Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: ZHrmDdJHNLkIl7v/rSI/qcCwF6cCWUBtzHrAjWpv0Ts=
Subject key identifier: D9:F9:16:51:2A:F0:E3:45:7D:1B:9F:CF:8E:F9:07:D3:AE:C0:8B:2F
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 01A001A5BCC3EA1C57148CB00A4B65929B63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 19:00:34 +0000
Manifest this update: Fri 14 Aug 2026 19:00:34 +0000
Manifest next update: Sat 15 Aug 2026 19:00:34 +0000
Files and hashes: 1: gn4_joE3Kg7Iuvtn8_CsNV3N_rY.roa (hash: inZ7mhN1iTFUjJSaH+6rFZpFzgOqpsU8gKqes5JxewU=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: IgKe4bvLrGwxA+9MvX8SH3RKNpHMXP73Q5Gg1/luRIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:bc:c3:ea:1c:57:14:8c:b0:0a:4b:65:92:9b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Aug 14 19:00:34 2026 GMT
Not After : Aug 15 19:00:34 2026 GMT
Subject: CN=d9f916512af0e3457d1b9fcf8ef907d3aec08b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:a9:7b:70:37:32:d5:00:fa:61:36:65:2c:
db:69:fe:3d:82:72:30:45:e4:99:1e:8c:88:22:c4:
a4:5f:32:ef:de:b0:73:6b:77:5a:ff:e7:ba:4e:bb:
8d:29:d4:5b:2d:c5:cf:20:1d:19:a3:e1:bb:bd:ec:
bf:81:62:8b:49:8a:6f:1d:ed:e4:1a:54:11:5f:55:
e9:4e:3e:2b:f7:9b:c6:9e:cf:76:ea:d9:22:80:0d:
1e:70:fa:ad:b4:9f:22:90:1a:6b:52:8e:6f:ec:6d:
6a:ad:6c:05:30:f4:33:0d:5e:c3:53:04:66:a7:70:
0e:1e:7b:e3:c8:f4:26:28:8b:e9:8d:45:cc:ef:07:
b8:d5:8a:8e:ca:6e:2a:e7:26:08:65:19:c2:11:d7:
c1:57:35:69:ac:44:96:f6:c0:ea:47:7a:6e:47:ec:
d1:7a:e5:4d:ea:c3:d8:3b:93:18:36:df:e8:b6:5a:
23:df:2d:61:9e:12:02:66:8c:6c:84:cb:61:8a:fd:
d8:71:dc:fc:19:b5:bd:7d:98:a3:74:08:69:31:9f:
0c:35:f4:cd:43:ee:1f:d1:64:02:06:a8:20:2d:92:
23:ee:56:9d:c4:bf:94:b0:e5:1a:02:10:e0:a2:93:
f2:2f:af:98:0f:3e:20:25:87:7f:2d:6d:01:50:d9:
85:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F9:16:51:2A:F0:E3:45:7D:1B:9F:CF:8E:F9:07:D3:AE:C0:8B:2F
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f5:eb:2f:d6:75:ed:73:7d:fd:38:7e:b3:ab:41:59:f9:1e:
83:b9:1c:09:2f:e1:e6:df:35:d5:e1:49:16:24:bc:2e:81:51:
27:66:c3:4f:e3:b1:5e:9e:d4:d1:ac:3c:1d:6e:6c:cf:0a:86:
8d:5e:9e:4e:9e:5d:57:86:e0:d4:2b:2f:17:a3:67:59:b7:eb:
e4:57:96:86:44:2a:7b:94:09:e2:d8:54:21:99:85:b4:54:be:
d8:72:e1:ae:b4:49:0c:e4:2c:60:1b:8c:4a:62:98:4e:3e:06:
a1:43:7c:38:ed:ca:45:ef:f1:db:6e:de:c5:39:fe:16:07:18:
5c:ee:d8:46:d1:e7:ce:a5:29:5f:ed:d7:bf:02:7d:48:44:24:
03:c4:c2:8e:27:57:25:07:1a:3e:f5:65:79:7e:44:ad:8c:de:
3c:df:a8:b5:8d:2f:a6:ec:c9:94:91:e9:38:d6:39:db:3c:c2:
6a:c3:93:d7:cf:a9:b8:61:d2:24:e1:f8:ea:e1:ca:48:b3:d4:
c8:90:d2:a2:53:9b:55:52:60:47:3e:e4:e3:be:e3:45:48:46:
fa:64:40:d8:47:b3:0e:71:63:f2:f4:f7:2f:5d:95:db:c7:f9:
40:f5:f5:28:c7:53:3a:1b:0c:2f:09:11:fc:c2:2a:49:b1:76:
98:09:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:04 2026 by rpki-client