Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
File: TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft (raw, json)
Hash identifier: JWCccehEhwoArf/2zrb0MVSP8ct0nu1kxJh03rBYQX4=
Subject key identifier: F9:9C:2D:2C:29:13:4A:AD:59:F7:DB:36:51:05:7D:C0:F7:6F:4F:9B
Authority key identifier: 4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
Certificate issuer: /CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Certificate serial: 01A0848A81DE9B61B6C89B67BD57A72CDA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
Manifest number: 187D
Signing time: Wed 09 Sep 2026 05:01:04 +0000
Manifest this update: Wed 09 Sep 2026 05:01:04 +0000
Manifest next update: Thu 10 Sep 2026 05:01:04 +0000
Files and hashes: 1: 5Z9U9f9LzaE4Ayc_8YN3vX1_Za4.roa (hash: tISE7ij5Mog88K8RBo/pOOcpsFCfmvmLSehurREUsnc=)
2: TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl (hash: N4hmvuI605+3tQ1Zl9+Mti3YIjuhUo1zDy73WrG2m60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:8a:81:de:9b:61:b6:c8:9b:67:bd:57:a7:2c:da:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0f257f339cfb9e2754b6cc24364f0f129058db
Validity
Not Before: Sep 9 05:01:04 2026 GMT
Not After : Sep 10 05:01:04 2026 GMT
Subject: CN=f99c2d2c29134aad59f7db3651057dc0f76f4f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:99:1a:d4:cb:8d:9b:21:32:a6:ae:24:88:02:
23:a5:00:9f:70:de:76:c8:dc:83:d9:fd:c5:29:c1:
79:bd:d4:c8:a2:f3:bf:3b:6e:ed:2a:30:7b:aa:d3:
d8:f8:fc:45:58:45:15:d2:11:8d:b3:33:0a:95:8f:
44:15:6f:a5:b3:47:91:f9:11:9b:ad:7e:6d:eb:47:
8d:c6:9b:ea:3f:de:0e:d4:98:51:cc:6e:d0:e4:eb:
4e:01:57:be:7f:22:07:dc:02:bc:ae:fd:ec:a8:06:
c7:4c:83:b8:5a:f1:a5:cd:ad:13:7d:58:d8:70:d7:
eb:5d:09:0c:a0:b3:2a:33:e5:20:d0:b4:b7:c7:e5:
e3:95:ae:4b:09:33:99:9f:da:ac:c9:7e:3c:2a:82:
b9:bf:8a:6d:59:73:87:4d:ee:ab:ef:52:35:b3:3b:
85:0a:4a:e8:cd:c8:9c:25:f6:ba:96:e0:ff:32:5d:
4a:6a:5b:4b:66:8c:37:c2:de:8b:28:d4:d1:25:76:
66:ac:74:ef:da:bd:c2:be:14:3f:2f:c7:c3:f9:81:
99:39:a8:86:ba:a3:02:9d:17:ef:7a:b3:e8:8a:a0:
2f:07:9b:f5:e6:d4:4d:f6:07:d5:7c:d6:cb:5e:b3:
81:07:cb:a8:0d:ac:30:3e:cb:e0:47:a1:3a:85:83:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:2D:2C:29:13:4A:AD:59:F7:DB:36:51:05:7D:C0:F7:6F:4F:9B
X509v3 Authority Key Identifier:
keyid:4D:0F:25:7F:33:9C:FB:9E:27:54:B6:CC:24:36:4F:0F:12:90:58:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ8lfzOc-54nVLbMJDZPDxKQWNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4239e9-e670-44f1-868e-f3f581dfc648/1/TQ8lfzOc-54nVLbMJDZPDxKQWNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7b:5e:c0:8c:18:7a:fc:08:6e:20:09:01:9e:08:04:f1:d9:
5c:84:96:c7:21:8b:57:cd:44:5b:ed:b9:30:cb:9f:9e:72:a9:
47:9a:27:d9:ca:45:44:99:f5:0b:4c:b0:f1:a3:b0:37:49:c4:
a4:06:de:6c:d2:a2:05:2d:1c:52:98:41:8d:08:b1:72:5c:a4:
dd:68:d8:7d:e8:67:f2:34:3d:65:ad:20:af:85:dd:a8:45:b3:
bd:ce:12:45:0e:61:4e:9c:92:17:c1:d6:10:ed:7f:9a:4c:fd:
b3:7b:a3:0c:17:c2:b1:19:69:c7:47:a6:47:72:cc:a3:92:69:
2d:ff:9f:bb:17:f1:c8:c1:83:8f:9a:3d:d7:27:e2:4a:f6:c9:
58:ec:54:07:49:35:4a:98:a5:77:1d:47:dd:43:3a:5e:47:77:
73:a8:c9:e6:79:fc:f7:04:bb:6a:45:f5:15:a7:87:a8:a0:7b:
e3:d2:ed:1c:d4:14:16:18:8c:ff:87:fa:af:80:7f:4f:1f:6c:
aa:8f:b1:35:19:02:53:80:cb:ca:37:ad:d9:76:9f:d1:e3:8f:
03:a2:c9:1e:b5:02:c9:0c:bb:5c:1e:09:d4:bd:52:50:b8:d9:
78:3c:ac:97:c7:d9:fd:13:21:d9:ee:3e:6c:27:66:c1:ab:a6:
8a:3d:a3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:37:51 2026 by rpki-client