Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: C0LVs5KGbjViiy3ZBbO3lwGjXxjrp6SL8HLvZ0iOaTU=
Subject key identifier: 20:1F:43:2E:CC:C5:B2:52:85:E2:56:FC:75:7B:41:15:EA:32:EA:15
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 01A13E9501B283ECEBB1367047BB5C911651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 08:01:54 +0000
Manifest this update: Thu 15 Oct 2026 08:01:54 +0000
Manifest next update: Fri 16 Oct 2026 08:01:54 +0000
Files and hashes: 1: AV57nKprEjNOi2AwcD43t7wH7t0.roa (hash: mlsCrNcQC2GfaeYVKZzbTsRqOjHw5wV8xQuqOmzUdik=)
2: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: vWpaNol/3d6j1WuXkbe/mGx3WLu4XGVDkM5wWyAyTcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:95:01:b2:83:ec:eb:b1:36:70:47:bb:5c:91:16:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Oct 15 08:01:54 2026 GMT
Not After : Oct 16 08:01:54 2026 GMT
Subject: CN=201f432eccc5b25285e256fc757b4115ea32ea15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:6b:51:de:84:16:69:ed:52:f4:f4:f1:d3:
71:99:5c:2c:24:34:ec:e0:67:7f:2a:02:f7:39:3b:
5d:b7:64:c0:64:96:15:bb:5a:3c:da:4e:04:95:a1:
b3:dd:74:e9:0a:ad:5b:92:c7:05:68:ad:3a:39:10:
79:46:21:dc:4f:0c:4f:04:d0:90:8a:f8:50:13:c7:
92:2b:9c:99:b8:29:be:71:37:e5:ae:80:16:05:ec:
ad:ab:0b:57:24:34:8b:58:6a:f3:ca:67:bc:b1:82:
5c:50:3e:70:9e:83:89:06:96:4a:bf:59:9d:6e:d9:
f9:91:ce:65:62:20:84:d3:83:f9:71:8d:95:90:18:
79:95:ac:0f:27:0f:46:5f:f4:ba:e4:01:9b:00:f4:
8e:7e:cc:ff:f5:20:22:3e:9a:97:09:55:44:40:d0:
55:43:7d:99:9d:47:c5:1e:b1:60:16:82:14:dd:24:
16:09:0e:5c:63:59:ab:89:70:f4:ed:14:11:08:8d:
05:d6:d2:d3:a6:f8:43:82:5c:e8:f1:ce:dd:cf:12:
32:09:14:a5:e0:25:fe:ea:79:ac:dd:92:06:ce:1e:
f6:42:1f:f9:39:99:20:e7:b4:69:bb:cd:94:81:85:
45:12:43:c5:7d:8f:ae:67:2e:65:4d:5c:68:d7:0b:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1F:43:2E:CC:C5:B2:52:85:E2:56:FC:75:7B:41:15:EA:32:EA:15
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:92:87:5e:61:a0:09:b0:27:c1:98:9c:b3:e8:27:c9:a0:f7:
12:f6:f0:cd:ec:3d:e0:d5:de:86:b8:6a:18:4b:1e:29:9a:05:
99:aa:36:3e:60:02:0d:53:71:2f:11:0c:0b:a5:6a:ba:9c:69:
f5:99:e5:e7:6f:80:a7:2e:12:d6:e6:86:b2:1c:10:6d:a8:59:
0f:ec:c8:50:3d:ed:20:e9:20:05:83:59:e8:bf:79:32:c5:a9:
e4:de:4d:a3:2b:26:03:55:d2:e3:79:9b:1c:a2:7d:30:14:a3:
28:89:45:79:3b:19:9a:03:a2:1e:a0:94:4b:ce:8b:81:64:e2:
6b:52:ba:cf:1e:d8:3e:57:26:a1:74:7b:68:56:63:12:8d:72:
74:7e:99:f2:fb:c0:38:c4:bf:28:5d:cb:ba:c0:5a:4b:d4:52:
c0:47:04:18:f7:66:d0:7b:0a:e9:60:dc:fa:bc:91:a4:d9:c9:
3a:ca:3b:7f:65:5f:92:57:ff:a6:5c:71:b6:c4:41:a9:92:ab:
bb:9e:58:4e:d8:a6:97:37:f4:30:03:2d:07:28:77:87:db:25:
8b:a7:41:b5:1b:b7:a7:0b:f6:8e:0b:0d:a1:30:c9:bd:c7:6a:
94:54:b6:88:82:db:4e:15:80:4c:3d:33:46:7b:6a:5b:58:d0:
d0:54:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:43 2026 by rpki-client