Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json)
Hash identifier: oMvj+x9euDvMIWBiB4ih5I1QtkfPu/1Nrr8QbHOr8j4=
Subject key identifier: E3:08:34:34:5E:43:99:3D:CE:23:DF:B6:62:7A:2E:A4:51:5D:A5:0F
Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad
Certificate serial: 01A0B431F208811ECCF7F5AD82FBA5D5B80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
Manifest number: 127F
Signing time: Fri 18 Sep 2026 11:06:07 +0000
Manifest this update: Fri 18 Sep 2026 11:06:07 +0000
Manifest next update: Sat 19 Sep 2026 11:06:07 +0000
Files and hashes: 1: 0W6WQIzjDcN2QynfAKLOrpSzOkM.roa (hash: 4m2Zfu1qr19e5D1S2lHAxMiYJoXvAY42AGwXDavycio=)
2: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=)
3: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=)
4: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=)
5: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: uEEmCU6NlRgUsUkatJuFxmdE8wLKO9TAsrPmB5KfNZE=)
6: d7nZe81qaoCdXSImVltE44ElgDY.roa (hash: Is00mekfqV4fXzJ0gbnS7mGZWvbwZz82PUJow+pkSU8=)
7: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=)
8: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=)
9: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:31:f2:08:81:1e:cc:f7:f5:ad:82:fb:a5:d5:b8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad
Validity
Not Before: Sep 18 11:06:07 2026 GMT
Not After : Sep 19 11:06:07 2026 GMT
Subject: CN=e30834345e43993dce23dfb6627a2ea4515da50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2b:8c:f9:87:25:26:47:0e:80:27:fd:6b:0f:
b6:e3:21:c4:07:b2:df:6b:8c:de:20:26:81:5d:49:
cc:88:1c:6f:e8:7d:cd:6d:8f:08:43:4c:a7:08:63:
a0:1d:c0:5a:28:f6:d3:e0:ef:92:f1:0b:81:64:fd:
b2:ec:98:60:29:fc:c0:f3:00:06:5a:61:d2:19:57:
3e:cb:e7:0e:f1:3d:16:dd:21:25:18:77:b9:89:b3:
4a:5a:74:69:bd:34:26:a6:5c:2e:22:e2:ee:6e:93:
16:e2:01:d7:9e:26:80:36:7d:30:b5:5b:dc:05:8e:
92:51:45:4d:fe:79:04:82:72:76:0f:4e:15:08:80:
ff:a9:23:5e:79:e9:ca:82:0b:5d:1c:69:c9:28:ce:
9c:0c:d3:2d:8b:8f:30:e0:08:52:89:92:1a:36:53:
4f:9f:63:d6:79:7f:79:86:9f:bb:63:48:5c:21:c2:
61:09:d8:6c:3d:29:19:44:50:ff:93:d1:f7:05:be:
13:95:bc:31:05:08:07:f2:a1:d2:61:6a:9c:1f:ff:
21:ba:b7:5f:d0:1a:9c:15:0c:1b:32:99:62:3f:5d:
f0:0b:8f:a4:44:8f:f8:02:58:60:6b:f8:b6:35:66:
b6:b2:e6:76:a4:3e:d9:83:22:ec:96:75:e5:c2:af:
16:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:08:34:34:5E:43:99:3D:CE:23:DF:B6:62:7A:2E:A4:51:5D:A5:0F
X509v3 Authority Key Identifier:
keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:38:78:27:16:45:38:70:69:fc:60:b4:a1:d0:1f:41:cd:43:
7a:58:31:57:d3:39:fe:c3:a8:8a:67:09:5a:4b:f1:20:cc:fc:
bb:de:be:8e:58:ac:c0:96:2e:af:c0:c3:04:0c:cf:1e:bf:5a:
48:e4:b6:c3:bc:57:d8:0b:9a:c3:f5:fb:12:56:3d:73:3a:ae:
fb:c2:83:75:8e:11:54:e5:49:6d:e4:20:61:19:26:61:64:c9:
84:db:88:9c:a0:43:a0:66:fb:39:33:ce:b1:32:80:b2:2b:73:
4d:fc:19:4c:a8:cb:4f:01:3f:5c:18:40:30:2c:42:25:0b:f3:
0e:5b:1e:39:fa:ed:4d:3e:4f:73:09:6b:9a:89:5f:f9:e2:26:
a9:20:7e:bf:8a:8f:49:81:98:01:16:ec:64:8d:c3:b9:60:1a:
3a:32:d4:69:a6:c8:1c:33:b2:f2:cd:f6:32:52:06:31:f3:f4:
56:4e:3e:fb:86:67:a5:2b:54:e6:80:6a:fc:bc:bc:49:0a:86:
b9:87:c9:1a:22:f3:95:f8:cc:ab:2b:22:b9:e0:f9:f2:18:6a:
61:fb:cf:7b:3c:99:8c:33:2a:9e:73:14:d3:dc:08:9b:90:16:
2d:33:43:bd:83:7d:eb:ae:2f:76:99:09:5f:d1:93:bf:68:ab:
cc:c2:7e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 17:07:31 2026 by rpki-client