Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json)
Hash identifier: ONokiTrtS/EvsaE8Q54od2PdqF99IAif5PHmnLi50pY=
Subject key identifier: 6E:FF:A2:73:6B:9A:44:9D:C8:85:1F:99:47:0C:AC:FC:CC:02:80:3F
Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Certificate serial: 01A129560B8958A7F0D19C67B696B5CBA66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 05:01:07 +0000
Manifest this update: Sun 11 Oct 2026 05:01:07 +0000
Manifest next update: Mon 12 Oct 2026 05:01:07 +0000
Files and hashes: 1: HJM8ar8o7Ms178YqtLEfQB0QhN4.roa (hash: zeFiOMksTar7c+X+HOnRK9Kyf2IXPD5S69TV2amNtAY=)
2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: g0ShYTWWd6BaFLFjRfHDXi2uKDgdW04Bw3vxfAPj1HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:0b:89:58:a7:f0:d1:9c:67:b6:96:b5:cb:a6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4
Validity
Not Before: Oct 11 05:01:07 2026 GMT
Not After : Oct 12 05:01:07 2026 GMT
Subject: CN=6effa2736b9a449dc8851f99470cacfccc02803f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:88:d2:63:ac:a3:a1:e1:7a:5f:5e:f8:2e:
3a:89:9b:9b:22:de:0c:31:3b:70:ce:a0:46:8e:7c:
f1:f3:d4:90:fc:48:bf:58:cc:ea:4e:73:45:8c:7d:
6c:cc:d2:24:9d:43:51:c9:90:fd:72:4b:ea:d5:84:
4e:85:a5:7f:66:61:16:02:07:1d:db:91:6d:f7:91:
2d:32:4c:76:0d:1e:df:11:cc:cb:17:84:24:ba:55:
10:33:ab:f2:78:ad:7a:52:f6:48:b6:05:04:b6:c8:
1d:77:85:cb:7c:5e:75:58:7e:42:05:99:d7:db:5e:
62:a4:65:99:ed:39:13:59:96:2c:84:2f:08:88:7b:
48:68:79:5b:60:2c:30:44:d9:b8:82:c2:5a:76:78:
23:e7:b2:68:a3:d2:db:b3:cc:11:9f:74:05:7c:98:
c2:da:d8:ab:2a:9c:35:99:36:27:d3:ab:43:88:dd:
ae:1d:8f:b8:8d:00:fb:e2:e2:33:2d:91:f6:69:ac:
a9:5e:a0:63:f1:53:0b:0c:56:9f:11:cf:24:76:f7:
fb:81:50:98:be:36:24:db:9e:68:2c:ad:93:fc:06:
fb:bb:e2:20:7b:19:40:24:ea:97:26:08:86:69:40:
7b:cd:d0:53:9e:28:b0:5c:2c:bb:02:42:75:16:5a:
12:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:A2:73:6B:9A:44:9D:C8:85:1F:99:47:0C:AC:FC:CC:02:80:3F
X509v3 Authority Key Identifier:
keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:03:08:e5:1b:ef:c9:ac:0f:d7:6f:24:d3:30:b7:c6:64:b4:
66:f1:b3:ec:c8:e7:90:8c:c6:04:7a:c7:66:27:30:58:a3:21:
9e:8b:e2:6f:cb:e8:a7:01:96:3c:65:c2:d8:a9:52:ae:01:e9:
23:d9:c3:92:fb:66:6b:f2:7f:55:34:ca:64:f7:13:03:1d:53:
a5:31:07:fe:fd:92:b7:b4:d9:5c:48:6d:4f:77:a0:bd:9b:9a:
8f:22:57:59:22:b0:83:e2:35:91:92:f3:67:cb:69:14:5d:66:
5b:34:46:19:f2:f0:96:6a:a3:43:02:83:a7:03:a9:28:3f:20:
07:c9:bb:2b:9a:e5:6c:bb:93:d1:e6:f9:fe:4f:a4:a0:de:fd:
67:3c:b6:cd:02:b2:5a:cb:9f:bb:d1:53:de:ca:c4:91:d3:e4:
03:49:4a:55:cb:6e:98:9d:be:f1:5a:3c:fa:1f:93:1d:48:a8:
f2:6b:35:9a:71:7b:31:6a:56:a4:6f:31:77:b1:0d:3f:b0:a6:
ac:88:25:27:d8:3b:59:63:2c:d5:b5:fb:0e:70:be:ab:74:ac:
24:d4:5a:3a:45:d0:38:0e:68:8c:ff:71:18:45:2b:fa:f6:eb:
97:8c:54:cd:9d:17:5c:ec:4b:b7:67:f8:2e:6f:a7:09:47:e9:
f8:a5:db:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:48:44 2026 by rpki-client