Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
File: TN1pc0k84MOEm4uRm3UCul-gE9c.mft (raw, json)
Hash identifier: JiEJS/dAQe84my0QBeykbbdxPwGTWOdAU2KDP0f1lFs=
Subject key identifier: E9:77:82:F4:69:FA:3C:3E:0B:69:5F:F2:27:D5:A9:1A:7C:54:0E:4F
Authority key identifier: 4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
Certificate issuer: /CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Certificate serial: 01A17C97B7765FCEF7D11DEC30C031B4AEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
Manifest number: 074D
Signing time: Tue 27 Oct 2026 09:01:20 +0000
Manifest this update: Tue 27 Oct 2026 09:01:20 +0000
Manifest next update: Wed 28 Oct 2026 09:01:20 +0000
Files and hashes: 1: 8xG2LUgGMoQo1E0oFZXCsLklpt8.roa (hash: P+5MDoFv+VPER4lMcHzaG5Ao7rqloC0fCfPVJFO8gkg=)
2: NNU8m-ZbGaDewKa80bazCk_gHuc.roa (hash: jNBremlwULSnHvNbBnehGqtceTysa0l4mhsoPRNxZdE=)
3: TN1pc0k84MOEm4uRm3UCul-gE9c.crl (hash: Xp4G0ds1up5saHQi4DXLawYklDy3i7vKaJauCDM6aOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:b7:76:5f:ce:f7:d1:1d:ec:30:c0:31:b4:ae:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cdd6973493ce0c3849b8b919b7502ba5fa013d7
Validity
Not Before: Oct 27 09:01:20 2026 GMT
Not After : Oct 28 09:01:20 2026 GMT
Subject: CN=e97782f469fa3c3e0b695ff227d5a91a7c540e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:6c:3f:6d:55:d0:20:76:26:55:95:76:5b:
b0:b6:3c:43:63:5e:8c:29:80:c0:50:0f:f4:ac:ce:
8f:f1:17:49:2d:cc:35:35:7a:4d:b2:66:88:3b:07:
25:f3:3e:73:5f:a8:62:f0:d1:a6:b9:24:2a:46:61:
67:d6:6b:fc:a6:e8:5d:ee:f4:38:b2:23:b9:0a:75:
ad:04:70:6f:81:7a:52:13:6a:59:64:55:78:04:8d:
68:01:35:29:6e:83:8a:8d:0e:fd:74:94:34:52:ce:
30:25:7d:c2:f5:2e:e4:5f:60:a0:ae:12:e0:71:3f:
fa:a0:83:47:63:8b:d8:f7:be:4e:55:91:cb:45:1d:
92:7a:39:4c:a0:a2:67:ea:d2:8e:28:d4:ed:65:ec:
3f:6e:96:4c:67:28:e2:31:ad:09:af:ab:f9:a7:06:
97:5f:73:94:3f:fd:99:46:52:26:76:c3:b9:44:e1:
a4:7f:4d:a1:a4:64:9f:04:ae:f5:cb:e4:a7:ab:60:
ea:05:cd:f9:8d:06:e0:ce:0d:ee:35:7c:5d:1b:60:
84:a4:e6:51:f9:5f:33:20:90:bd:73:36:32:24:57:
75:53:26:e9:67:3d:28:91:f7:4f:fd:74:9a:9d:cd:
b8:64:6c:14:3f:ed:74:5b:5c:6b:65:1d:80:15:aa:
6c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:82:F4:69:FA:3C:3E:0B:69:5F:F2:27:D5:A9:1A:7C:54:0E:4F
X509v3 Authority Key Identifier:
