Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
File: tEH8gb4caZv_xFKL3JyTMwElo20.mft (raw, json)
Hash identifier: Igd3O6NJaKX4LViMP/DNFkHy7UoCW3hu/+PM1FglkLQ=
Subject key identifier: 08:B3:D8:72:6C:02:56:62:75:FD:8F:7E:81:87:18:24:EB:E1:6C:FC
Authority key identifier: B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
Certificate issuer: /CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Certificate serial: 01A11B634CB849E508D4C801CD18641475C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
Manifest number: 010C
Signing time: Thu 08 Oct 2026 12:00:54 +0000
Manifest this update: Thu 08 Oct 2026 12:00:54 +0000
Manifest next update: Fri 09 Oct 2026 12:00:54 +0000
Files and hashes: 1: tEH8gb4caZv_xFKL3JyTMwElo20.crl (hash: bSZRcxIGFBSW7YNGgP/asRG4+axzRF9FLleSu/dUK8Y=)
2: yyonxWMV91Z2Iy_izhRbZlfmQz8.roa (hash: U35LAOz/goOJLZMkOqSlfS1X+wiK+fXvB4Ca7DHTgOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:4c:b8:49:e5:08:d4:c8:01:cd:18:64:14:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b441fc81be1c699bffc4528bdc9c93330125a36d
Validity
Not Before: Oct 8 12:00:54 2026 GMT
Not After : Oct 9 12:00:54 2026 GMT
Subject: CN=08b3d8726c02566275fd8f7e81871824ebe16cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cf:48:5b:62:b9:3a:03:f4:d2:5d:a1:9e:d6:
c9:74:03:f9:6d:0e:2f:9d:3f:26:e1:fe:5f:1a:07:
ea:ad:40:58:cd:1f:f2:20:4a:ba:02:95:3e:49:ab:
eb:e0:0d:e8:60:ab:55:b2:71:e4:72:43:53:52:2a:
16:30:bc:e8:96:7b:2a:f7:0f:45:87:aa:4e:bd:4e:
fc:a1:18:f5:c9:48:87:37:10:58:8f:43:60:01:e8:
78:b3:4a:2f:a3:79:9c:34:09:39:00:78:39:3b:36:
96:b6:9b:23:46:73:2e:7e:2a:b0:03:cf:05:d1:fe:
e3:58:91:13:2d:db:8d:8f:61:fe:70:ba:81:e0:77:
91:83:1a:15:e5:b4:df:98:ac:2c:1a:e1:3b:c7:a2:
eb:9e:ee:14:ba:62:67:c4:4d:df:f1:92:ee:60:61:
f4:90:6a:2d:9e:20:be:23:f2:49:4a:7a:a5:50:f0:
ba:c3:02:8a:09:35:06:16:e4:e3:a0:57:a5:ee:b8:
2c:36:c9:d4:46:a5:6e:61:bf:2e:64:33:a9:56:6b:
f5:13:7c:75:96:42:37:b5:f4:9a:8b:ee:c6:71:01:
67:e3:ca:7d:3b:58:cf:bc:06:50:78:71:2c:fa:be:
4a:89:80:f4:d3:20:ff:93:b2:71:30:72:5e:fd:d9:
01:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B3:D8:72:6C:02:56:62:75:FD:8F:7E:81:87:18:24:EB:E1:6C:FC
X509v3 Authority Key Identifier:
keyid:B4:41:FC:81:BE:1C:69:9B:FF:C4:52:8B:DC:9C:93:33:01:25:A3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEH8gb4caZv_xFKL3JyTMwElo20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/tEH8gb4caZv_xFKL3JyTMwElo20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:20:05:b4:86:d8:0d:11:be:31:6f:7b:76:53:3c:24:cb:
65:68:95:71:69:ef:80:4e:18:6d:56:e2:ff:42:30:1b:7a:a1:
e1:e7:e8:12:2a:e3:ad:3b:8f:18:36:4e:32:2b:cf:1b:65:4d:
db:eb:75:b0:5d:47:65:80:65:50:c4:b3:43:e3:ed:4f:c6:9e:
50:72:8f:70:82:28:3a:51:6c:c0:57:9a:47:6c:9e:9e:88:a8:
c2:4c:a2:d8:ad:25:e7:a8:f7:fa:8a:1e:56:67:24:4d:f4:78:
5d:ba:af:01:01:b0:d1:68:c2:0e:af:a8:87:ba:38:03:0e:dc:
df:6e:ef:5e:fd:d7:ca:bf:35:b4:6d:f4:4a:3f:84:33:aa:f5:
d0:db:0d:99:91:41:10:89:23:e5:0e:ab:89:3a:75:42:49:9f:
27:ba:36:4a:af:c2:c4:0d:72:84:45:cc:fa:ca:c1:83:34:e3:
67:95:b4:aa:98:cd:e6:48:1e:a7:4b:91:b0:cc:ac:0f:21:ca:
77:93:ab:f5:75:c1:98:d5:80:3c:8f:6c:77:58:2a:17:1a:6c:
7a:10:8a:bf:fd:58:8f:07:3f:60:b1:cb:81:04:bb:e1:66:fc:
f5:e9:ba:c2:25:ea:b7:9d:0d:7c:ec:1b:56:21:a8:aa:01:93:
7e:45:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:26:09 2026 by rpki-client