Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: IQqfw2l+KNPMzX38Nqcvbr5M1brEOySFQ/LGJjrHUmc=
Subject key identifier: D2:04:30:AD:16:39:9B:C2:93:05:E3:7B:78:A4:DD:2E:1C:53:64:2C
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 01A11A5014CE821763F5FDD76DBBC81BD776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 0F48
Signing time: Thu 08 Oct 2026 07:00:18 +0000
Manifest this update: Thu 08 Oct 2026 07:00:18 +0000
Manifest next update: Fri 09 Oct 2026 07:00:18 +0000
Files and hashes: 1: JXFUH416zwkJgWarbpHaBu4OjrM.roa (hash: 4a95XnQ0KPTukf9VV0SjrYCDAkfbYBMqoLt/hvW2kls=)
2: Ne3vXvFZfDJtHFxRi2iyMMXZXak.roa (hash: 90S1YKvYb+j9r5QawOi7WPQ7WUn8bPfBJqf4jlJtVS4=)
3: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: VJF2+bF8ouPog0y8kTucMRTjApcY8Mzxt/QLGsJ/4aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:14:ce:82:17:63:f5:fd:d7:6d:bb:c8:1b:d7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Oct 8 07:00:18 2026 GMT
Not After : Oct 9 07:00:18 2026 GMT
Subject: CN=d20430ad16399bc29305e37b78a4dd2e1c53642c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:f5:9e:96:9f:3e:1e:2a:90:8d:d1:9e:72:
f0:66:86:ce:d5:cb:da:b5:78:75:86:11:3f:47:59:
e7:d7:88:10:58:5e:50:b4:64:a3:b6:d2:91:c8:50:
8d:e1:68:e4:f2:d1:54:c7:1f:e6:1a:c9:f2:22:ef:
43:aa:81:cd:fa:1c:5e:ef:f3:93:1f:da:7c:68:b7:
18:ff:1d:2b:50:2c:79:7c:2a:2c:ae:06:c8:6d:c8:
1c:78:d7:45:1c:bd:79:dc:30:a9:d0:53:a8:b6:c6:
d8:b4:0b:5f:1a:99:fd:03:34:64:6a:59:44:ea:e8:
a0:2b:f8:84:b7:33:cd:5e:5a:af:bd:cb:4e:20:8d:
30:17:19:e5:82:c0:84:35:59:f8:b1:60:d3:ae:4d:
bb:7d:d6:89:29:a3:5f:ea:e1:46:bf:a5:de:97:10:
09:fe:c0:80:c5:b2:97:0d:4e:86:c2:ab:ea:de:04:
07:7b:30:51:27:a1:05:fb:82:cf:23:5b:b7:e9:a2:
8a:5c:2b:c3:00:b7:b9:db:a8:9d:20:34:2a:a2:0c:
ed:d6:1d:a6:b6:45:f6:89:a2:bc:7b:e1:03:83:a7:
ca:fc:6c:83:5f:3b:b2:7a:ab:92:1c:4f:01:1d:98:
b5:63:4c:d2:75:33:da:3c:3e:41:7b:16:b3:63:f6:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:30:AD:16:39:9B:C2:93:05:E3:7B:78:A4:DD:2E:1C:53:64:2C
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2a:59:a4:b5:ee:e6:ba:1b:92:c1:bb:ed:ac:5a:e9:6f:ee:
eb:92:95:70:e6:9f:7e:98:5a:58:c9:f6:45:5d:00:e7:3a:d4:
cc:d2:79:33:a5:62:28:b8:b1:dc:33:e7:05:33:c8:aa:eb:ca:
f1:b1:c6:2d:88:b4:3f:3c:f1:09:c4:d3:2a:aa:4f:07:2d:6a:
46:c4:e7:ff:e5:b0:16:4d:21:a5:1e:e2:ca:dd:a4:76:a6:6f:
4e:c7:2e:74:47:0f:18:d8:c1:b6:24:e9:5b:dc:6f:ba:18:e0:
97:23:1a:07:39:4b:2a:47:74:76:7a:a8:56:53:9c:0a:3a:1e:
67:46:0b:1e:d3:15:7d:2a:95:22:ff:a2:34:bd:8c:f0:58:d7:
eb:99:3c:2c:3f:1f:06:4e:9d:93:0e:7a:c4:5b:e9:cb:e4:8f:
cd:31:85:a7:13:8a:7e:56:67:83:3e:b6:40:90:f4:1a:4e:b7:
f7:e6:40:52:b2:c7:9e:95:ad:c1:da:59:28:ef:40:22:6d:c4:
22:65:1c:d9:19:fd:bd:14:6f:47:1e:00:9c:d6:17:38:00:d6:
d8:3e:4f:25:e7:ad:ad:42:b3:5c:a7:b1:30:21:52:6b:3e:9b:
f4:87:3f:77:72:60:aa:45:8a:8c:29:7e:55:c6:0f:5c:1b:8c:
63:8b:c4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:15:58 2026 by rpki-client