Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier: oDMVarkmWmRTYQYE56TXBeIHl1mu4BhlD1yFxyGO4TE=
Subject key identifier: B2:EA:35:E4:80:52:E7:14:9F:F8:63:A9:8E:10:03:7B:32:A7:93:38
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer: /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial: 01A17AA83B19840556BCF320FA5E2FEC21A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 00:00:07 +0000
Manifest this update: Tue 27 Oct 2026 00:00:07 +0000
Manifest next update: Wed 28 Oct 2026 00:00:07 +0000
Files and hashes: 1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: GlHzvaeh74HGU8qJxCdXfzcK++w1gcep31WXk5jezxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 00:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:a8:3b:19:84:05:56:bc:f3:20:fa:5e:2f:ec:21:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
Validity
Not Before: Oct 27 00:00:07 2026 GMT
Not After : Oct 28 00:00:07 2026 GMT
Subject: CN=b2ea35e48052e7149ff863a98e10037b32a79338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:13:b8:10:75:ce:98:68:bb:46:ce:fd:e3:
fe:00:62:3e:2f:9e:4d:ed:4e:d1:f0:00:51:3f:14:
f9:b5:78:60:91:a3:2a:db:f2:19:73:d0:7e:bd:ad:
86:56:76:da:50:be:f3:b4:93:41:7e:24:1f:da:62:
be:43:27:53:6b:8f:64:c6:09:32:c4:cd:45:ee:e1:
63:59:fc:02:47:b7:ac:d9:3e:34:ea:a4:5a:3a:3e:
b7:74:3e:f0:f7:aa:1e:96:cc:09:d2:70:b0:00:1d:
87:5c:2f:83:b4:37:28:02:47:f5:73:83:05:8f:80:
a8:7d:0a:11:90:1b:be:d2:b7:49:7d:cd:10:b2:61:
21:25:3b:3f:8e:21:70:6e:b3:eb:62:f5:d8:3b:75:
4c:ee:1b:d6:54:e9:63:ef:31:35:30:c2:3c:db:14:
06:75:64:11:4c:09:63:a4:a5:f5:12:8b:55:88:03:
51:1e:40:b4:a8:8e:37:a9:02:25:9c:ef:44:1e:3c:
f0:9d:a8:4d:d9:50:e2:9b:4a:dd:cb:c9:bc:b7:6a:
00:02:8f:c1:77:da:ac:82:df:13:1f:d7:41:7a:c3:
21:1e:cf:5d:5b:ec:13:4d:e4:22:58:0c:03:34:d9:
71:2b:3e:28:b1:9f:f6:50:9b:78:2a:bb:c9:f4:49:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EA:35:E4:80:52:E7:14:9F:F8:63:A9:8E:10:03:7B:32:A7:93:38
X509v3 Authority Key Identifier:
keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:27:96:13:ae:cc:2a:f1:af:ed:e3:48:78:f2:db:e6:62:f3:
1c:74:0f:8d:10:db:be:d0:0f:66:bd:d3:3d:ca:e4:54:8a:cd:
a8:2c:5e:d3:ef:9b:d7:90:0f:6c:47:22:61:3c:64:6f:9f:45:
15:5d:21:04:2b:de:4b:b7:af:ce:6b:77:29:7b:31:13:10:9a:
29:ce:0f:b1:72:79:96:b7:83:aa:f7:46:f2:4e:f0:95:0a:c8:
bf:25:06:ab:d9:11:ef:0d:7e:f5:3d:82:ad:f6:39:df:f4:20:
79:04:e7:59:05:eb:ac:4d:f2:9f:25:47:be:a2:60:86:b4:e6:
70:ca:8d:53:28:e9:51:bb:10:d6:55:4f:19:da:42:d3:c3:cd:
c8:dc:2b:91:61:e7:e4:f5:1d:59:73:fa:5f:dd:e4:b2:32:aa:
c8:43:3d:c6:51:30:1a:9a:87:33:5c:b0:ef:7a:55:83:4d:2a:
4e:c6:bb:3a:4e:65:a3:02:62:c5:c8:63:8e:0a:f7:69:39:2b:
31:be:72:8f:45:f9:1d:6e:24:79:86:45:d3:25:96:87:d7:ae:
d6:13:d9:d8:b7:00:c2:44:2d:7c:58:f2:53:7e:a3:d7:37:b9:
c9:99:8f:e7:47:2b:04:60:ce:f8:58:a6:d2:36:02:57:0f:84:
2e:2c:bc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:07:19 2026 by rpki-client