Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
File: TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft (raw, json)
Hash identifier: RtcZZS70nxWpHumG1dOF2YKJ1XtlHZHfEmojO9tEI/E=
Subject key identifier: 77:97:FF:5B:0B:B0:97:12:4B:EE:21:55:B3:F6:80:48:58:F5:92:2C
Authority key identifier: 4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
Certificate issuer: /CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Certificate serial: 01A18F0B63FF81ED363F08A6D572EB306F5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
Manifest number: 1907
Signing time: Fri 30 Oct 2026 23:00:50 +0000
Manifest this update: Fri 30 Oct 2026 23:00:50 +0000
Manifest next update: Sat 31 Oct 2026 23:00:50 +0000
Files and hashes: 1: 5Z9U9f9LzaE4Ayc_8YN3vX1_Za4.roa (hash: tISE7ij5Mog88K8RBo/pOOcpsFCfmvmLSehurREUsnc=)
2: TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl (hash: bTLWmIeafC3IMFHuTq9KFOJfQXdyX1SqGCdLCdlEc8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:0b:63:ff:81:ed:36:3f:08:a6:d5:72:eb:30:6f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Validity
Not Before: Oct 30 23:00:50 2026 GMT
Not After : Oct 31 23:00:50 2026 GMT
Subject: CN=7797ff5b0bb097124bee2155b3f6804858f5922c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ee:65:54:05:94:39:e6:f5:32:f0:b8:89:40:
ea:c5:15:cd:3b:42:ca:fc:cb:5e:ba:ec:a4:26:7c:
ce:e5:26:84:e2:1a:3b:3f:c4:eb:fa:47:0c:10:c0:
21:df:ae:ea:55:9e:83:6c:fa:b0:82:6a:f4:1a:1f:
d4:61:80:16:e0:b5:31:1a:4a:3e:4b:05:0f:e3:f0:
80:0a:5f:88:9a:26:00:c8:1d:9d:26:41:fa:20:f2:
7c:32:c9:3f:9a:06:e6:db:17:0d:06:35:e2:f1:b1:
21:1d:4a:36:0a:32:72:86:1e:63:74:ee:b0:12:16:
a3:99:65:aa:cb:a4:1f:93:2e:cf:f3:4b:ae:8b:88:
5f:82:91:c7:e1:66:c6:e8:f2:f4:70:58:b5:dc:61:
6d:3b:a3:d4:b8:35:a2:26:e0:c0:a6:1c:07:83:35:
bf:41:e6:e6:77:ff:ad:33:c7:68:37:01:5a:a6:48:
7d:1c:db:22:09:66:88:95:62:09:8c:f9:a6:f1:20:
b4:90:1e:83:3d:53:1a:5c:d7:e9:e8:d2:d6:f5:76:
09:c6:03:f7:47:de:69:0f:70:5f:50:20:5a:06:09:
52:28:83:24:af:84:ca:aa:4c:7b:78:93:39:a8:ef:
dc:67:25:fd:29:bc:74:eb:a9:71:c4:9a:07:a3:19:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:FF:5B:0B:B0:97:12:4B:EE:21:55:B3:F6:80:48:58:F5:92:2C
X509v3 Authority Key Identifier:
keyid:4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:46:da:37:42:ed:05:c2:86:9e:19:d2:cf:a8:ff:6c:07:
c5:0c:2e:d2:97:69:b6:53:8b:a1:96:51:46:61:5a:95:36:63:
96:46:56:0d:1f:c2:47:8f:81:8d:e4:0b:9b:9d:32:55:aa:03:
ff:bd:ad:dd:e4:6f:1b:ec:35:5e:92:68:04:7a:71:72:a5:9c:
bf:54:a0:51:26:55:ba:db:fe:3e:98:97:0c:df:fd:41:36:7d:
b9:d9:0d:55:43:fb:3f:19:26:d7:71:e0:64:05:a2:7a:79:1b:
d4:2a:75:a9:55:b9:03:58:34:db:68:bb:34:a9:f0:35:2e:9a:
98:61:24:35:67:56:d8:45:01:6a:95:e2:f6:d2:ad:97:af:49:
59:b8:20:f7:87:af:68:50:a5:b0:58:41:2d:fa:c8:f1:fb:1c:
b0:84:4f:4d:16:0f:d6:d1:1b:2a:af:34:21:10:fe:49:ce:bd:
1d:8e:46:68:7f:52:f8:ae:72:5d:bc:05:0b:45:2a:83:86:23:
4f:88:47:5e:26:e1:15:83:fc:f0:52:3b:df:92:7a:e7:e1:2e:
90:de:bd:99:17:21:fe:ba:ac:34:91:78:57:25:e2:22:c1:83:
ae:88:73:0e:75:be:d7:bf:d1:77:45:1b:d5:53:63:25:d2:ed:
35:00:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:22:28 2026 by rpki-client