Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
File: 9I-TynzhxFjLZG83ocligAjtlek.mft (raw, json)
Hash identifier: DnpCPO5kvFysKZ2ZXfvBInIbvZk1hWTPo8NsBhCN15I=
Subject key identifier: BB:E6:62:D6:DB:ED:B5:BD:70:66:2E:6F:52:36:60:40:9A:58:36:4C
Authority key identifier: F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
Certificate issuer: /CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Certificate serial: 01A1889B437946BEBF2D915DD37495786DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
Manifest number: 0180
Signing time: Thu 29 Oct 2026 17:00:38 +0000
Manifest this update: Thu 29 Oct 2026 17:00:38 +0000
Manifest next update: Fri 30 Oct 2026 17:00:38 +0000
Files and hashes: 1: 14IQa4YJx07aw3R2c8Wa0alO5tE.asa (hash: p3I3ibR75QpSLRLyKUWYy3n3ScI7ed7lUSMpaavT+mE=)
2: 9I-TynzhxFjLZG83ocligAjtlek.crl (hash: GaFu4/UjMUQ/oy2qwEyKZ1L63BR4TpHIm79dMSZM9Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:43:79:46:be:bf:2d:91:5d:d3:74:95:78:6d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Validity
Not Before: Oct 29 17:00:38 2026 GMT
Not After : Oct 30 17:00:38 2026 GMT
Subject: CN=bbe662d6dbedb5bd70662e6f523660409a58364c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:07:f4:2c:2d:6d:52:10:bb:f9:c1:bd:ce:90:
b6:c3:e8:cf:86:39:ba:e1:5c:ae:6d:c5:71:1d:40:
27:73:d8:0d:37:9a:5d:9f:53:f7:f5:9c:24:6d:59:
2c:f0:72:0f:e6:35:79:f9:6b:3c:91:b5:ce:ef:a8:
4a:4a:a1:61:6d:e1:6f:fa:68:a5:b1:b7:ec:a9:11:
ed:cc:de:f1:f7:a6:cb:ac:05:7f:4a:95:80:be:44:
6b:9d:a7:89:40:bb:f0:dc:df:44:2d:32:87:e5:f9:
f3:66:f5:54:62:bc:30:dc:2c:1c:dd:4a:a0:53:cd:
bb:e0:19:e1:75:bc:d5:be:14:32:b3:76:d3:46:6c:
bb:3a:20:18:8b:4b:2f:dd:8e:b1:94:72:66:2b:e3:
b8:7b:4a:ff:2c:5a:76:0c:df:57:1e:b8:00:ad:13:
1a:72:9b:b3:f6:01:77:09:ca:ca:c6:4f:60:2f:20:
b9:1f:22:a6:cb:6c:5a:6b:cd:25:82:48:7c:d3:17:
43:0d:79:23:e3:57:ea:26:01:4f:99:b4:5e:ce:ac:
05:59:3f:db:87:8f:a5:0f:52:21:1b:77:b5:5d:7e:
6d:56:6c:fe:7d:26:54:d2:74:c6:01:d2:a7:c6:6b:
a2:1f:80:ba:e4:0a:99:94:00:32:5b:1f:61:84:cf:
9a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:62:D6:DB:ED:B5:BD:70:66:2E:6F:52:36:60:40:9A:58:36:4C
X509v3 Authority Key Identifier:
keyid:F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:fc:f7:39:e2:ff:7a:65:0c:2a:46:a1:88:58:66:aa:95:22:
3c:cd:09:40:89:57:48:bd:ec:0f:4d:b3:f0:39:79:3f:8b:32:
c7:8b:46:13:c7:e2:36:5b:4b:cd:63:46:af:91:45:69:c6:49:
8f:b2:23:bc:84:22:df:ff:a5:47:e9:d7:1a:1c:0e:89:41:15:
17:26:97:f6:08:6f:97:02:53:40:67:d0:27:bf:d1:48:5d:0d:
93:76:7b:52:e9:df:59:6c:60:f4:68:62:5c:1b:5c:89:23:f1:
3f:0b:0e:e2:36:92:0b:b3:21:65:86:5f:7e:f1:1e:21:97:40:
98:41:71:6c:d1:70:8f:2c:25:f6:31:66:3f:b7:a4:df:a2:18:
5e:27:2e:6c:67:af:25:59:6e:21:7b:f6:ab:1c:ad:f6:f6:d7:
20:7a:8d:a2:9c:d3:95:3f:c9:90:cf:54:09:2f:ef:5c:20:7c:
3a:6d:78:c0:d6:f9:34:a7:bd:29:57:3e:7e:15:f5:13:ef:e5:
e0:1d:86:71:37:05:6d:11:8b:d0:0c:41:c1:c9:cb:ad:b0:13:
5c:d1:a1:7b:fa:c5:66:4c:53:6c:bd:b4:dc:5f:99:cb:ba:e9:
29:ba:bf:9a:7d:8b:47:ff:dc:a2:b4:10:4e:08:a5:a4:44:3c:
6e:5f:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:12:16 2026 by rpki-client