Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
File: tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft (raw, json)
Hash identifier: HHD3NI4rCSG9eFX3+kpJWndFGhV6R5DOspAUcXxPwYQ=
Subject key identifier: C9:44:FD:CC:20:21:6B:B5:57:52:2F:11:7F:AA:93:7D:0F:88:01:1E
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 01A17F987C443DF3251D1BF164BE08F71083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
Manifest number: 026D
Signing time: Tue 27 Oct 2026 23:01:02 +0000
Manifest this update: Tue 27 Oct 2026 23:01:02 +0000
Manifest next update: Wed 28 Oct 2026 23:01:02 +0000
Files and hashes: 1: tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl (hash: ob2Wly8ygOolCk5kmlAXGWjNbA3ggGK9gw/S4iD/GNc=)
2: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (hash: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:7c:44:3d:f3:25:1d:1b:f1:64:be:08:f7:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Oct 27 23:01:02 2026 GMT
Not After : Oct 28 23:01:02 2026 GMT
Subject: CN=c944fdcc20216bb557522f117faa937d0f88011e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:a7:25:08:09:82:97:f4:7e:2f:61:75:03:
d0:c8:e4:27:fe:ba:2e:14:6b:47:72:91:f6:30:12:
1f:64:20:30:46:79:9a:8f:18:67:da:f5:61:ec:d9:
56:c8:e2:2f:88:ac:99:3b:1b:d4:e4:2d:a8:03:39:
75:80:db:ec:e5:55:71:8e:b1:90:17:43:26:26:b8:
06:3f:cc:79:45:88:61:0f:25:44:dc:0c:fa:b4:aa:
5e:f0:c5:f5:75:c6:75:ac:bb:11:49:fc:5e:47:3c:
1f:4c:ed:fb:89:93:87:c2:1d:2a:f6:be:10:d9:71:
45:07:29:ab:4f:50:65:a4:f1:02:34:20:1e:5d:4a:
f1:73:3e:cb:07:d8:df:b2:d7:a8:9d:f2:95:64:f2:
1e:6f:82:0d:36:42:9a:50:93:52:98:be:5a:a1:72:
0f:e4:14:16:0b:a8:63:67:d0:32:8b:5a:08:a5:9d:
9d:9f:b2:10:41:f0:5b:6b:86:87:f8:f7:2a:7d:f1:
f6:0a:a1:9a:a5:e4:ca:3c:54:8b:80:18:c0:a5:d8:
82:2c:09:29:2a:8c:36:f9:76:6c:a7:56:16:97:e1:
7d:c0:26:47:a6:69:4f:4e:6d:ef:e5:a1:e0:3f:b9:
b0:11:16:02:56:7d:15:c7:fa:7d:29:66:22:35:62:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:44:FD:CC:20:21:6B:B5:57:52:2F:11:7F:AA:93:7D:0F:88:01:1E
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ad:71:c6:56:dd:b6:2b:22:6d:5f:2f:3a:88:6c:3b:90:98:
5a:b1:52:1f:12:dc:4a:4f:e6:02:e4:a4:22:c1:0e:77:73:ea:
8f:8e:7b:c7:e0:fe:91:77:02:af:a0:8b:45:21:54:20:5c:11:
02:85:bd:c6:cc:83:7a:ea:81:f6:0f:bf:f5:52:45:f7:1b:0b:
65:b3:ae:6c:bf:a6:56:60:be:d3:22:32:80:42:5f:46:1c:e5:
18:c9:22:d8:aa:ce:47:a2:42:76:11:67:a5:29:bb:82:f5:10:
a6:ba:f1:6c:e0:45:d5:36:18:21:23:ae:95:49:6b:0b:b6:e5:
14:56:94:44:67:ac:db:28:f4:38:4d:0d:58:a4:fa:c7:c2:ab:
5f:61:d8:f4:60:ec:31:44:fc:98:9a:45:0e:e3:be:67:bb:da:
65:14:91:71:a1:6d:32:80:0b:c7:85:d1:12:bb:e8:92:52:e1:
0c:bc:de:93:dd:59:89:cb:51:ed:32:30:05:2c:64:b6:1a:67:
9b:49:d0:eb:e6:e0:fc:a0:11:f0:ac:90:6b:1b:00:8c:c5:b1:
a5:c2:14:a8:67:f7:2a:31:1f:b2:09:e9:98:3f:01:bf:02:57:
2b:77:27:85:3d:14:3f:8b:2b:76:93:7e:e3:97:7d:1f:01:13:
97:6a:b2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:38:46 2026 by rpki-client