keyid:4C:DD:69:73:49:3C:E0:C3:84:9B:8B:91:9B:75:02:BA:5F:A0:13:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TN1pc0k84MOEm4uRm3UCul-gE9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a35f7f-2194-46d3-91bd-cc0f50bda159/1/TN1pc0k84MOEm4uRm3UCul-gE9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:4a:0f:a3:13:2b:c0:ae:19:f4:b9:3b:6f:dd:61:68:0d:14:
47:a1:09:c3:f8:4e:d8:08:69:72:46:b6:52:25:47:f6:d5:f6:
75:f2:c2:36:77:c4:0c:21:46:f2:2f:80:84:07:5d:db:b8:ac:
8e:1f:3e:c3:e9:7b:4a:e9:e1:07:bf:97:39:b4:39:6f:28:1c:
5d:e6:35:2b:c3:c2:f6:24:e4:60:12:61:83:a1:47:28:79:58:
d5:fb:cb:c3:86:83:ff:88:c4:a5:6a:c7:3d:39:fc:34:0e:0d:
e6:a3:bc:c3:dd:d0:e8:c0:37:a1:86:15:45:07:37:49:a0:80:
03:ac:6a:98:7c:00:9f:f3:f5:04:a0:4f:ff:24:ed:2d:f3:db:
60:1a:09:f0:80:33:8a:62:37:43:b9:a4:43:d2:75:4d:ad:97:
3e:6c:14:d8:ec:68:8d:23:fc:f1:8c:f2:73:b8:51:04:29:4e:
9f:3a:8d:3f:ca:cc:74:22:84:13:e8:6d:5a:e2:8f:dc:b0:ff:
e3:66:7f:ab:cc:df:3c:08:6c:cd:35:aa:dc:f7:0d:a9:8a:90:
2d:1a:2f:fe:7a:52:f1:ca:24:8f:50:6b:9b:48:eb:4d:23:35:
c5:46:8c:e7:19:f2:df:66:26:d6:f1:84:04:9e:f6:16:aa:cc:
d6:d1:27:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l7d2X8730R3sMMAxtK71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZGQ2OTczNDkzY2UwYzM4NDliOGI5MTliNzUwMmJhNWZh
MDEzZDcwHhcNMjYxMDI3MDkwMTIwWhcNMjYxMDI4MDkwMTIwWjAzMTEwLwYDVQQD
EyhlOTc3ODJmNDY5ZmEzYzNlMGI2OTVmZjIyN2Q1YTkxYTdjNTQwZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx5sP21V0CB2JlWVdluwtjxDY16M
KYDAUA/0rM6P8RdJLcw1NXpNsmaIOwcl8z5zX6hi8NGmuSQqRmFn1mv8puhd7vQ4
siO5CnWtBHBvgXpSE2pZZFV4BI1oATUpboOKjQ79dJQ0Us4wJX3C9S7kX2CgrhLg
cT/6oINHY4vY975OVZHLRR2SejlMoKJn6tKOKNTtZew/bpZMZyjiMa0Jr6v5pwaX
X3OUP/2ZRlImdsO5ROGkf02hpGSfBK71y+Snq2DqBc35jQbgzg3uNXxdG2CEpOZR
+V8zIJC9czYyJFd1UybpZz0okfdP/XSanc24ZGwUP+10W1xrZR2AFapsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOl3gvRp+jw+C2lf8ifVqRp8VA5PMB8GA1UdIwQY
MBaAFEzdaXNJPODDhJuLkZt1ArpfoBPXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQt
Y2MwZjUwYmRhMTU5LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9hMzVmN2YtMjE5NC00NmQzLTkxYmQtY2MwZjUwYmRhMTU5
LzEvVE4xcGMwazg0TU9FbTR1Um0zVUN1bC1nRTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHUoPoxMr
wK4Z9Lk7b91haA0UR6EJw/hO2Ahpcka2UiVH9tX2dfLCNnfEDCFG8i+AhAdd27is
jh8+w+l7SunhB7+XObQ5bygcXeY1K8PC9iTkYBJhg6FHKHlY1fvLw4aD/4jEpWrH
PTn8NA4N5qO8w93Q6MA3oYYVRQc3SaCAA6xqmHwAn/P1BKBP/yTtLfPbYBoJ8IAz
imI3Q7mkQ9J1Ta2XPmwU2OxojSP88Yzyc7hRBClOnzqNP8rMdCKEE+htWuKP3LD/
42Z/q8zfPAhszTWq3PcNqYqQLRov/npS8cokj1Brm0jrTSM1xUaM5xny32Ym1vGE
BJ72FqrM1tEn1g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:46 2026 by rpki-client