Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
File: TnllEg8hCBamsbonTSVM9pj3YTA.mft (raw, json)
Hash identifier: kjsmKSMBXr8xoB2cU//MHr71h0pmgh0P/1DucUNXexE=
Subject key identifier: 11:BC:0B:89:49:68:A5:8D:54:85:07:38:BB:36:13:2E:C5:B0:5C:F0
Authority key identifier: 4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
Certificate issuer: /CN=4e7965120f210816a6b1ba274d254cf698f76130
Certificate serial: 01A179964C5F9DAE2628EBC3DBD20D913DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
Manifest number: 5E
Signing time: Mon 26 Oct 2026 19:00:55 +0000
Manifest this update: Mon 26 Oct 2026 19:00:55 +0000
Manifest next update: Tue 27 Oct 2026 19:00:55 +0000
Files and hashes: 1: 9cvLi0lyFC3GgbJV2aEolV81JPs.roa (hash: Hj4vRerxqWMvmOPXcDNhhbOOf+kdFNecQC2GEwwRsjA=)
2: TnllEg8hCBamsbonTSVM9pj3YTA.crl (hash: YD/egfU96h+36dQS5J6CCW+Ul9c/Ke324GlBL5/i+Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:4c:5f:9d:ae:26:28:eb:c3:db:d2:0d:91:3d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7965120f210816a6b1ba274d254cf698f76130
Validity
Not Before: Oct 26 19:00:55 2026 GMT
Not After : Oct 27 19:00:55 2026 GMT
Subject: CN=11bc0b894968a58d54850738bb36132ec5b05cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:35:37:6c:dd:20:80:54:ab:76:cc:04:8f:
ea:4c:05:b3:4b:a3:9d:f9:ea:82:d8:b2:21:05:8d:
24:72:2a:d2:9f:c9:db:93:8d:40:2f:d3:c3:6f:52:
da:b5:70:ce:e0:61:bd:a5:32:12:14:39:42:91:68:
10:fb:f5:70:ef:2c:f2:a6:06:44:a4:12:05:d2:b8:
11:ca:1f:bd:86:2d:d5:50:da:52:d3:d3:27:14:eb:
98:1a:ff:a0:5a:84:df:4d:a1:7e:46:4c:51:dd:7e:
1a:b0:b6:ad:6d:45:f8:ab:b0:8b:f8:cf:ee:ed:ed:
02:e6:a6:60:a4:f8:07:40:04:b2:c3:63:b1:ef:52:
09:35:88:e3:51:bd:4a:21:d4:1e:83:f7:9b:44:b3:
b6:d9:02:3d:c3:a2:11:3a:7e:7b:6c:84:29:5c:1c:
d7:4d:c1:15:c8:e0:d8:7d:81:4d:72:9e:7d:57:c1:
44:96:7b:51:27:6f:38:02:8c:49:e5:92:6f:2f:bb:
4a:3b:44:5d:c7:00:55:e1:95:29:90:b0:16:ad:a5:
13:f0:60:fe:25:57:7c:f1:40:1e:ab:05:e9:a4:26:
e6:ee:5f:be:ab:cc:06:95:02:bc:9e:25:b6:39:1e:
98:71:aa:12:3b:39:d4:3c:b3:ad:d7:85:83:30:51:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BC:0B:89:49:68:A5:8D:54:85:07:38:BB:36:13:2E:C5:B0:5C:F0
X509v3 Authority Key Identifier:
keyid:4E:79:65:12:0F:21:08:16:A6:B1:BA:27:4D:25:4C:F6:98:F7:61:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnllEg8hCBamsbonTSVM9pj3YTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/697b8a-a7f3-4644-92d8-41bf83f86d75/1/TnllEg8hCBamsbonTSVM9pj3YTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:26:35:79:6a:3e:b4:40:75:92:3d:0d:8e:44:3c:d3:92:20:
bc:d1:eb:83:9b:44:aa:c3:67:f0:c7:2c:03:db:fe:fe:48:c7:
98:43:0f:46:6c:24:cb:d7:85:4b:e6:dd:1a:50:af:e6:79:9e:
27:4d:88:4d:c0:f5:3f:fe:c8:65:bc:3a:e3:11:05:40:ac:46:
4a:b6:8c:f6:3b:3d:ec:ad:9d:12:25:2f:2c:6b:dd:6c:a8:55:
74:c3:88:88:3d:e0:71:26:7d:9e:1e:b9:45:6a:3e:b4:fc:e6:
02:24:33:54:c6:9e:d5:ea:49:89:3b:da:82:bb:bb:5f:61:4d:
ba:79:4a:a0:be:93:fb:b1:65:05:b7:b6:5c:2f:c3:d0:79:0d:
ac:07:8a:44:3f:4a:f5:66:ce:f9:2e:8c:82:bb:01:01:57:49:
fb:e5:ff:32:21:7f:62:fa:08:be:bf:73:86:f9:39:63:22:1a:
53:38:7f:b0:45:85:26:a6:91:ba:e3:86:cd:05:dd:b7:c2:13:
e8:10:7b:92:f1:b2:60:46:3d:1b:fc:dd:e3:b1:98:0b:ec:3a:
7d:f3:ed:e8:30:77:db:8d:1d:80:15:45:dc:97:31:6f:92:1d:
3c:b0:fd:be:b9:f4:dd:cf:7a:b6:4d:51:28:a2:85:97:cb:39:
93:1a:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 03:33:53 2026 by rpki-client