Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: 8bFe3Qk83yKukr3uk4LDR9vrnWFL9z2RE2Fytle0xV0=
Subject key identifier: 37:E9:85:34:78:9E:FF:76:6C:94:1C:93:2E:6A:6F:39:01:CD:23:13
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01A17E4EF911B98A3AF65C5267E11C9799F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0B9D
Signing time: Tue 27 Oct 2026 17:01:07 +0000
Manifest this update: Tue 27 Oct 2026 17:01:07 +0000
Manifest next update: Wed 28 Oct 2026 17:01:07 +0000
Files and hashes: 1: pf4imHRU2e6GfZe8rQKhzIc5LBg.roa (hash: dsJgVjGxo4nm0IH9s2QS1ktYyvlCS7K764cL/mH8BNg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: d3v4RJf4sQYUmhxg5o7zQ0fhBNxCNdQFNg2htnqbZyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4e:f9:11:b9:8a:3a:f6:5c:52:67:e1:1c:97:99:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Oct 27 17:01:07 2026 GMT
Not After : Oct 28 17:01:07 2026 GMT
Subject: CN=37e98534789eff766c941c932e6a6f3901cd2313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:52:72:f6:c2:a8:a0:c1:96:93:42:b2:3a:
85:10:c3:85:93:56:82:13:58:20:93:c7:1c:5d:dc:
91:d7:7f:96:1d:a1:41:f4:01:30:f6:c8:b6:ca:9b:
8c:58:c1:fb:5b:3c:73:32:c4:93:bc:a4:f6:65:1d:
32:fa:da:3f:bc:af:03:53:40:7c:32:8e:7f:a4:e8:
ad:3d:41:98:34:f3:16:b6:51:52:ff:92:1d:fa:d4:
a1:74:18:98:04:4b:18:2f:4b:02:23:25:ff:f0:b6:
30:90:0f:30:14:aa:2b:da:a7:73:34:1b:a5:49:8b:
54:2d:52:8d:1d:36:9d:74:d2:30:43:cc:56:eb:bd:
d7:fd:65:bb:b5:d0:c7:1f:80:b6:e8:fb:7c:da:07:
ff:0f:3d:7e:a6:be:69:a6:a9:78:58:8d:b9:b2:57:
c1:db:cd:57:3d:a7:bb:0f:9e:e9:6e:b8:4b:94:75:
8a:62:8d:e8:50:ad:cf:3c:9e:e1:60:86:ee:a7:76:
b3:14:64:9e:aa:a5:16:e1:6e:3e:f7:72:01:5e:4f:
87:16:c2:fb:f8:67:43:8b:01:6e:7f:f9:16:c1:45:
58:a1:f7:83:d6:95:32:d6:64:08:41:cd:9b:93:3d:
6d:fe:37:ec:43:29:52:8b:7c:7a:55:d1:58:7e:f0:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E9:85:34:78:9E:FF:76:6C:94:1C:93:2E:6A:6F:39:01:CD:23:13
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2e:24:82:39:7b:49:01:d7:60:a1:05:e0:95:0e:9c:6d:3a:
96:4d:2f:0e:78:4c:00:d6:30:da:1e:98:65:3c:30:b7:0e:f1:
8c:01:f0:43:86:30:35:73:6d:9b:40:a9:d0:7a:8d:e5:89:13:
dd:74:6e:79:b9:05:90:3a:dd:ac:51:aa:b1:a5:9b:86:3b:97:
ad:a7:32:46:02:59:6c:02:a2:3a:2f:ac:ef:1b:56:da:72:92:
4e:09:76:ec:98:ce:f7:7e:28:7d:ea:08:b1:6d:eb:72:c3:0c:
c6:11:67:59:12:92:81:9c:2f:a4:b0:13:2a:93:40:36:84:a9:
87:11:5c:5c:3e:4f:a9:3c:52:60:7d:46:a5:2e:1d:b9:02:8c:
df:01:1a:e0:1b:57:66:62:7a:e1:f4:12:7f:5c:77:6a:7d:73:
74:64:17:08:7f:39:76:a6:67:53:29:23:b5:a4:70:e6:46:1e:
3a:a1:1b:a7:fa:a4:3e:b4:2d:14:4e:d6:78:84:a2:f6:da:c2:
e4:53:9b:9d:08:ba:72:ac:26:04:a6:ef:db:39:7b:62:13:0a:
d2:2d:08:b2:6c:29:07:3a:9d:8f:b7:04:8c:e4:64:a7:6e:88:
03:21:88:bf:e2:a0:1a:be:a5:42:be:1c:bf:8f:c7:dc:0b:7f:
a2:a7:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:31:13 2026 by rpki-client