:9f:21:09:9c:1a:85:9b:e8:d8:69:
68:72:1b:a1:8c:99:47:94:0f:33:c0:31:9c:4f:23:
22:30:89:36:b0:cc:db:8e:fd:01:6b:81:46:69:9e:
a0:a5:05:74:55:ac:4b:de:de:05:bd:65:b0:d9:b4:
a4:79:57:5e:c8:19:e0:8d:1f:aa:c8:fd:0e:2f:d2:
bb:d0:9a:ce:db:fd:d0:de:13:d7:64:f2:bb:71:73:
f4:dc:b9:ec:f4:a3:75:50:3b:8c:91:a6:b0:8f:2e:
6c:46:d5:4d:ad:16:5a:a4:ff:0b:fe:6c:f5:92:35:
bf:38:17:28:4a:c2:ba:a3:12:01:aa:68:8d:60:2f:
10:94:43:45:79:e5:33:20:d4:9b:ef:be:7f:f6:b3:
ae:32:75:70:44:03:b7:bf:e0:6d:cd:32:e9:29:94:
be:85:e0:30:39:01:c3:a5:e8:34:74:fb:50:83:e2:
c9:8f:25:bb:4c:6c:92:95:ea:39:bc:aa:d0:01:31:
3f:3e:52:7c:81:38:16:3e:c3:62:a6:f4:a0:40:78:
16:17:1a:79:c1:8a:fa:d1:d7:1e:e5:81:f8:c7:18:
81:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:C1:38:8C:46:4D:B3:BC:D0:DF:3F:EC:26:0E:B2:44:DD:E0:D3
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:50:7f:54:e3:d4:0d:68:de:c4:ff:c9:14:9e:1a:4d:a1:ab:
d3:8a:ab:dd:f0:c8:05:0b:cf:e8:fe:13:39:07:ea:e0:a9:3f:
27:60:a7:3e:a4:3f:c1:5b:c0:bc:8d:4b:fb:10:71:03:c0:a7:
d6:16:26:98:2a:e8:4f:bb:b2:88:a8:7c:31:9c:fe:5c:a0:0d:
f7:dc:03:82:35:d5:2d:ab:74:75:4d:c5:99:87:f6:12:bd:d9:
af:68:db:0a:96:a5:ae:25:2a:01:b8:35:7a:67:c8:d6:25:95:
17:f8:56:59:ac:b4:ee:dd:98:0f:04:5f:5a:e6:74:70:20:93:
df:a6:ac:09:7d:91:17:a9:32:77:b1:34:6b:4a:01:f8:d0:48:
e5:1a:36:a5:65:22:79:1a:1a:f3:e9:36:fd:6d:54:19:f0:bd:
4b:27:99:28:a4:27:a8:93:04:05:e3:dc:71:4d:42:c2:8a:8e:
61:4d:1e:92:a6:1a:d9:00:bc:43:f4:33:7e:f6:19:34:37:f1:
97:f7:bb:c8:97:89:f8:75:ee:0b:6b:56:b2:aa:d6:5e:fa:81:
e6:98:0c:4d:ff:d4:78:f5:26:81:d5:0f:d7:41:7a:ea:bf:c9:
57:3e:0c:65:74:03:b9:36:a7:2a:65:d9:d9:67:0d:0b:8a:05:
f5:89:78:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:37:30 2026 by rpki-client