Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: FVNKKkuytJ8z7JPttApYZDA+DhvqSYzbrCgVXsVnDV0=
Subject key identifier: 39:98:9D:2E:BA:85:D4:FC:90:6D:2C:DD:F3:D4:30:7F:7F:60:FE:52
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 01A08BD65025DC58A5C221827AA02448D731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 071A
Signing time: Thu 10 Sep 2026 15:01:13 +0000
Manifest this update: Thu 10 Sep 2026 15:01:13 +0000
Manifest next update: Fri 11 Sep 2026 15:01:13 +0000
Files and hashes: 1: 2bWalxPeCQJ8hBsQRSAPBex2fq0.roa (hash: cNxILQXB6Mynw64tQNRAKKJy7J8sm0Mm5cAcElFdefE=)
2: EJ3x2IdwfHH3UH5syh_4ZfSWYxA.roa (hash: MlUbpIDVvfA4UHQUJSKo2vmPPZS7Hen8jUTVtn35kQ8=)
3: HV5FOEiZp7NQ8X1h7iy1X9p--3k.roa (hash: EOzdMc3GskmF40wiE+yrzgPDbCivBZJb96Tu2M3IGvc=)
4: kpqcS9iGD3Rpk_iaEfzT0Q1dgkM.roa (hash: tIu+noXL+FL6T6WamJRVDXq32TLBt1UuchPxTpkYd9s=)
5: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: /Aruo3kjXFvhAUxYclnlcor2cEJeYZ2O2O3jCRBhai8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:50:25:dc:58:a5:c2:21:82:7a:a0:24:48:d7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Sep 10 15:01:13 2026 GMT
Not After : Sep 11 15:01:13 2026 GMT
Subject: CN=39989d2eba85d4fc906d2cddf3d4307f7f60fe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:cb:c2:2f:3e:ca:61:ba:d2:8c:52:4f:0c:
10:c7:bf:2c:5e:0a:80:17:54:fc:6d:f3:bb:4b:ff:
55:f0:d7:a3:12:68:24:80:f0:92:c5:12:3b:83:fa:
bb:0b:b6:04:e1:e5:df:3a:fc:24:4f:da:38:94:76:
2f:ff:b9:8c:45:33:83:82:f3:6a:b4:17:3a:29:e2:
76:4d:8d:36:52:87:82:87:ad:41:19:a6:ec:8f:25:
5a:58:7b:9f:2b:18:5a:83:06:b2:9c:9d:07:f9:1c:
a9:8b:a6:d3:a9:f5:e7:ae:6d:1d:05:c7:9e:68:2d:
b2:b6:1e:fb:fd:40:a3:31:51:28:19:b3:6d:fa:90:
cc:bb:a9:19:e4:f0:3b:30:46:a5:d7:97:c3:4f:28:
a1:2d:80:1e:c7:fb:25:ec:ef:e0:95:d5:87:a4:30:
6a:89:00:05:59:7b:78:56:80:f3:91:6a:1b:8a:25:
e5:48:d9:93:32:e2:6b:01:27:9b:b4:5e:3e:56:77:
a3:fb:01:02:e9:5d:97:6d:49:40:30:80:2f:df:81:
10:76:d6:43:b5:74:53:99:1e:28:13:2d:3b:d9:0e:
33:f2:e2:b9:5c:1a:b3:00:84:cb:c8:c4:fc:36:5e:
d8:fa:25:41:25:39:f5:63:7c:9c:a8:0f:07:57:a8:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:98:9D:2E:BA:85:D4:FC:90:6D:2C:DD:F3:D4:30:7F:7F:60:FE:52
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d8:a6:95:9e:14:d3:34:e7:d8:3d:4c:73:62:4b:ac:fd:5b:
e1:9b:4a:c9:cd:89:30:80:0e:82:bd:36:d3:e4:2b:3a:bd:94:
b5:eb:7d:a4:54:48:5a:d6:e4:a5:08:37:cb:80:9f:20:b6:b5:
d2:e3:9d:59:d4:eb:8b:75:b7:10:0d:91:3e:98:cb:d9:ef:24:
f4:dc:dd:a7:c2:d7:f3:d9:a6:fa:1b:47:c4:42:de:72:ee:6a:
dd:96:0b:bc:cc:50:d0:6d:b6:a3:6d:e2:c5:e9:dc:61:0c:53:
6c:c2:d9:22:0f:c8:bc:83:45:f7:63:40:5e:89:b5:77:f7:e1:
91:1a:89:1c:6d:b1:c3:74:43:3d:12:0b:0d:cc:67:56:cf:03:
93:9a:b6:d3:dd:53:3c:15:5a:f3:3a:0d:c9:6a:7d:bb:93:bb:
36:1b:91:32:58:3d:5a:96:98:62:61:3e:78:cb:11:e7:8d:91:
06:9f:77:8a:fe:e2:54:6b:33:86:f3:37:0d:5f:04:2f:ee:f2:
5d:22:83:ad:cc:88:be:f4:bf:76:6c:f7:f1:77:e0:c9:16:34:
57:9a:9c:b4:6c:b7:ec:ec:e0:69:41:34:e5:28:0a:cd:cb:82:
82:cb:c8:f0:72:de:b5:92:e7:d9:02:20:2b:b0:be:10:b4:ae:
56:72:d4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:05:50 2026 by rpki-client