Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
File: tT9AiUhnv7TtUYEBfagOor3tKuQ.mft (raw, json)
Hash identifier: Zvwp9VjpQ+2x1bD2cuL78lIEN74B4GdrJHzvH/U3WF4=
Subject key identifier: F5:AA:0D:87:6D:05:3C:34:36:9D:A7:E4:8D:B3:B0:1F:CB:99:11:6B
Authority key identifier: B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
Certificate issuer: /CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Certificate serial: 01A155534EED4E07650A3B140963844FE6C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
Manifest number: 012A
Signing time: Mon 19 Oct 2026 18:01:25 +0000
Manifest this update: Mon 19 Oct 2026 18:01:25 +0000
Manifest next update: Tue 20 Oct 2026 18:01:25 +0000
Files and hashes: 1: UbZ2SPbY4okiTXM5AfdEnS10_Es.roa (hash: PXQQVoIm69bnLgyq/S5RdMXgtOcrtVDgQ2+xqsOy19A=)
2: tT9AiUhnv7TtUYEBfagOor3tKuQ.crl (hash: w9KG598H1FZV1zcNfrXAmUgJ9jX3nYBQ86ahThhxTu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:4e:ed:4e:07:65:0a:3b:14:09:63:84:4f:e6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f40894867bfb4ed5181017da80ea2bded2ae4
Validity
Not Before: Oct 19 18:01:25 2026 GMT
Not After : Oct 20 18:01:25 2026 GMT
Subject: CN=f5aa0d876d053c34369da7e48db3b01fcb99116b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:cf:97:0a:92:1c:0a:a2:bf:f1:97:c2:91:
11:41:19:91:53:66:9c:fb:7a:55:ca:15:3c:37:62:
e8:00:c6:c1:9c:bd:dd:15:4a:fd:2e:77:f2:6d:d9:
8c:bb:3c:67:7f:2c:b1:85:2a:36:2c:f5:24:c3:7f:
7b:e8:85:e8:bc:2b:54:23:08:ab:20:72:71:82:e9:
b5:b9:b0:09:a1:d8:09:db:79:5b:7d:00:ec:c0:6a:
4b:0e:d1:91:3f:e8:7f:a8:a2:7d:40:9d:ae:87:c4:
b9:3c:61:85:be:e0:15:43:a1:7c:d2:a6:a4:58:32:
93:67:6f:4f:83:ea:db:6a:7a:35:ad:89:e2:8f:b5:
22:ae:3f:15:60:af:f1:36:12:71:80:32:e3:29:e2:
95:33:b5:bd:84:7a:28:11:76:f8:8f:a3:28:34:48:
5f:5f:b7:96:42:b5:88:29:f3:3f:af:db:f2:eb:fd:
dc:19:74:2f:06:0e:af:33:a0:e5:db:40:23:19:01:
1b:a5:9c:88:e4:1a:7a:8d:09:5d:01:2c:cb:cb:70:
a6:5c:0b:8f:d3:db:51:5a:ee:17:55:d0:e9:88:27:
ee:d1:e7:14:4f:66:04:71:a2:e4:10:ee:71:88:8e:
8f:f8:de:3a:e3:bb:30:35:ce:46:cc:02:f0:99:b7:
f4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AA:0D:87:6D:05:3C:34:36:9D:A7:E4:8D:B3:B0:1F:CB:99:11:6B
X509v3 Authority Key Identifier:
keyid:B5:3F:40:89:48:67:BF:B4:ED:51:81:01:7D:A8:0E:A2:BD:ED:2A:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT9AiUhnv7TtUYEBfagOor3tKuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/tT9AiUhnv7TtUYEBfagOor3tKuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:ec:0b:0b:bc:10:d4:16:a5:f9:f6:60:69:9f:44:c7:a2:
f3:96:30:08:69:a1:22:bb:d7:c1:9e:2d:ac:ec:d8:24:2f:a1:
89:bc:36:f2:e7:0d:9e:db:59:3f:00:08:0f:29:66:e5:c3:06:
c9:54:a2:73:c1:8e:49:14:30:37:f1:c2:7d:41:96:a8:0a:4c:
26:01:8f:6e:d9:51:39:d4:10:6c:12:4c:5d:8c:31:ff:cd:78:
7f:1c:f9:ae:df:1c:db:e2:b9:e2:ce:6b:cb:64:6b:6b:ae:1a:
29:72:67:b2:c1:8f:4f:2d:87:5d:2a:d6:17:66:57:08:4e:a3:
71:9a:90:b4:7b:ed:0e:29:f0:1c:d4:b4:cf:93:03:7c:16:ec:
ed:54:ac:55:ba:43:0c:88:57:eb:99:b2:13:62:be:ef:b3:a0:
f9:97:37:49:34:9b:99:50:a2:97:e2:ce:3e:72:d2:37:a2:44:
5a:6d:8b:1a:6c:91:99:42:2a:dd:e8:ca:25:3d:42:86:85:44:
12:fc:e0:ba:5e:68:23:73:e6:26:91:e6:e6:fc:da:b1:16:58:
48:74:60:43:68:69:18:4c:60:4e:16:0c:04:d2:7f:e0:8f:d5:
c5:96:5d:5b:7d:f9:22:de:b6:63:65:9f:34:66:79:cb:70:65:
8a:b8:4d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:20:11 2026 by rpki-client