Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: fDNo5lhTi2rXQCt5ynwx68e4aUE7bjqnrRtdpdAZ81U=
Subject key identifier: 93:AA:A3:44:A6:66:C0:EB:34:6A:CE:DF:A9:74:38:48:31:80:C1:53
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01A17025464E69C627DE232DE6F0C90F4DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1AC2
Signing time: Sat 24 Oct 2026 23:00:53 +0000
Manifest this update: Sat 24 Oct 2026 23:00:53 +0000
Manifest next update: Sun 25 Oct 2026 23:00:53 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: 7M2SeGW+liaUfRWS2/dw0bj0LyyjoJ0OFOx7ADxFxaI=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:25:46:4e:69:c6:27:de:23:2d:e6:f0:c9:0f:4d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Oct 24 23:00:53 2026 GMT
Not After : Oct 25 23:00:53 2026 GMT
Subject: CN=93aaa344a666c0eb346acedfa97438483180c153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:f1:cc:70:ed:78:bd:d9:1f:89:7c:65:a8:
47:f6:54:7d:61:56:3b:84:d4:c7:46:9b:ed:2f:75:
0b:73:e3:45:18:59:02:fd:76:fb:d2:8b:65:38:e9:
99:6b:28:02:06:ac:8a:5f:fa:1a:b1:41:e8:83:c5:
21:3c:fa:bd:69:fd:62:eb:81:96:c4:f5:93:00:95:
da:b2:07:1e:09:78:2e:59:7f:13:ec:13:b3:fc:96:
b4:e5:9f:a6:e7:2b:b4:61:b4:f0:df:4c:64:4c:d6:
26:76:87:36:60:ff:62:16:4c:d6:5d:f4:a6:0d:50:
a0:a1:04:58:fd:41:f1:db:35:27:5f:c8:9e:e3:c9:
2e:56:01:6f:cd:bd:f8:31:9d:7f:5c:2e:26:79:15:
5f:e6:77:f3:4c:45:6b:b1:81:2e:22:eb:7d:1e:46:
a8:7d:c0:c5:3a:8e:07:0d:7a:6a:bd:b8:d7:e2:11:
00:ab:8f:0b:b8:c3:e4:a4:ab:6d:db:8e:68:a1:ee:
0f:03:13:4e:50:b0:c8:0f:a3:4c:d3:3a:fb:d1:38:
a9:20:3a:12:ce:b3:4b:2b:b1:63:80:0a:dd:6f:6e:
47:ad:de:01:88:0f:81:76:94:49:5a:e5:83:57:d4:
12:81:44:45:64:b6:98:7c:1b:92:e0:a5:dc:5d:03:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AA:A3:44:A6:66:C0:EB:34:6A:CE:DF:A9:74:38:48:31:80:C1:53
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a3:72:84:13:b0:8b:b1:29:b3:b1:6c:53:f8:3d:37:7e:35:
fa:32:49:19:de:c2:da:a7:67:82:2d:c8:9c:3d:a7:03:dd:8b:
fd:a7:c9:32:20:75:3d:6e:4a:57:08:12:08:07:78:d3:f0:a8:
09:80:78:97:ff:e0:28:03:47:14:88:04:49:83:ec:9a:5f:97:
36:31:b5:a3:45:05:14:d5:e9:19:ba:76:cb:14:c1:d6:00:9e:
5f:68:a2:73:88:7e:6a:f0:9e:36:32:46:52:f8:02:a3:4e:e2:
d0:63:35:ab:e3:b4:97:b7:ea:2b:54:18:4d:d6:0e:24:8f:4a:
72:ee:f1:3c:3e:0d:1f:d2:5f:64:87:10:93:2d:c8:2d:45:32:
5d:68:b2:5d:65:66:63:08:e6:78:d8:57:a0:e5:4a:14:d4:64:
57:13:a1:1e:d4:5f:48:18:b5:2b:e6:85:20:57:9d:2a:cb:7e:
af:64:18:5e:9f:2b:da:52:ba:6d:81:bf:9b:95:ca:67:a7:f9:
b8:95:74:b7:1b:9a:f9:36:99:c1:b8:e7:2c:a3:f1:e7:1c:b0:
e0:af:44:de:33:28:47:0a:6d:21:f2:0f:04:a5:2d:30:b3:2e:
f3:46:30:e1:0c:e7:13:f0:8f:41:3f:76:e8:6d:e5:72:ff:ef:
9f:bb:b7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:48 2026 by rpki-client