Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: Gq4cCgtsL/l2w7+E2iF19hIiPtOJWWVIhrg+NxasrIQ=
Subject key identifier: BA:6F:E7:34:D6:1C:13:CE:5B:6C:5A:21:C0:1D:BE:23:33:CE:8C:C7
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 01A06E39D5864128332CE6509E177902C320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 06C1
Signing time: Fri 04 Sep 2026 21:01:18 +0000
Manifest this update: Fri 04 Sep 2026 21:01:18 +0000
Manifest next update: Sat 05 Sep 2026 21:01:18 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: 6ZmlSdmDtkhNvJlGMEt7fVplbJGGRQxwtutN+SGrdGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:d5:86:41:28:33:2c:e6:50:9e:17:79:02:c3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Sep 4 21:01:18 2026 GMT
Not After : Sep 5 21:01:18 2026 GMT
Subject: CN=ba6fe734d61c13ce5b6c5a21c01dbe2333ce8cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:7b:73:4a:1d:ea:4d:9c:f0:54:f9:d5:14:
03:c4:ee:6b:1c:c7:c6:93:9f:3e:80:b6:cf:e6:5a:
b6:66:64:65:1a:9f:2d:9a:11:fd:12:59:c2:6b:3b:
df:91:77:ee:34:a4:25:b2:df:72:3e:20:bb:95:fc:
90:3c:96:77:13:0a:04:08:1a:79:4f:1a:2e:52:66:
87:f0:dc:f7:b0:2e:03:f2:a1:45:9a:be:15:b3:93:
3f:1a:20:53:9c:17:22:09:86:82:3f:21:4c:2b:e2:
85:b0:f6:61:82:63:0c:ad:cd:14:6b:ba:6a:e6:ef:
1c:c0:ef:d3:97:f3:b0:55:90:67:91:7d:04:86:56:
a6:20:a7:d0:65:1e:98:77:30:ee:f1:76:4e:59:fc:
79:75:e0:d7:e6:8a:54:6e:4a:a2:5d:42:5a:ac:9d:
a9:bd:8c:b3:11:e9:8f:ca:2d:33:fd:a5:ea:d3:04:
d1:83:e7:12:a4:04:92:b4:85:37:bc:e3:0a:37:9b:
5c:d4:6d:03:a5:52:47:70:c3:fc:1f:00:37:2b:02:
fb:14:02:de:f4:7d:3c:76:bf:fc:d2:17:42:f6:16:
87:46:0e:dd:0d:72:8a:a8:01:48:7f:2d:57:0b:77:
f2:a0:3a:69:a0:10:43:79:43:93:01:83:98:19:66:
e9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6F:E7:34:D6:1C:13:CE:5B:6C:5A:21:C0:1D:BE:23:33:CE:8C:C7
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:28:30:45:04:0f:77:53:d9:f0:43:bb:34:83:19:4b:a4:c2:
97:ef:5d:f6:af:ac:61:41:fb:9e:58:64:75:b3:8b:05:63:aa:
59:6d:49:c3:a0:11:e2:3b:b0:01:96:14:58:f4:8b:ad:11:de:
99:20:99:82:30:c9:19:17:7f:29:6c:ea:1b:3a:a7:d1:fd:03:
3d:8d:11:1e:34:e6:fb:38:85:3f:01:0f:95:7f:14:89:e3:9a:
24:db:59:14:d2:a0:2c:b3:4c:d3:82:fc:e0:36:87:30:4c:c5:
bf:4d:c9:45:bd:9a:1c:61:a8:cd:f2:28:42:63:07:34:b9:47:
45:18:06:b2:c3:1a:08:0f:c6:46:62:cd:b5:85:d3:4b:63:76:
26:44:67:a7:f5:3f:4d:89:da:5b:8d:ff:1f:25:b7:65:c7:95:
43:02:fa:a8:8a:7c:86:ae:18:1e:88:25:b8:20:14:14:e0:ec:
ad:48:fe:05:60:2e:e6:47:3f:45:5c:3d:57:32:6d:9f:ca:f9:
00:0a:8e:6f:0e:cc:e8:42:07:c1:88:6a:be:03:51:c6:da:e2:
cb:80:89:c8:dc:fc:88:76:6d:31:b9:80:8f:a6:e8:2c:43:ee:
e1:89:25:17:97:e3:7c:8c:38:16:65:73:b7:06:4e:4f:d2:b4:
92:1e:be:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:57:17 2026 by rpki-client