Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: 8e+G8iMGevJeBQqTwHKEQjABszzTqZDA/snZief5mlI=
Subject key identifier: BD:71:7E:EE:28:B1:39:63:74:60:0F:8D:89:89:0B:A6:E8:D9:90:41
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01A11C3EF2F3446052D8DD09579CF831E65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0F49
Signing time: Thu 08 Oct 2026 16:00:49 +0000
Manifest this update: Thu 08 Oct 2026 16:00:49 +0000
Manifest next update: Fri 09 Oct 2026 16:00:49 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: tg1qWSrDqt2EaP0PHJFudpDbxL8T5cJqTwlDkHxkCZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:f2:f3:44:60:52:d8:dd:09:57:9c:f8:31:e6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Oct 8 16:00:49 2026 GMT
Not After : Oct 9 16:00:49 2026 GMT
Subject: CN=bd717eee28b1396374600f8d89890ba6e8d99041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:96:5f:d3:44:01:e6:0f:f4:9e:1c:1f:11:
6d:60:fb:d6:5e:06:db:53:0e:a1:4e:19:a6:91:81:
1c:9f:e1:83:a7:d6:0b:bd:06:fb:eb:79:e0:e6:f6:
c1:d2:31:ee:28:d7:27:a8:aa:78:31:0a:0b:d9:e9:
9d:06:8f:37:5e:6a:bb:f1:7c:13:72:63:58:73:c8:
cc:36:1a:84:24:bd:d7:13:c1:59:d8:13:04:3f:d5:
d7:4e:34:c4:7d:f2:42:78:24:1d:14:b0:f4:a6:3b:
14:3f:92:f8:ce:a4:11:ec:ee:81:98:0b:8a:d1:91:
d0:64:52:6d:1d:a9:25:54:00:9c:71:ee:c0:39:0a:
6b:9f:aa:6f:70:ab:5f:c9:02:f7:75:ec:bc:a4:df:
bc:ce:c7:9b:86:75:b8:bc:92:1d:7a:bc:4b:8b:a9:
f9:47:c8:44:20:79:c3:25:db:8d:0c:98:c4:9c:50:
32:42:fc:df:6a:97:a1:d8:41:a6:15:37:64:ae:5f:
b8:57:8b:72:61:1d:3c:be:da:95:d1:56:1a:b8:23:
66:eb:9f:66:ea:7e:6d:df:62:9f:4e:26:27:a8:aa:
ba:29:2c:9a:f8:1a:5f:ad:84:64:a1:d1:44:f4:66:
19:18:b8:4c:68:d0:f9:58:65:3a:7c:10:2a:35:3a:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:7E:EE:28:B1:39:63:74:60:0F:8D:89:89:0B:A6:E8:D9:90:41
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:70:c1:d7:20:e2:5c:01:92:65:73:db:c8:50:17:01:23:
14:f8:6c:cd:c0:2a:77:3b:70:dc:b0:23:f2:36:13:2d:85:06:
78:59:74:00:fb:7f:87:31:3c:5c:ec:f0:7b:81:bf:9e:25:03:
f2:68:3c:9d:ad:0e:dd:26:2b:d5:71:c8:4c:88:fb:5a:23:ac:
b6:07:a4:67:94:3e:b1:d7:0c:be:dc:66:6d:b1:89:0f:99:27:
08:bc:92:1e:2f:06:01:17:e5:cf:93:3c:25:34:ca:08:11:54:
25:75:d7:94:22:47:c1:7d:6e:d8:fa:5a:43:e8:e7:e4:a4:1b:
5c:6a:ac:c4:df:21:c7:26:e7:3e:3a:17:24:e6:e3:2a:6d:f9:
55:da:13:82:cd:55:3c:e0:eb:1e:84:15:83:fb:d8:4f:f5:ea:
fb:30:d4:19:9f:2a:ed:33:e7:97:b6:d4:fb:d9:2d:2f:0b:0a:
26:84:58:fb:70:e4:cc:9f:3f:70:32:d6:df:19:7f:64:b1:34:
9c:66:e4:1f:b7:49:7f:73:08:f0:c9:49:04:67:dc:f3:c4:44:
09:f2:73:a6:8a:e6:f5:62:74:24:f9:3b:c6:b7:92:3f:63:8c:
e3:0e:db:0c:9e:41:f0:c3:6a:45:1d:b8:fe:5b:d5:4d:07:f9:
5a:b7:40:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:26:21 2026 by rpki-client