Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier: nKvTDmfL0lakZyotVNSPq/jA9Qh3qcjT4fiRxkD55GQ=
Subject key identifier: C3:BA:66:37:B7:0F:D8:8D:76:DB:7F:77:8C:22:02:2C:42:B8:7C:48
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 01A174397E13D2A649E8381641E244BD0CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number: 013A
Signing time: Sun 25 Oct 2026 18:01:27 +0000
Manifest this update: Sun 25 Oct 2026 18:01:27 +0000
Manifest next update: Mon 26 Oct 2026 18:01:27 +0000
Files and hashes: 1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: 5k9JaT3cbcUOqqe4d7mAkAibubJNi506qymE8LpcyHQ=)
2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:7e:13:d2:a6:49:e8:38:16:41:e2:44:bd:0c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Oct 25 18:01:27 2026 GMT
Not After : Oct 26 18:01:27 2026 GMT
Subject: CN=c3ba6637b70fd88d76db7f778c22022c42b87c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:eb:65:bc:66:dd:77:b9:f9:a6:3e:2e:ef:
ac:90:21:25:f4:53:43:a7:6e:ee:62:d3:bd:1b:57:
5a:a3:75:37:2e:27:0a:a1:cc:60:8b:b2:ae:d1:86:
e3:3f:22:0d:20:16:43:63:04:31:9c:c8:7f:3f:c4:
b1:9f:02:b4:cc:76:04:da:91:a6:a6:5a:b2:1e:c0:
6a:1e:59:88:74:a3:1b:5e:44:16:7e:12:40:5e:89:
30:a4:ce:f7:1d:b1:6c:bc:43:63:2c:70:86:5e:07:
fb:9a:f5:fa:87:2c:3f:95:22:79:c2:53:78:9f:11:
c4:00:c7:21:23:95:94:97:b7:c7:c5:0e:87:00:b5:
7f:47:62:9e:09:ca:94:47:1f:41:6e:42:3a:cd:45:
20:50:12:71:2f:a2:1c:73:9a:bf:9c:86:21:59:d9:
89:ab:43:48:bd:39:49:77:7f:cb:9b:96:d6:7f:ef:
5b:0d:bf:50:79:4d:83:84:75:d7:6b:85:f1:8b:0c:
ab:70:15:f3:b4:6a:08:e9:e1:19:1d:9a:c0:0c:1b:
ee:14:2c:1b:a0:c6:bc:50:e8:3e:34:6f:c7:61:15:
17:56:ed:46:d1:44:98:90:c4:0b:c0:fb:35:6a:bd:
cb:80:7f:4a:a5:57:55:b6:84:48:00:9f:a4:e3:46:
9e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BA:66:37:B7:0F:D8:8D:76:DB:7F:77:8C:22:02:2C:42:B8:7C:48
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:26:45:81:3a:9a:64:05:b1:e4:a7:e9:c8:46:e0:fb:79:
fd:7c:f9:e2:08:9e:df:d4:41:47:67:b4:f5:37:0f:0f:3b:c3:
b8:af:4a:7d:dd:8d:91:28:e9:04:b2:84:ee:45:e4:63:ba:7e:
26:48:c4:15:56:6b:37:07:89:d2:4c:8b:0e:74:6d:07:44:25:
f9:b6:85:5b:f1:d2:d6:31:90:87:f7:48:37:a6:37:5a:23:5f:
30:54:81:97:a0:c9:a1:c0:f5:8e:a0:93:54:be:c8:c2:89:f2:
ce:cc:9e:28:98:66:3b:00:25:18:90:d4:b4:80:64:fd:71:39:
9e:eb:95:04:45:9f:27:f5:ef:b9:b5:8c:c0:ea:c4:f4:78:a4:
7a:80:bb:7d:5b:38:73:2b:c1:c1:69:e2:6a:be:ae:6c:d7:85:
48:cf:dd:4e:38:f0:66:d2:69:f5:39:67:b2:47:09:4f:6a:be:
34:0c:b1:28:b9:91:3e:63:a2:bf:a4:a6:9e:d0:54:2c:c2:02:
23:7a:9c:bb:39:9f:70:a1:d9:64:08:23:c9:87:83:68:4e:2f:
3a:69:b4:b1:b3:f8:ff:88:35:05:3c:2b:dd:11:84:1a:6d:a7:
ee:8e:63:df:6f:f1:05:54:16:aa:7d:fe:60:75:07:6c:05:53:
5c:62:7b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:06:15 2026 by rpki-client