Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
File: tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft (raw, json)
Hash identifier: aCgahE3g5TveDgmVerYRteZYci33fWiBZ1iiuUxjxns=
Subject key identifier: 01:81:64:7D:29:09:7F:57:67:74:0F:1A:27:D9:6C:D6:F1:0B:A8:7E
Authority key identifier: B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
Certificate issuer: /CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Certificate serial: 01A174DDCEC9BB5A47EB94B001EAB55E0F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
Manifest number: 96
Signing time: Sun 25 Oct 2026 21:00:55 +0000
Manifest this update: Sun 25 Oct 2026 21:00:55 +0000
Manifest next update: Mon 26 Oct 2026 21:00:55 +0000
Files and hashes: 1: nopMUUJTS0An2jLnhKvhz6wEdPs.roa (hash: 9seqKOVg1xtJT41JqrZrelanQQe9aZs4h0y4Rv603e4=)
2: tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl (hash: gyMR8csbCEH1MnS2RgJ6wUxeJ6glxIpbwFLX5bCpDmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:ce:c9:bb:5a:47:eb:94:b0:01:ea:b5:5e:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0a4c2392314d28a5b68b6faf0201ea0a014b3
Validity
Not Before: Oct 25 21:00:55 2026 GMT
Not After : Oct 26 21:00:55 2026 GMT
Subject: CN=0181647d29097f5767740f1a27d96cd6f10ba87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:26:f6:c8:ed:51:0e:92:be:56:14:0e:48:
1b:ef:09:24:c3:32:9b:b4:78:86:5d:f8:2c:3b:50:
22:cf:09:7b:cf:4f:23:9a:35:4d:5a:cc:c1:a7:9c:
66:eb:7c:3b:bc:00:7f:12:0c:20:c2:bd:d5:83:d5:
e2:dc:e2:09:69:ff:ce:ee:14:4b:bf:7a:1e:39:d2:
87:31:9c:1d:71:20:c7:80:80:7a:1f:c3:3c:68:7b:
4b:ca:20:51:23:0b:be:6a:12:37:4b:11:9b:8b:f7:
fb:a1:db:6e:67:55:28:59:f0:94:73:d6:33:ee:63:
2c:8a:5c:2f:30:c2:e0:33:93:71:23:c0:55:dd:f0:
fb:7c:4f:0e:16:05:74:65:f6:df:ca:4f:9a:93:78:
e1:37:7d:23:af:a2:12:6a:ab:8b:bf:c7:ad:6e:1e:
43:15:64:4c:fb:f9:4b:4e:dd:6b:a5:2c:12:46:c5:
76:2f:e5:1e:cc:b3:29:91:6f:86:a3:5f:d8:0f:5e:
f1:ae:c8:38:46:b8:db:b4:f3:a3:e1:4f:cc:4f:47:
58:ae:b0:97:de:4e:42:7b:18:af:12:c9:68:ba:5a:
21:c4:47:79:5e:49:ed:0d:dd:cb:6c:95:ec:b0:e5:
d3:90:c8:10:0d:2f:c4:76:1e:80:b5:53:94:af:63:
2d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:64:7D:29:09:7F:57:67:74:0F:1A:27:D9:6C:D6:F1:0B:A8:7E
X509v3 Authority Key Identifier:
keyid:B4:B0:A4:C2:39:23:14:D2:8A:5B:68:B6:FA:F0:20:1E:A0:A0:14:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLCkwjkjFNKKW2i2-vAgHqCgFLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7df4f2-8dfd-4572-9055-c3efc092664b/1/tLCkwjkjFNKKW2i2-vAgHqCgFLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:84:aa:b2:48:e6:a1:b8:09:a9:fe:32:c4:22:12:cc:15:ad:
7e:56:70:6f:ef:45:82:4e:1b:cb:46:e3:f7:f8:6c:e7:46:d1:
af:44:c3:02:9e:5a:3d:1c:65:14:b9:cf:d8:0f:47:d3:68:27:
77:30:12:6c:8c:26:a6:d8:6a:fd:fe:85:13:e8:ca:4c:8a:1b:
7f:84:b5:6c:c3:ee:5a:f0:b8:dc:ee:c6:63:dd:08:10:7b:41:
3d:a7:99:c1:37:ce:5f:d4:25:67:1d:b4:e2:a9:4e:6d:b8:8f:
9b:0a:79:94:12:0b:2e:54:f4:5a:aa:37:1a:f1:cb:e8:10:c5:
e3:de:f1:f4:80:a5:df:34:d4:06:8e:cd:db:a9:8e:f9:3b:f6:
32:8c:68:b2:8c:36:91:11:6d:e3:6c:50:39:e5:bd:ba:cc:3c:
58:23:bf:b3:de:71:3d:c3:f7:97:77:46:92:bb:ab:e6:03:79:
2c:64:63:40:7e:cb:92:b6:a0:74:41:10:7d:0f:40:ae:58:23:
d7:dd:ce:61:a3:98:a4:90:3a:cd:26:82:f5:c2:cf:18:14:38:
19:12:a3:cc:5c:66:3b:a2:d6:d6:b5:73:81:06:7a:93:cb:c1:
78:f1:14:83:74:39:ea:15:72:47:64:55:19:86:2e:4c:89:04:
e6:6d:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:31:54 2026 by rpki-client