Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
File: tK_MhnJK4o7jZE0b6ehSCj7zia0.mft (raw, json)
Hash identifier: FaYCml81dK+VwiYhxJM8GiwlwhQ4i79HKu1QC/8x6qo=
Subject key identifier: 65:C8:3D:5F:45:84:03:10:59:84:7C:2D:1B:1E:44:65:6B:E5:82:32
Authority key identifier: B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
Certificate issuer: /CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Certificate serial: 01A084C14248E867187C0BB725B0FE17C934
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
Manifest number: BE
Signing time: Wed 09 Sep 2026 06:00:52 +0000
Manifest this update: Wed 09 Sep 2026 06:00:52 +0000
Manifest next update: Thu 10 Sep 2026 06:00:52 +0000
Files and hashes: 1: tK_MhnJK4o7jZE0b6ehSCj7zia0.crl (hash: TCVG5/hbebj2SqLyNt4yAwDP62KxXLU9GswGuiC2neM=)
2: xknKtTv3aOJfGX6wPs3f3yNuujM.roa (hash: UAJG/h4ZBqmm+2hMDaAp1u3zKvAAvYZrIBtFkvMHGHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:c1:42:48:e8:67:18:7c:0b:b7:25:b0:fe:17:c9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4afcc86724ae28ee3644d1be9e8520a3ef389ad
Validity
Not Before: Sep 9 06:00:52 2026 GMT
Not After : Sep 10 06:00:52 2026 GMT
Subject: CN=65c83d5f4584031059847c2d1b1e44656be58232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d2:cc:20:a6:4a:19:51:56:4d:38:0d:b0:21:
90:a5:87:55:b3:18:b0:75:a7:71:e0:04:ac:74:05:
ca:2c:2e:7e:ea:fd:e2:11:59:9d:42:0c:2f:67:6a:
7c:14:de:17:a8:b8:de:c0:f9:c8:0d:d2:46:4e:57:
a3:c0:58:53:20:f4:68:0d:73:aa:c7:c6:90:30:ba:
16:3f:b1:1b:18:3f:73:ed:7c:cb:75:81:0c:5a:22:
f6:24:7d:47:2f:3f:d5:28:78:f1:97:48:be:ff:09:
1c:ac:05:ce:af:cd:3a:b4:86:a3:a8:4f:30:65:69:
37:61:4b:5d:18:42:af:a6:d0:a7:ef:f5:70:1f:72:
c5:8b:8a:be:12:28:c5:67:08:de:63:9a:86:d4:7e:
51:13:c4:09:0c:ce:57:e7:91:a0:de:c3:8d:83:bb:
48:26:67:af:a9:d6:4d:f5:d0:c7:52:e2:0f:e8:e6:
3c:ba:e3:3e:e6:5c:36:d8:eb:5c:e8:67:43:5e:e7:
1e:2b:38:50:fa:ee:dc:58:83:19:c4:14:2d:5e:c4:
49:79:6b:29:7b:01:98:6d:85:81:c8:12:23:f3:79:
e7:47:95:55:de:d2:1c:13:49:95:c1:b0:ba:3c:1b:
15:30:fb:6a:be:eb:e2:38:68:42:9c:02:ec:14:76:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:3D:5F:45:84:03:10:59:84:7C:2D:1B:1E:44:65:6B:E5:82:32
X509v3 Authority Key Identifier:
keyid:B4:AF:CC:86:72:4A:E2:8E:E3:64:4D:1B:E9:E8:52:0A:3E:F3:89:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK_MhnJK4o7jZE0b6ehSCj7zia0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/tK_MhnJK4o7jZE0b6ehSCj7zia0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:6b:3b:4f:4f:64:83:c7:42:40:8c:a1:01:ca:a2:e3:d0:32:
31:b7:a5:64:4d:be:b0:ba:49:f7:94:c0:2b:cd:c0:31:3a:b9:
38:24:3a:e0:6f:57:48:b3:9c:a7:b4:15:4a:97:04:73:f9:bd:
ab:7e:65:8b:38:8f:bb:13:d0:c8:f3:88:37:ed:d6:e1:53:c9:
47:f7:8c:46:e9:92:d2:78:a5:d8:81:12:3d:ad:a4:d3:2c:d7:
4a:c5:b3:5f:9b:fe:88:a2:4b:1e:06:c3:ae:ae:f1:ee:aa:8f:
96:d6:12:7e:27:f4:14:b2:53:5c:bc:7a:90:87:23:1f:74:a3:
42:70:36:aa:18:2b:e2:39:b0:47:90:8f:33:7b:9b:cf:f1:a2:
c6:ef:ff:b6:0e:83:d8:5e:7a:6c:83:a8:b9:ed:27:75:ff:1c:
18:1c:63:73:78:c2:d0:3d:7d:36:f7:c2:27:d1:d2:fe:ed:d3:
ef:46:48:f9:47:66:3c:b5:63:32:81:1e:19:55:8c:6e:85:47:
6f:8d:6d:5e:3d:55:67:d1:ad:ac:fd:1f:c1:86:7a:df:92:33:
89:dc:b8:c7:fd:22:6a:fa:ea:b5:4d:60:91:62:89:25:2a:db:
81:48:8b:0a:78:7d:63:01:5b:e1:06:87:4a:e5:98:0f:67:a9:
20:cc:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 16:35:34 2026 by rpki-client