Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
File: tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft (raw, json)
Hash identifier: clKpZuVWRWR+PPgqqWOB/KazqLyCoZdI6G9aSLwu7EY=
Subject key identifier: 40:71:60:08:CD:58:62:8C:4B:1A:92:41:68:89:7D:C6:44:2D:DA:CA
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 01A16B6CD8A50344AE7B786E5F4B0DC75AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
Manifest number: 1A4A
Signing time: Sat 24 Oct 2026 01:00:57 +0000
Manifest this update: Sat 24 Oct 2026 01:00:57 +0000
Manifest next update: Sun 25 Oct 2026 01:00:57 +0000
Files and hashes: 1: qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa (hash: h7mzOdGL4lo+Kqx9x5P2yddSOacnumyUrjBXBH0gi30=)
2: tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl (hash: OapHmiSqT/lVh31m4SwENdUgIHDtrb2xQkc0ov3AOXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:d8:a5:03:44:ae:7b:78:6e:5f:4b:0d:c7:5a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: Oct 24 01:00:57 2026 GMT
Not After : Oct 25 01:00:57 2026 GMT
Subject: CN=40716008cd58628c4b1a924168897dc6442ddaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:05:36:b2:3d:76:81:f9:3d:e4:f4:21:d8:
74:8d:b1:20:43:9f:82:7a:9c:26:e1:6d:95:a7:f1:
36:32:f4:29:f1:0a:37:bc:c3:e5:d4:04:a3:95:e6:
d6:0d:d3:c7:1c:3f:d9:76:ea:47:1d:63:00:5a:d0:
e5:45:4a:8f:21:08:cd:d7:87:9f:f3:d7:b0:eb:9d:
94:a6:3a:eb:d9:92:2d:9d:66:86:91:bf:aa:9c:3f:
57:52:c9:e5:24:73:78:34:84:57:ca:ed:e3:e2:a3:
89:02:c1:57:8d:3e:06:18:96:07:dc:3c:b9:b6:a6:
24:47:df:83:65:59:2e:8f:9e:1c:b0:77:5a:06:5a:
31:98:4a:b6:1f:e8:90:17:b3:58:eb:ac:04:9a:e5:
bd:96:61:c2:7b:79:7a:c9:8c:3b:8e:29:15:8e:a0:
c0:51:9a:a5:5c:fc:97:63:d5:d3:f5:1e:3d:8f:c0:
9e:7c:63:9c:8c:8a:17:4b:39:7e:75:10:bd:a7:e8:
f4:03:dd:f2:2b:ea:57:8b:b4:82:db:b2:78:cd:f9:
bf:70:ac:7f:2b:9a:b7:ee:e2:b7:8b:28:7a:98:46:
6e:ef:d4:03:c8:27:ad:44:60:f5:ed:a7:e0:a0:21:
28:a0:54:74:57:6e:df:9c:cd:ac:13:cd:71:d8:f7:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:71:60:08:CD:58:62:8C:4B:1A:92:41:68:89:7D:C6:44:2D:DA:CA
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:22:9b:ba:23:9a:9f:4f:2f:70:e1:ee:0c:13:1e:22:cc:27:
74:eb:8b:51:e4:d3:c7:d3:ed:8e:56:ed:10:de:86:4d:76:f4:
72:7c:02:b2:d6:0b:f6:e0:0e:4a:90:af:4c:62:ff:7c:73:d9:
b4:e0:e5:c3:f4:0b:cf:76:71:c9:ed:ac:e9:17:06:ec:a4:a8:
b0:d8:6d:c2:ea:a9:85:25:26:4f:4f:36:0c:4e:ba:57:8a:11:
05:4b:2b:7a:02:2b:43:69:31:08:3f:71:b7:c2:36:86:6d:d6:
a2:b1:22:81:53:53:73:2f:76:40:a5:ad:4e:42:7e:5c:f0:8c:
22:59:3a:cd:ce:13:c3:a8:35:91:cd:51:94:d8:0a:b8:d5:05:
dd:b2:63:1f:6b:0d:43:a6:f5:9d:b4:5c:30:2b:8f:2a:04:95:
9b:a7:a2:8c:15:52:f3:ee:b3:9e:7f:6e:87:d2:eb:a9:ea:d5:
9c:02:86:5d:80:b9:b0:d3:17:98:0b:6e:20:c4:78:5f:30:df:
01:f1:ad:94:54:d4:d1:39:9a:9b:8d:f3:b8:34:d7:22:4f:9a:
65:0b:8c:20:a6:67:c1:b8:05:a7:ab:44:39:7b:8e:cc:1d:9a:
87:6b:1c:91:4e:a8:96:de:7e:4e:79:0f:8e:d3:fc:85:aa:21:
27:70:81:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:21:26 2026 by rpki-client