Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: YwDZXJD35jXLuGirfk676NO3A2TzJ5C4jTZqQV8+PEc=
Subject key identifier: 21:18:B3:72:2F:08:C6:3F:02:D0:C4:B5:C2:8D:61:62:E4:D5:E1:6D
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 01A057443F2284318121851FEE3D5C353CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 19BB
Signing time: Mon 31 Aug 2026 10:01:25 +0000
Manifest this update: Mon 31 Aug 2026 10:01:25 +0000
Manifest next update: Tue 01 Sep 2026 10:01:25 +0000
Files and hashes: 1: qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa (hash: h7mzOdGL4lo+Kqx9x5P2yddSOacnumyUrjBXBH0gi30=)
2: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: QHOkSQ6eVr+wWm2WVB5bFNWAAEO/ph16RqeVJoLLh84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:44:3f:22:84:31:81:21:85:1f:ee:3d:5c:35:3c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Aug 31 10:01:25 2026 GMT
Not After : Sep 1 10:01:25 2026 GMT
Subject: CN=2118b3722f08c63f02d0c4b5c28d6162e4d5e16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:e7:4b:5e:9e:ef:ea:1a:b1:7c:9f:41:c8:
6e:89:a8:b5:fb:e2:64:44:bc:35:af:1a:5a:35:5e:
65:13:46:9d:46:f2:23:98:38:b9:eb:75:53:07:3a:
05:f4:37:e2:98:49:d7:0c:e4:cb:b8:97:9d:17:d8:
6d:6a:7f:1a:6f:03:db:34:ab:65:19:00:f2:1e:c7:
73:74:ee:a4:1b:ab:54:c5:32:f6:94:91:04:a7:7f:
0c:50:df:c8:58:2c:ed:44:3a:af:aa:15:a8:fc:f6:
f0:ec:24:33:83:81:ec:c5:27:30:e4:33:43:66:93:
eb:b6:96:08:92:fb:3c:36:27:73:ed:ac:b6:21:c5:
ee:41:5c:47:ab:6c:36:d3:60:03:a3:8f:a5:62:91:
df:b0:f6:6c:a9:0d:1f:49:4c:4c:9a:78:8f:e5:79:
2b:d4:01:27:58:7b:d1:f1:18:d1:97:42:38:92:b4:
e7:35:7d:8d:0a:9a:df:27:c4:e1:67:47:c3:c8:bc:
4e:2d:7d:46:d7:c0:eb:00:4a:cd:bd:b9:bd:29:24:
a0:31:f7:7e:8e:83:e3:1f:d1:cc:36:14:ca:ab:1e:
bf:44:ea:77:e7:db:33:46:b6:08:41:ac:ac:fe:e1:
2e:7c:8a:97:d0:81:51:d0:e7:bb:26:11:71:5c:e4:
27:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:B3:72:2F:08:C6:3F:02:D0:C4:B5:C2:8D:61:62:E4:D5:E1:6D
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f2:1d:c2:35:5d:44:8c:7c:7a:64:66:9d:f3:2a:3e:78:ce:
1c:56:76:4a:dd:28:b4:66:21:64:ee:79:94:68:09:e2:16:74:
51:08:ab:d8:f6:81:61:e2:af:c7:15:3c:db:9e:df:43:80:98:
75:88:8b:04:7d:30:bf:b9:c4:bb:ab:79:de:6c:7e:11:2b:d9:
23:d2:49:7d:3e:e9:05:a6:6d:b9:41:12:d2:e3:3c:f0:01:1c:
6f:77:86:09:d0:a6:ee:da:ea:01:8d:a5:ed:49:df:0b:1d:23:
72:67:c8:27:61:3a:c1:55:ac:e5:1b:43:c8:ad:8f:46:ab:5b:
16:7b:1d:65:0f:83:c4:60:12:6e:3b:2f:74:21:8e:79:9f:08:
79:10:b6:90:23:c4:b8:20:7b:da:25:aa:4d:f0:ff:2e:a9:ab:
f1:a8:d2:a5:58:f3:19:4c:5d:82:80:99:ae:6c:f0:41:b2:bc:
31:f0:25:5f:36:3c:3f:59:33:8d:a7:de:08:27:3e:a4:c3:3a:
91:01:90:ec:9d:d5:14:06:3c:42:f5:54:42:c0:b4:e9:a5:29:
d9:1f:ec:1d:2e:ee:77:33:46:a7:f8:e4:cf:a4:e2:76:e2:d6:
38:00:df:11:2c:e3:6c:88:92:25:72:f0:d6:44:74:db:c9:99:
7f:ab:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:58:37 2026 by rpki-client