Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.mft
File: tcBczSjAxSfXniY5fjP14VN-4uY.mft (raw, json)
Hash identifier: opQw7pqujS8t6Tsnw51fgvV4m0w6xb/+I9d16nY6rPg=
Subject key identifier: CE:F7:C3:89:F5:E8:7B:24:54:D5:59:14:9C:97:91:D8:91:2B:B1:85
Authority key identifier: B5:C0:5C:CD:28:C0:C5:27:D7:9E:26:39:7E:33:F5:E1:53:7E:E2:E6
Certificate issuer: /CN=b5c05ccd28c0c527d79e26397e33f5e1537ee2e6
Certificate serial: 01A19E47D38AAF9103970D6245854A7143CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcBczSjAxSfXniY5fjP14VN-4uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.mft
Manifest number: 010C
Signing time: Mon 02 Nov 2026 22:01:09 +0000
Manifest this update: Mon 02 Nov 2026 22:01:09 +0000
Manifest next update: Tue 03 Nov 2026 22:01:09 +0000
Files and hashes: 1: q49UFqV_kRX5S0jJcOkpEAXQ20k.roa (hash: jB6UXh2yk562ByJ/7r7rk4TdhNq3RxFY9KwF4yoZi24=)
2: tcBczSjAxSfXniY5fjP14VN-4uY.crl (hash: m7g4Dekp44teZB/n/mWwCLUq35IsmUpQLcarDlIQ7Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcBczSjAxSfXniY5fjP14VN-4uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 14:59:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9e:47:d3:8a:af:91:03:97:0d:62:45:85:4a:71:43:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c05ccd28c0c527d79e26397e33f5e1537ee2e6
Validity
Not Before: Nov 2 22:01:09 2026 GMT
Not After : Nov 3 22:01:09 2026 GMT
Subject: CN=cef7c389f5e87b2454d559149c9791d8912bb185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:c5:24:a1:df:47:fa:8b:9a:c2:a9:b5:d4:
05:41:dc:5a:7e:24:d7:f0:68:0e:9b:9d:b6:61:cc:
4b:5a:5b:b7:d2:aa:7e:2e:d8:11:f1:36:65:b3:6a:
e3:76:c3:a3:24:be:74:d3:d9:44:78:60:a9:a6:25:
88:47:27:1b:56:b5:0f:8f:93:ac:3e:4a:38:17:e9:
d7:c4:c6:cd:95:d9:c7:cd:f9:f1:18:f8:b7:cd:ff:
48:2a:09:17:49:85:c6:f8:37:bd:3c:5c:34:d7:20:
02:25:57:b6:74:ae:92:7d:ce:2a:de:7e:75:62:00:
09:a0:e3:be:06:c2:d3:31:94:96:30:6f:ed:be:2e:
19:17:f7:a9:0d:f3:8e:b3:50:55:ad:7a:57:c1:2b:
ad:48:b0:db:80:6b:fa:b9:3a:25:3d:31:8c:93:64:
e7:fe:3d:fd:96:a7:c3:27:8d:c5:d1:08:1d:76:14:
68:6d:e9:b4:85:8c:9b:f0:86:18:18:ec:7c:0c:44:
52:c8:76:32:7e:2c:20:ee:52:24:6c:9d:1e:64:6e:
c9:32:7c:a8:0a:6d:41:4f:ac:b8:2a:42:d4:b2:72:
47:c4:10:82:25:01:22:90:67:ab:97:ea:b5:93:c4:
6f:26:cf:76:b4:5f:58:e1:52:f5:b9:39:c3:fd:28:
36:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F7:C3:89:F5:E8:7B:24:54:D5:59:14:9C:97:91:D8:91:2B:B1:85
X509v3 Authority Key Identifier:
keyid:B5:C0:5C:CD:28:C0:C5:27:D7:9E:26:39:7E:33:F5:E1:53:7E:E2:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcBczSjAxSfXniY5fjP14VN-4uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:32:c5:bd:5e:70:d8:a8:17:6d:0c:aa:db:76:3c:04:9d:49:
88:f1:78:28:8b:1d:7e:e9:1b:bc:dc:4a:e7:f6:2c:62:31:28:
b8:bf:e9:d4:ea:3a:cc:0b:64:1a:e9:fc:d1:84:3a:ed:1b:70:
51:4b:60:87:c5:a6:e1:af:b4:1c:d9:ec:0c:19:00:96:15:14:
3c:15:50:d6:fe:3b:bb:5c:76:05:12:cf:9d:70:60:dc:68:73:
11:78:6d:b1:6a:66:3f:53:38:e7:7a:60:7c:7b:56:f3:cc:2c:
3b:cf:d2:cd:93:5e:8d:00:3d:fa:81:18:ee:00:d9:31:7c:d4:
d1:f9:b6:17:07:c9:33:c8:09:61:16:a2:c4:e6:e8:67:10:a7:
8e:02:3a:3d:a5:1a:7f:23:52:dd:d7:c4:3f:c2:3b:84:57:fa:
80:cc:22:fa:9f:dd:b3:e0:95:3a:28:e5:57:ae:d9:02:29:e2:
ab:d8:3a:da:de:5f:e2:d3:ff:17:38:44:3d:eb:36:e8:5f:ad:
84:5c:42:7e:a7:d4:a5:db:61:88:43:cc:13:88:60:91:67:d9:
f8:b5:e5:ca:c5:6f:69:52:17:30:10:2f:8e:ff:ff:49:99:eb:
b4:a8:f2:f7:e8:45:36:fd:b2:c8:e1:ff:d9:3b:18:4a:f2:29:
0a:80:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 00:09:20 2026 by rpki-client