Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: 9cFo4Io9Iiv1+yB6QJfpTptQAQwO3h6rhprF0bFgnDM=
Subject key identifier: FB:FD:35:99:3F:06:85:70:6F:20:1E:00:0D:41:DE:D5:C8:36:D0:2C
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 01A13C6E8291CC27E3FFF1030FB707831216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 1AA7
Signing time: Wed 14 Oct 2026 22:00:37 +0000
Manifest this update: Wed 14 Oct 2026 22:00:37 +0000
Manifest next update: Thu 15 Oct 2026 22:00:37 +0000
Files and hashes: 1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: WgqjOSswY6yog8omgQ9iFkBV7tLuqr05JjFrBknnkV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:82:91:cc:27:e3:ff:f1:03:0f:b7:07:83:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Oct 14 22:00:37 2026 GMT
Not After : Oct 15 22:00:37 2026 GMT
Subject: CN=fbfd35993f0685706f201e000d41ded5c836d02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3f:e6:cc:6d:80:dc:e6:06:51:32:c2:c7:27:
75:5c:e0:d1:1c:0f:6d:34:36:bc:af:b5:53:0d:7d:
ff:fe:c4:0c:0e:8a:d2:a1:26:d6:b3:7a:85:f5:6a:
23:59:c4:e9:5f:2c:c2:c5:b5:3c:23:c7:db:1b:80:
dc:4f:69:cf:4e:35:4d:83:09:9e:a5:6c:9b:02:3e:
fd:29:e5:46:d0:f3:09:35:dd:de:97:1d:b6:32:95:
bf:30:e2:66:c0:52:21:a4:41:3c:8e:5c:f0:86:a0:
59:91:6a:8c:0f:62:f8:a6:37:d5:61:06:65:a3:64:
58:c2:65:ca:71:cf:69:a2:c5:86:46:61:13:4e:c4:
21:c5:0a:87:46:27:1f:b9:26:59:09:1a:72:22:a1:
af:92:b7:da:38:1e:a0:af:5f:bd:b1:0c:9a:96:0b:
c8:51:27:80:20:e7:d8:0f:d0:18:82:1d:da:57:e7:
d7:86:1b:bb:ec:4b:8c:5e:8e:89:2d:5d:5e:1a:1a:
95:1d:c5:4d:3c:47:0d:0f:62:b5:e8:0f:a3:19:fd:
a4:78:ed:63:ce:87:b7:b7:95:55:98:7b:38:ad:63:
d9:0a:3b:bc:a6:af:a1:91:19:79:d7:17:ac:75:d6:
88:0f:31:c5:46:4f:49:ba:a3:09:98:c5:b5:67:d8:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:35:99:3F:06:85:70:6F:20:1E:00:0D:41:DE:D5:C8:36:D0:2C
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a7:be:c1:97:8d:38:49:91:fb:30:03:fc:10:03:5d:c8:bc:
05:ce:83:2c:f7:9d:19:7b:68:d2:55:ef:8a:b7:50:99:16:54:
2a:2d:fd:3d:86:2d:9c:ef:2b:f4:8b:09:dc:b3:64:75:77:5e:
0f:d0:54:48:27:9a:80:0e:53:fd:70:a7:ee:2e:51:ad:ae:dc:
2f:ea:f4:06:a1:a4:5e:00:db:59:e5:22:c3:df:81:9f:55:b4:
10:02:94:f9:dd:e7:55:84:1e:f7:1a:73:fe:9c:95:45:61:4d:
3a:8d:13:f2:ec:8c:9c:5f:83:9e:4f:14:c2:38:b9:2d:8c:d7:
dd:48:89:32:21:9f:f4:d8:69:2f:bf:8b:2c:f8:e4:62:ac:00:
95:7f:d4:1e:da:c6:a4:ef:3c:af:cb:20:9e:65:f1:68:95:e2:
d4:f3:9f:0e:c8:89:0b:69:dd:e3:30:a6:70:eb:9e:1f:8a:1d:
20:e1:e4:60:aa:aa:6b:84:76:12:08:2f:ec:0b:19:e4:42:2d:
09:f8:72:cc:1e:d0:2f:d0:c0:83:eb:7c:83:72:d1:2d:18:96:
85:78:d6:8c:d6:f2:1b:93:b8:ea:fd:35:8a:20:fa:36:4f:9d:
46:54:24:2b:56:e4:87:61:8a:f4:65:27:ed:02:aa:f3:1c:4b:
49:fb:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:27:57 2026 by rpki-client