Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: T7fj+hy/OZ6Xx9Ps4kjMufZs1QIkmYWAlen+4UHXIYk=
Subject key identifier: 75:1F:4D:3E:56:A8:77:5D:33:80:31:3F:EB:20:63:3F:A1:2C:B9:EA
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 01A06F4C10FC7DDB6329893B53897AFE84F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 1A3D
Signing time: Sat 05 Sep 2026 02:00:51 +0000
Manifest this update: Sat 05 Sep 2026 02:00:51 +0000
Manifest next update: Sun 06 Sep 2026 02:00:51 +0000
Files and hashes: 1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: g6X0zQt3umIZuoS41r3USDsqEGioxxYrR7vJGTqOxks=)
4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:10:fc:7d:db:63:29:89:3b:53:89:7a:fe:84:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Sep 5 02:00:51 2026 GMT
Not After : Sep 6 02:00:51 2026 GMT
Subject: CN=751f4d3e56a8775d3380313feb20633fa12cb9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d2:1e:9f:fc:ec:f3:5b:e5:30:94:1c:11:76:
2f:56:13:2d:7d:13:99:dd:53:05:c4:e5:4c:f1:83:
6f:6a:56:db:c8:81:5d:4c:c5:99:e9:7d:91:82:d9:
59:e8:9a:ad:91:95:a5:bd:4e:db:1e:cd:f4:88:af:
31:84:23:ee:d0:f1:53:37:09:8e:28:79:5e:22:a9:
c8:0c:89:ef:b1:ab:77:35:94:82:cd:d0:1d:33:e3:
68:20:ae:4e:76:e7:c9:87:f4:0d:5b:a7:eb:ba:a9:
a3:43:9d:60:ad:ce:a6:74:14:9e:b3:5d:27:40:0f:
34:31:d2:4c:a4:61:20:eb:b7:f6:d4:bc:b4:80:e8:
27:ec:4d:47:91:ea:53:2c:6a:a5:2f:ee:ff:67:b5:
87:80:6c:40:21:28:e5:f4:85:c1:5e:8a:b1:8f:5a:
8a:9c:4e:c9:47:5b:c4:29:08:0a:61:74:e2:c4:cf:
33:20:e7:eb:e1:4e:31:d2:00:7e:a0:39:3f:07:d8:
8c:c7:3b:ea:23:9c:5b:b1:74:63:3d:ce:0f:47:0d:
93:24:9e:13:27:c7:ae:96:29:fd:bb:b5:d4:84:ca:
7a:a9:cf:ea:e3:0d:74:ae:a0:73:d4:2d:af:70:ac:
f4:fb:bc:e4:f8:b0:aa:b6:4a:22:55:97:5e:90:1b:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1F:4D:3E:56:A8:77:5D:33:80:31:3F:EB:20:63:3F:A1:2C:B9:EA
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:2e:cd:d6:a7:6f:6c:dd:4c:88:24:4f:fe:88:7c:7c:7b:82:
95:62:ac:68:8a:50:e9:e0:cc:b3:df:c4:95:55:e3:f5:25:19:
68:7a:04:49:9a:2b:5e:8c:7d:4d:c9:3b:b5:88:a2:fa:84:11:
a4:78:a1:39:54:9b:b8:af:9a:96:60:0f:12:cd:17:ef:62:4c:
20:3f:81:42:d2:93:5c:21:4a:f4:24:e2:0f:8e:ed:70:27:62:
b6:6d:71:ae:b5:48:58:80:85:f0:7d:5b:64:15:7b:60:7c:bc:
3e:d3:98:6e:6a:61:34:bb:08:f5:af:42:d1:a2:2c:ba:fe:cc:
1a:b7:70:74:0f:59:97:b3:19:1d:b6:62:eb:ea:4e:fc:e9:28:
d6:53:24:09:e3:ea:4d:df:1a:bd:e7:5f:8a:06:1d:28:aa:08:
ca:f3:b0:71:4f:9e:04:a1:a2:c1:7d:2f:e7:db:18:7e:ba:b2:
33:a0:e0:fa:f1:16:01:32:05:56:60:6e:ce:0d:79:d9:df:03:
fe:c2:d3:99:ec:1b:b8:99:aa:d2:a8:1d:50:28:f6:96:7a:05:
1c:96:e3:c3:08:bb:4a:1c:46:1c:f5:cc:07:e4:88:cf:99:db:
38:00:b2:61:b7:7a:b6:24:da:14:86:da:a1:e8:ec:ba:1e:46:
39:a3:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:17 2026 by rpki-client