Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
File: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft (raw, json)
Hash identifier: R3kYNWahVN3MNQKkgGMkk5UvBldB8AKKUjRAgdjtcDU=
Subject key identifier: EB:4E:E3:ED:CD:DF:8A:44:84:BB:6D:31:F2:79:D8:B4:02:AA:A4:34
Authority key identifier: B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
Certificate issuer: /CN=b4dfc03171ad3254380ae51443a3144551e34afa
Certificate serial: 01A12F8F252E5FB91B9567742FE775D13260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
Manifest number: 023F
Signing time: Mon 12 Oct 2026 10:01:12 +0000
Manifest this update: Mon 12 Oct 2026 10:01:12 +0000
Manifest next update: Tue 13 Oct 2026 10:01:12 +0000
Files and hashes: 1: jEu7pwg2-E1mqN2DpjSiLFBgzdU.roa (hash: TORAgDcuiUrJI3uCzvwnsqjEqpo7+K175vdEdYU+bdc=)
2: tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl (hash: HaeZhnMt3vKJ5DrHNbJ195oSaHXSIVJxZMGYcQJnSY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:25:2e:5f:b9:1b:95:67:74:2f:e7:75:d1:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4dfc03171ad3254380ae51443a3144551e34afa
Validity
Not Before: Oct 12 10:01:12 2026 GMT
Not After : Oct 13 10:01:12 2026 GMT
Subject: CN=eb4ee3edcddf8a4484bb6d31f279d8b402aaa434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:88:59:22:35:30:79:bc:64:48:1f:47:14:ff:
a0:e0:2f:1f:41:b3:af:cc:6e:35:d5:c1:38:86:4f:
55:31:ee:19:bf:c2:95:09:d2:7b:12:27:8f:66:86:
c5:b9:c8:25:73:09:86:9d:20:e7:0a:64:88:44:28:
03:ba:60:64:54:34:36:03:af:6a:bf:ef:e8:1b:6c:
be:3d:55:3d:60:4f:89:57:3c:75:cd:a5:3f:70:da:
e9:07:35:52:9b:3b:ba:6c:01:d5:f9:93:28:33:1c:
32:45:0e:37:dd:6d:70:9b:88:17:84:a8:2b:d2:46:
78:26:7c:9d:1f:92:d9:39:26:f8:e8:f4:5d:e9:cf:
cf:03:fc:63:01:24:fb:24:e0:b5:ae:63:de:94:57:
e2:7c:09:df:46:be:20:23:ea:c4:3c:91:af:bf:f8:
51:fd:06:9a:1d:b8:99:c5:af:2f:9c:5f:12:41:a7:
de:56:0f:04:c4:0a:f2:fd:16:9c:c9:f9:0a:51:60:
28:82:79:fc:00:da:f3:a4:1c:15:b8:b2:9f:75:41:
1e:05:0f:c3:04:e4:72:fc:e8:74:86:e8:a0:32:c4:
2e:ed:0f:6a:97:66:ae:cd:f1:08:1e:68:4e:1a:d0:
ea:62:d7:f0:73:07:e7:1c:63:54:bf:fa:87:79:1c:
4e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4E:E3:ED:CD:DF:8A:44:84:BB:6D:31:F2:79:D8:B4:02:AA:A4:34
X509v3 Authority Key Identifier:
keyid:B4:DF:C0:31:71:AD:32:54:38:0A:E5:14:43:A3:14:45:51:E3:4A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/fe902a-023d-43b5-8b14-3f670a0714d9/1/tN_AMXGtMlQ4CuUUQ6MURVHjSvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:61:a1:ea:f6:fe:c4:8c:d9:8b:98:b5:43:e6:0a:64:b1:da:
ce:b1:3a:8f:8b:e7:d1:57:ab:74:ce:58:41:b9:3d:1f:0e:98:
6c:f4:aa:fe:4e:3e:b4:f5:ee:32:97:18:a4:59:24:30:06:78:
f2:e1:34:6c:d4:6f:46:97:c3:c3:ea:13:ba:a5:6a:f9:48:fb:
9f:0b:fb:fb:50:30:49:9a:76:37:1c:3c:4a:cc:d3:eb:64:c3:
3b:c1:f3:34:46:3c:bd:23:8a:52:14:99:7e:0e:51:87:0c:bc:
6a:2f:21:7d:3c:f0:43:58:48:dc:2a:fd:28:5b:16:e6:55:52:
7c:df:7a:4c:d6:e1:70:ef:05:4d:e5:31:8a:d0:d5:dd:c7:5b:
5c:da:ad:f9:bc:3f:c4:20:bd:80:81:ac:48:19:4f:62:09:f5:
e5:ac:10:e8:e6:db:5d:ca:ff:2d:8a:5f:da:5e:28:5b:cf:ca:
96:b6:c6:23:e5:2c:a9:9b:29:a4:99:cc:60:4d:b7:65:88:49:
b7:f2:ed:fb:d5:f0:cc:43:23:04:39:bf:d6:50:79:c2:98:ce:
4f:a6:6e:17:b7:d3:2f:00:8a:f2:d3:04:65:7c:d2:8b:6e:4b:
30:d1:cc:7f:85:0c:17:ee:d9:ac:39:ca:cf:2e:77:53:a5:1a:
0a:7d:3f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:37:49 2026 by rpki-client