
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: xxUBaU2FwUYxsqCWHEUrQiaouxNbh1aSr7uKfQQNnik=
Subject key identifier: 04:07:F9:A1:BD:1A:C8:DE:E4:FE:5D:6E:D5:79:BD:F4:4F:48:96:BE
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01A06E027577D90C1274F4AB084F9C16E19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0B10
Signing time: Fri 04 Sep 2026 20:00:49 +0000
Manifest this update: Fri 04 Sep 2026 20:00:49 +0000
Manifest next update: Sat 05 Sep 2026 20:00:49 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: unUtsqSv4Y7wDCWdLQE/fJhfUYAtrHxiLOteT7ldhfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:75:77:d9:0c:12:74:f4:ab:08:4f:9c:16:e1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Sep 4 20:00:49 2026 GMT
Not After : Sep 5 20:00:49 2026 GMT
Subject: CN=0407f9a1bd1ac8dee4fe5d6ed579bdf44f4896be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:2c:19:37:27:42:4e:c1:73:f7:94:78:76:
67:ad:5e:3b:ac:e4:a6:5c:bd:c4:94:f8:67:51:dd:
3b:aa:35:02:2d:11:42:f7:87:6c:74:c6:73:bf:db:
99:bb:60:2f:9a:1f:db:ea:a5:b1:ad:b9:88:03:ac:
0d:62:33:d5:6b:b9:53:75:ab:6b:76:2f:b0:b6:35:
d0:15:60:a1:00:72:50:a8:24:d6:51:a8:09:70:0c:
d8:05:e3:74:ab:2d:4f:9c:4e:41:70:75:6b:fb:e3:
2e:88:bc:33:a2:71:db:00:cb:97:5e:de:e4:1b:7b:
08:13:f2:b5:25:4c:1d:e5:79:a5:a6:a1:b6:33:ec:
78:ea:5f:d6:6e:cd:4e:a0:fb:70:b9:bd:a6:87:e4:
d7:b6:80:fe:e8:18:3a:75:5d:d3:96:a1:1b:cf:02:
f7:87:ac:db:67:04:f4:f1:ae:08:f0:7e:65:a6:bc:
8b:d2:1b:bd:0b:2d:13:43:84:be:ff:05:6d:cb:56:
fd:3d:02:4c:64:19:1c:77:f7:05:8c:4b:35:59:ba:
55:6a:a2:66:7f:87:0b:5b:21:e7:90:d7:a9:6e:ae:
b6:3d:6d:0f:ba:c5:3c:c1:27:db:22:a0:05:5f:36:
f7:29:2e:07:59:b1:6a:d3:11:03:a9:af:98:62:55:
d9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:07:F9:A1:BD:1A:C8:DE:E4:FE:5D:6E:D5:79:BD:F4:4F:48:96:BE
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:97:4c:8e:06:d9:f2:96:e3:9d:ae:74:9b:18:e3:24:01:1b:
3b:61:58:ce:c5:bd:94:ee:99:8a:5b:0c:e4:21:8f:98:a5:40:
34:84:20:02:78:a9:b1:6a:89:cb:79:5a:49:72:51:1a:70:0f:
ea:90:56:ee:b7:d1:5c:25:ef:fd:96:92:91:a3:74:00:f2:90:
26:23:d2:fc:27:e2:d7:80:64:19:10:5d:45:7c:f0:48:11:2e:
98:17:c9:2d:3f:e2:d6:01:80:f2:92:1a:ee:8d:f0:e7:f1:0a:
90:54:14:ea:f9:54:5d:b6:3e:1c:31:87:78:87:c2:ec:e9:6a:
0c:ef:a5:db:1e:26:60:df:98:5c:a1:b7:20:b0:59:7c:57:1a:
0e:41:6c:09:8d:bc:f1:bf:11:10:3b:cf:b2:29:ef:9d:00:82:
fc:24:6d:93:53:a9:fc:5b:b8:97:5b:1d:0c:45:a6:7b:58:e2:
a5:09:02:8c:c2:b7:71:7d:7b:de:cb:44:af:29:c5:e5:12:ec:
42:54:ac:e5:c5:15:84:f2:92:80:27:33:15:a6:c8:79:85:fc:
95:f6:d7:6e:ba:b3:a0:59:6f:33:bc:51:10:f8:69:d6:92:2c:
78:32:8c:c4:4c:25:69:04:26:be:e9:bc:d9:f4:b1:b7:28:34:
50:b0:53:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:14:58 2026 by rpki-client