Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.mft (raw, json)
Hash identifier: EKSCHEq9lLSNZNPIW4XpQwN1Qm9uNSyta//wpgnX2Ks=
Subject key identifier: E5:BC:1D:F8:37:32:84:11:C9:64:DF:DB:3C:DB:CC:3D:72:30:EA:4D
Authority key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Certificate issuer: /CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Certificate serial: 01A044622F660AF0CEB54DF458CC216B0335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
Manifest number: 1A23
Signing time: Thu 27 Aug 2026 18:01:20 +0000
Manifest this update: Thu 27 Aug 2026 18:01:20 +0000
Manifest next update: Fri 28 Aug 2026 18:01:20 +0000
Files and hashes: 1: fTXAsgkTXCLMgAWnwuIixjwTbLA.crl (hash: 0gJb72iIGWlfluPcV4sXDdFb7hyWLOUN7sYwxZscOLA=)
2: grQlShm9Yf4p9v0UY4WRgIC18Rg.roa (hash: 0KLMtmRL0pnGPXXoN5qSCFJywF+voZI8ebkJsYdl6wg=)
3: l1AVp_w4-LVuNkKZXyFJBaRiTqU.roa (hash: pv6l02vTFMwEiJ4PcQNABkmbJULiDmx5aoXWeKtSRA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:62:2f:66:0a:f0:ce:b5:4d:f4:58:cc:21:6b:03:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Validity
Not Before: Aug 27 18:01:20 2026 GMT
Not After : Aug 28 18:01:20 2026 GMT
Subject: CN=e5bc1df837328411c964dfdb3cdbcc3d7230ea4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d2:be:e2:f5:60:94:ae:8b:13:bc:bf:9a:fc:
ac:46:26:9e:9c:e2:72:82:05:90:a3:c9:a1:f1:69:
a2:0a:63:a2:82:79:68:55:fc:5d:41:cb:c2:8c:c4:
d8:cb:37:10:af:b0:83:82:e3:49:a1:ad:c1:45:58:
44:46:2f:f4:de:91:08:98:8e:0d:42:62:6d:3d:46:
36:48:dd:36:23:84:63:a8:48:05:d7:12:52:8e:9e:
4b:f7:15:05:e8:2c:f3:76:c0:65:2a:d8:7b:7e:66:
db:66:69:8d:23:f8:3e:5e:be:9e:ce:5e:bb:0a:8f:
28:4b:59:97:c0:2b:9a:67:4e:ce:cc:f6:a3:99:c7:
83:ec:9d:2b:91:55:ea:05:e9:6a:d0:03:bc:ac:56:
bb:71:50:94:50:b9:31:55:29:0b:4d:17:57:09:78:
9b:50:11:7d:04:77:83:7d:8a:be:0b:35:0d:4e:78:
da:15:b7:7a:6c:9c:1c:d9:ef:04:cd:8d:ba:d1:8b:
f1:a6:22:d9:04:7d:27:c1:4c:e0:e9:3b:bf:11:90:
f9:01:66:29:5c:9a:f3:9d:4f:e5:35:57:8b:75:f8:
1e:6b:60:1e:1f:58:1d:5e:ab:03:35:3c:f0:17:d8:
70:ee:bb:8c:03:c2:04:4c:2d:f2:d1:3e:ce:4b:c4:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BC:1D:F8:37:32:84:11:C9:64:DF:DB:3C:DB:CC:3D:72:30:EA:4D
X509v3 Authority Key Identifier:
keyid:7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:93:cb:05:84:f5:05:26:f6:0c:13:58:05:a6:24:87:e8:a7:
5f:29:aa:b5:27:dd:96:45:46:a3:db:c3:9d:1f:4c:fe:31:18:
08:ca:79:e8:56:4c:f3:5e:7e:fb:c0:27:7a:22:bc:42:91:b0:
24:20:b5:f3:30:96:53:e1:ec:4f:d7:36:c1:29:8b:41:10:a6:
33:01:bf:b5:31:fb:13:91:7f:1e:50:85:be:99:86:ab:44:28:
79:77:93:42:c2:6a:fa:4d:24:a1:4b:74:94:af:a7:73:af:5f:
d5:f4:df:cf:2a:47:f1:83:02:72:d7:71:9a:56:3c:fa:bd:bc:
bd:7d:6e:fb:04:bf:2a:8c:08:9c:fb:21:a9:03:82:e6:be:1f:
8f:49:13:64:56:93:d1:17:6c:fa:5a:de:15:fc:f1:c4:1b:15:
33:2a:a1:d1:9e:aa:6d:28:3e:54:d4:93:4e:fb:dc:7a:b9:9a:
09:f3:20:35:5b:38:70:d0:dc:df:0e:f3:36:62:d4:df:ed:e7:
7b:46:c7:57:68:af:ba:cc:2d:bf:56:15:e0:6a:3e:b2:d4:56:
31:03:0c:95:f5:ea:b9:14:d9:44:98:8c:73:0d:a0:40:f0:59:
84:50:38:31:71:81:1e:44:50:0b:bb:6a:ec:79:78:5e:7e:4d:
21:0e:56:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:47:39 2026 by rpki-client