Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
File: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft (raw, json)
Hash identifier: jEh3GLkm2lajvIPqUo+xGCwm3uxlxilk2fnfB94iqXQ=
Subject key identifier: D2:E0:5B:42:84:54:AE:90:73:C4:1B:8E:08:B7:5B:62:31:48:F2:31
Authority key identifier: 4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
Certificate issuer: /CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Certificate serial: 01A16FEE5B4786973943D48DE8DD857A84C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
Manifest number: 1AC2
Signing time: Sat 24 Oct 2026 22:00:54 +0000
Manifest this update: Sat 24 Oct 2026 22:00:54 +0000
Manifest next update: Sun 25 Oct 2026 22:00:54 +0000
Files and hashes: 1: IDKw72UDV4fBvKey2_GXU4YBDRA.roa (hash: qTZQ2NPnaEey/BLWGhLNERBs92D0ttnILDap5h0iO4A=)
2: LfKEiBUYG-rD2066F2HvQK8WvPg.roa (hash: P6VfgqJ5zT/fBeMm4CrVPEyhOWX2kuGJJ1u66qFZ3ms=)
3: TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl (hash: 6PrbHQZltwdF+1psEDFTwEOwS5n47MBb/nEIg5oLbdY=)
4: UrbBvwlHu4uSvs0RYok_mjpcJHQ.roa (hash: zeDYSU9xRwUTl0+MDt61kl2HDTZsB77vtuzNNebemko=)
5: ukZM-3_xV-iFuOqVLRRZDpxgm-s.roa (hash: vg+eKlX0YTyZM3VY4Qut9mEJDRF4SsmNGim25sAbw6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:ee:5b:47:86:97:39:43:d4:8d:e8:dd:85:7a:84:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32b9eff9f02c7cabe1995a2db509d8258d35fc
Validity
Not Before: Oct 24 22:00:54 2026 GMT
Not After : Oct 25 22:00:54 2026 GMT
Subject: CN=d2e05b428454ae9073c41b8e08b75b623148f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:a2:5d:93:ee:90:70:d8:3c:d6:c6:8c:a2:
47:cc:95:f3:64:de:48:f2:c8:0b:be:df:b5:ac:09:
3d:ae:63:38:e8:c1:5f:b4:cb:25:85:b5:2d:81:f9:
f8:5a:36:cf:af:9d:c1:f3:6b:86:42:00:c3:81:4f:
44:51:c2:2b:c5:8d:26:51:07:7a:5e:10:0c:a0:34:
74:e7:a0:64:1b:e2:64:6b:72:72:3b:d5:61:a0:66:
30:f3:07:7e:16:34:9f:f3:c3:bd:28:60:3f:15:b9:
89:8a:8e:eb:fe:36:e6:b2:d5:99:49:33:e0:7b:fa:
26:5c:d5:39:69:91:1f:c3:1b:a7:c9:20:69:df:b6:
ea:05:51:08:d2:05:e2:27:b7:b6:bb:e1:a2:fc:35:
78:f9:8f:94:b7:08:4c:b0:19:98:5c:77:ad:27:ff:
e7:f6:6e:6a:35:fe:f3:c9:d7:14:8d:fc:0e:ed:d6:
b7:e0:b2:a0:ef:8c:67:fc:db:3d:d2:5c:b8:7b:f5:
9f:78:ef:a2:8c:cf:70:18:c8:a7:5a:8a:6b:db:5f:
11:f7:79:5f:ad:6b:0e:b1:1c:ed:1e:eb:3b:05:62:
24:64:9b:73:03:98:42:8b:43:86:74:9d:ef:07:e4:
c5:86:2c:88:25:6f:25:11:a2:6c:5b:42:da:a2:90:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E0:5B:42:84:54:AE:90:73:C4:1B:8E:08:B7:5B:62:31:48:F2:31
X509v3 Authority Key Identifier:
keyid:4F:32:B9:EF:F9:F0:2C:7C:AB:E1:99:5A:2D:B5:09:D8:25:8D:35:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/172c4e-6f5d-475e-9be9-c4073c13ff7c/1/TzK57_nwLHyr4ZlaLbUJ2CWNNfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:84:7b:7f:59:b4:20:1c:a5:af:a2:99:e7:9f:e2:40:4d:8a:
8e:fd:4e:a9:57:2d:cd:85:8f:ae:32:d1:b9:9e:d3:3b:12:89:
2e:90:e3:89:f7:d9:12:8e:89:a6:96:75:be:cc:1b:2a:6f:da:
95:95:c9:53:14:25:2e:c3:19:3c:9c:5a:14:bf:e1:32:36:7b:
93:78:b1:bc:23:3a:7b:4f:6d:15:eb:93:13:73:23:e9:a0:8e:
60:e6:58:43:1c:88:0f:e6:83:15:85:6e:72:fe:54:9e:0b:a8:
49:b6:a0:72:65:a1:b1:db:5c:0f:ca:df:46:24:e6:ca:71:0a:
60:21:53:49:d9:fe:10:32:88:fb:2e:ca:4a:3a:03:d6:f9:68:
ba:07:45:e8:c3:6e:08:10:70:7c:7f:5d:e9:9c:af:53:43:81:
8c:7d:3a:7f:95:11:10:14:51:13:cb:51:71:84:c9:5c:47:94:
c4:c6:38:db:53:00:8b:ab:47:1d:1c:d2:01:20:53:c0:fa:74:
ce:7d:4c:1b:13:55:e9:b6:4a:07:17:f4:8f:d6:56:1a:33:19:
2d:51:40:1a:dd:e0:92:0b:1f:13:7c:cc:0f:83:88:15:b1:6b:
50:d5:d6:18:df:7d:f0:44:2b:55:97:94:23:80:bd:90:a6:0c:
01:e3:5f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:08:05 2026 by rpki-client