Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
File: tKOwBTZrDhDVAulBSQHNhPri3JU.mft (raw, json)
Hash identifier: hLRE+gTECHSC7CeaWttdlMdyxBDy/6yohTO5D8zVoW0=
Subject key identifier: 74:B2:7B:A7:65:1E:6E:CC:9C:73:83:2E:F0:11:3D:08:BD:15:E6:0E
Authority key identifier: B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
Certificate issuer: /CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Certificate serial: 01A08D8DD7453B23F74A16AD1F6ABE66C378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
Manifest number: 02E0
Signing time: Thu 10 Sep 2026 23:01:17 +0000
Manifest this update: Thu 10 Sep 2026 23:01:17 +0000
Manifest next update: Fri 11 Sep 2026 23:01:17 +0000
Files and hashes: 1: 6ZCReiMt-9O5qTlHfdRp0QA32Z4.asa (hash: bKgoE+JkmS262GXXwRqyLtBEgk05ptq2r34ReJuCtP0=)
2: Rh-ZUnz6j4kgwPiltUC2WNESJv8.roa (hash: KaJ3DV/t9W6woGLoKmszOfnkxPqXiwxsukUttzUDmPU=)
3: tKOwBTZrDhDVAulBSQHNhPri3JU.crl (hash: xGxYwUQzzGbbDicRLb7fLkL35OUD6LwH5YBalJw/DcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:d7:45:3b:23:f7:4a:16:ad:1f:6a:be:66:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3b005366b0e10d502e9414901cd84fae2dc95
Validity
Not Before: Sep 10 23:01:17 2026 GMT
Not After : Sep 11 23:01:17 2026 GMT
Subject: CN=74b27ba7651e6ecc9c73832ef0113d08bd15e60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:4f:1a:20:29:ff:ad:b9:f9:20:03:4c:f3:0b:
38:1d:8c:45:37:11:82:28:8a:ee:5f:16:aa:52:53:
5e:07:af:ff:91:97:48:73:ba:27:47:eb:a0:64:0f:
a3:d5:4d:34:a1:95:dd:8d:bd:24:3c:9d:a9:1c:90:
cc:71:0e:41:39:74:a7:d9:9e:74:8e:7d:83:c2:79:
d3:65:71:cb:6d:52:f6:cb:40:93:12:f8:3d:52:07:
94:85:f3:db:da:e4:b9:54:a2:2a:97:c6:35:e3:16:
07:b3:96:35:9b:4a:bf:23:11:2e:62:84:a8:89:99:
95:15:79:17:83:86:14:25:73:73:4a:f8:13:4a:29:
d3:b1:21:84:fa:68:6f:c2:26:43:b6:5e:06:51:6f:
b8:97:a6:81:98:cc:b8:57:88:07:9f:42:93:1f:85:
14:7f:bc:3d:8e:a5:e7:94:41:00:43:83:83:ab:a9:
6b:a5:c7:65:05:f7:82:69:8f:43:2a:b4:8f:70:cc:
92:60:6c:60:13:b4:00:57:05:fd:f4:b3:3c:40:8d:
59:16:e0:c3:36:df:12:6c:f1:83:0a:9c:72:44:f6:
db:f7:13:26:ae:21:61:99:af:fb:e6:e2:89:73:60:
15:7e:28:38:bd:f3:f1:f3:ee:a7:7d:e0:b7:c3:a4:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:7B:A7:65:1E:6E:CC:9C:73:83:2E:F0:11:3D:08:BD:15:E6:0E
X509v3 Authority Key Identifier:
keyid:B4:A3:B0:05:36:6B:0E:10:D5:02:E9:41:49:01:CD:84:FA:E2:DC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOwBTZrDhDVAulBSQHNhPri3JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2ba72-a892-426d-aec9-a1575f91f83b/1/tKOwBTZrDhDVAulBSQHNhPri3JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:da:ac:32:d6:21:c2:0e:bf:ae:c3:e7:b9:70:2f:3c:a4:35:
fd:60:27:4a:3a:1f:52:65:3e:6d:e5:23:5a:f0:c8:36:c8:a0:
32:e4:c2:02:aa:7d:ab:30:9c:58:22:f1:11:2d:82:4b:e7:04:
f8:51:69:a8:a3:43:71:25:d2:ad:3a:e0:a2:ed:b5:83:da:18:
06:2b:39:ee:19:92:14:be:d0:4b:84:7a:26:2f:a0:01:48:37:
35:0f:32:ef:62:a0:b6:0c:f7:e5:7b:71:62:01:90:7b:2d:b8:
cf:19:37:d9:f0:30:36:72:e9:2f:b8:fe:13:7a:9c:3e:64:3d:
25:64:ca:72:37:03:ae:6d:96:d8:22:69:0a:1a:86:c4:25:ce:
cd:6b:15:b8:df:d3:08:a2:7a:54:b4:27:a9:0e:08:23:5e:84:
e7:fa:a4:45:5f:c2:77:43:3a:59:97:d4:61:88:87:70:49:47:
ce:ab:a6:4c:1a:a4:37:47:59:9c:f0:7e:81:6c:f7:80:0a:6c:
82:82:93:92:64:18:7e:b1:87:60:6d:0f:3c:4f:d0:89:38:31:
e7:cb:34:67:bc:4b:7b:23:a2:a7:e3:a8:bb:51:84:81:03:8c:
09:ab:16:5e:fb:cc:48:ea:73:1d:b5:68:1f:9c:69:eb:3a:fe:
50:cd:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:25 2026 by rpki-client