Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
File: tCQBfG4cj_1jly4CRJCYR33fF98.mft (raw, json)
Hash identifier: yapKCnktzR/etLO7GrM4hYt2o98ur5pEVtb2RECdKz8=
Subject key identifier: E6:4B:AF:44:FA:B3:FF:EA:D6:DF:C6:75:B6:82:36:FE:2C:93:78:7C
Authority key identifier: B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
Certificate issuer: /CN=b424017c6e1c8ffd63972e02449098477ddf17df
Certificate serial: 01A10023191F3D8D2FA61BD2D2301729C7FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
Manifest number: 024F
Signing time: Sat 03 Oct 2026 05:01:02 +0000
Manifest this update: Sat 03 Oct 2026 05:01:02 +0000
Manifest next update: Sun 04 Oct 2026 05:01:02 +0000
Files and hashes: 1: Z9tAGQF9StCthIO0Pjcyl0N2xM4.roa (hash: 6AWanwgFbNvMqkMl3YCOopQDUI07IMGf93/6aV4ujtg=)
2: h2S5SOYfIdtYgW2lzny0MQ8S930.asa (hash: rCu8Reo7yVY7Fv0iiMibroZtuw9DHcD5SnkWO03YCtk=)
3: tCQBfG4cj_1jly4CRJCYR33fF98.crl (hash: pzKAW0Jovn/2yxWBaAUXxJJbThbQYBLqtXQugfgiqW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:19:1f:3d:8d:2f:a6:1b:d2:d2:30:17:29:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b424017c6e1c8ffd63972e02449098477ddf17df
Validity
Not Before: Oct 3 05:01:02 2026 GMT
Not After : Oct 4 05:01:02 2026 GMT
Subject: CN=e64baf44fab3ffead6dfc675b68236fe2c93787c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1a:d0:17:29:f8:e2:7e:95:72:f6:8c:1e:b3:
29:0f:9a:31:d1:22:a2:10:ce:74:74:ca:f7:5f:ca:
b5:a5:ac:ca:3b:3b:90:24:37:27:f7:fd:b4:f2:31:
f4:1b:02:4b:e5:04:f4:ed:07:91:7a:f0:23:9c:55:
80:5d:7e:4b:3d:01:ba:07:e8:0c:54:df:2b:a3:2d:
fb:53:e4:36:b9:8f:bc:80:58:5f:cf:82:b8:a7:39:
8e:00:1c:dc:a3:7b:cb:89:76:ba:ea:88:74:61:6a:
50:c0:24:1b:c7:3a:54:80:9f:1a:6c:4e:11:e4:df:
14:62:4a:d9:17:d5:d4:23:60:d7:6f:2c:8b:4a:3d:
93:85:cc:8f:14:20:e8:b7:5c:0b:89:c2:c0:2c:80:
cd:34:75:fe:00:27:98:2e:2f:43:0b:d9:9d:69:c1:
7c:8f:60:35:a3:00:11:07:04:19:ff:25:3f:08:0a:
56:68:33:15:5c:31:62:58:81:63:e8:e8:24:60:9c:
e1:a0:ad:4b:fb:9c:5a:04:1b:40:93:ac:5b:0f:11:
b9:0f:33:bf:f9:50:f5:cb:c7:07:fa:70:46:6e:a1:
30:ab:8c:a3:a2:9f:7b:68:16:fe:0f:30:d0:32:22:
41:13:ba:e7:fd:97:25:90:c3:fd:f5:66:0c:15:6c:
97:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4B:AF:44:FA:B3:FF:EA:D6:DF:C6:75:B6:82:36:FE:2C:93:78:7C
X509v3 Authority Key Identifier:
keyid:B4:24:01:7C:6E:1C:8F:FD:63:97:2E:02:44:90:98:47:7D:DF:17:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCQBfG4cj_1jly4CRJCYR33fF98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/86f38d-8647-413f-a4fe-355f26fca128/1/tCQBfG4cj_1jly4CRJCYR33fF98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:25:e4:61:14:3c:31:80:f7:11:88:5b:10:d4:d7:52:1b:d6:
7b:95:b1:27:d2:d7:12:75:52:40:a4:ba:9d:09:36:ab:3c:53:
b2:80:8d:6b:b9:4d:7a:f4:de:06:a2:31:ba:f4:e1:b4:ca:a9:
28:fd:d9:e2:9b:6e:02:c5:1c:a6:3a:25:5c:17:18:18:3e:56:
d1:e1:c3:24:bc:74:22:3e:15:88:2f:23:ea:58:cc:1b:78:cc:
7b:f2:92:9a:60:09:75:f2:a6:7e:6d:a1:df:6a:09:ca:a6:74:
46:eb:d6:06:ec:6f:60:67:0c:c0:73:89:19:60:1d:88:03:e5:
cb:a3:b0:a8:54:d3:ec:97:8b:db:25:c1:40:fe:61:d9:bd:2d:
96:0b:32:81:62:4a:b2:2e:47:f0:6f:aa:42:21:01:d7:bc:10:
cc:52:6b:04:f3:c9:9d:29:c2:7d:47:bb:9f:48:29:70:b5:75:
7e:ba:c5:c9:f1:bc:be:b0:69:16:a1:f1:7c:12:0c:91:b0:14:
d7:12:e7:a9:a6:76:8f:12:b3:26:d4:75:cf:a5:19:30:d1:6f:
cc:6b:0e:8f:3b:92:9a:32:4a:56:df:4a:e8:ea:e5:5d:03:b3:
a1:86:72:ef:3c:0a:55:f9:77:3d:21:ac:dc:94:c1:35:ca:ef:
36:dc:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:10 2026 by rpki-client