Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: UKPy7bj7QOPqfvFjuedxIrHc2X+eL0PkknOGPUePEhw=
Subject key identifier: 5C:7C:D5:EE:90:11:6B:8A:98:E9:D3:6E:55:B1:1F:05:5C:04:B3:A3
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 01A17C6096F616CBA993F8D6A66936DE3245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 08:01:07 +0000
Manifest this update: Tue 27 Oct 2026 08:01:07 +0000
Manifest next update: Wed 28 Oct 2026 08:01:07 +0000
Files and hashes: 1: MvE_ASHksIA5Hihl4HjNkYFAKXs.roa (hash: R5hIaQTFtxbBLPslX/5K15uRVo3wvIX5E+vyZLpZGOk=)
2: sTa2ruH12AN1447UXDyFG4sK58o.roa (hash: QQfIB8V26GpvkAguN7nqO2FkvauGQGA+m32WWNo/GsE=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: vvMeMBfPuS7ambC04Blmq9/Bsnp/eGfrDwvtH3z2udA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:96:f6:16:cb:a9:93:f8:d6:a6:69:36:de:32:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Oct 27 08:01:07 2026 GMT
Not After : Oct 28 08:01:07 2026 GMT
Subject: CN=5c7cd5ee90116b8a98e9d36e55b11f055c04b3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:38:cf:0b:c2:94:b6:e0:c2:cb:09:2a:c3:
0c:64:f7:3c:20:07:bc:dc:8a:f1:d6:4b:16:db:67:
0e:ee:b1:a7:56:ec:cd:bd:3a:f5:6c:e5:38:51:9e:
a1:83:a2:9f:6d:2c:80:eb:2a:3a:9b:99:2b:23:08:
96:a1:75:d7:4f:b0:89:b8:a5:c5:a5:c1:b3:a1:bb:
70:15:87:2b:36:bc:df:a0:72:ec:8b:b0:a5:ba:0b:
83:6c:c4:32:14:32:b4:a8:27:cb:48:cf:fe:9b:52:
cd:7e:4e:80:29:3c:8f:ed:99:c8:d3:f6:37:e4:4f:
80:6d:03:ec:b2:d6:d8:1b:66:5b:c5:ca:6c:9f:35:
fc:fb:78:67:6e:d5:60:17:3a:5b:83:51:72:c5:c8:
9f:e4:02:46:ee:fe:99:5c:2b:a9:be:29:51:d5:e3:
77:84:8d:ab:70:f5:07:d2:49:a9:6b:e2:85:6c:01:
84:38:03:e0:5b:f1:e2:32:b5:a2:d4:ea:64:03:70:
8e:86:cb:dd:7c:ff:d0:a5:23:0d:db:3b:73:12:2b:
d7:93:28:48:f4:d0:00:e9:95:fe:89:d4:45:d0:d1:
11:4b:01:0f:d6:97:0e:80:b1:ab:f2:31:50:ec:a5:
b4:ac:a7:38:ac:c7:8a:27:11:c4:a1:08:74:f5:30:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:D5:EE:90:11:6B:8A:98:E9:D3:6E:55:B1:1F:05:5C:04:B3:A3
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6c:06:bc:a5:27:fd:0d:b9:83:3e:e9:a6:92:3a:71:88:96:
ea:dd:0b:a4:b8:69:bf:b8:4b:8c:d2:ba:97:aa:c4:e7:17:33:
65:a3:56:bb:c4:fa:43:16:1a:cb:a2:1c:45:c8:8e:9e:38:5a:
75:26:aa:90:be:88:4d:06:12:24:6b:31:68:9f:85:9c:4f:59:
96:67:b5:a3:66:5f:e9:a2:2d:4e:f2:60:e2:ea:cb:a0:5c:3d:
84:73:c8:f2:29:d5:36:04:18:50:b6:44:26:79:ac:d2:16:ba:
51:46:df:f7:fa:ea:1a:b9:77:f6:6e:05:0a:aa:5a:46:ba:0c:
25:15:38:fa:88:03:35:37:aa:09:60:69:c1:46:5b:78:70:9c:
03:6d:d9:56:36:35:68:b5:de:92:3e:80:f0:53:79:c8:2d:e1:
83:05:65:7f:e0:df:33:da:0b:d6:77:7d:fb:ba:e5:5a:69:27:
cf:0b:2e:99:56:68:51:b4:e8:6a:ac:52:7a:76:cc:24:ac:74:
e2:75:98:5d:58:a5:a8:cc:3d:18:cb:b0:42:be:65:5d:e5:5a:
bf:63:fe:0f:de:20:16:92:69:7f:4c:5e:b6:cc:34:bf:66:a0:
5f:4e:59:77:ec:b1:62:96:3b:cd:1b:3e:88:89:c2:f5:a2:27:
dd:b9:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:11:13 2026 by rpki-client