Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json)
Hash identifier: yadGBTXHgiCpS+XRfrltc+Rhwc5LZyD48iSLcdnTnaQ=
Subject key identifier: 1D:75:F9:E0:21:CE:FA:06:74:A8:FD:0A:EA:14:93:C2:7B:C9:33:36
Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Certificate serial: 01A0EC2F41B571CC5CD72DA3FEC6468A6AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 08:01:55 +0000
Manifest this update: Tue 29 Sep 2026 08:01:55 +0000
Manifest next update: Wed 30 Sep 2026 08:01:55 +0000
Files and hashes: 1: A6OsoYIYGh2Z_D1_x4aYKOVS478.roa (hash: R4DsSDCiEh+974EKIZS8RQ1BClrbE9cHjb1aIFSzJGw=)
2: E36OwHqQ6w57Cin5wvtmgpKJp1M.asa (hash: VOikmM+ev8Ka01X1o17ZmNFWB0YN01vxXHPntHlQFIM=)
3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: NXTWWa3K69PbZJGYxS0zTyaehY1H+FMIU4PVHTFUcrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:41:b5:71:cc:5c:d7:2d:a3:fe:c6:46:8a:6a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84
Validity
Not Before: Sep 29 08:01:55 2026 GMT
Not After : Sep 30 08:01:55 2026 GMT
Subject: CN=1d75f9e021cefa0674a8fd0aea1493c27bc93336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:8b:ae:e4:dc:2a:07:b8:64:5c:56:2d:1a:
db:78:13:7e:c0:95:1b:99:19:95:e9:01:1b:dc:54:
0b:33:2d:8f:46:f6:ed:90:c7:c7:4f:e1:fc:3c:3f:
8b:f0:9c:8c:ec:83:4a:df:71:a8:15:5f:c2:79:2c:
d2:09:f6:d0:fe:37:14:c5:3f:93:99:e3:45:ff:56:
2f:ba:f1:0b:3b:90:3a:06:14:5a:69:9b:bb:d0:11:
bb:a1:98:5d:39:59:74:3b:9f:79:47:06:d6:8b:49:
11:58:98:6a:39:4f:03:19:17:99:32:e9:1e:46:bc:
39:d9:2b:c7:98:e7:a0:67:06:58:a6:cb:ab:72:88:
29:1e:e3:2d:fc:93:1e:51:40:b2:e5:15:79:4f:f7:
1e:01:2e:cf:e4:cd:84:01:e6:76:2a:c4:b9:23:e7:
c9:3a:07:5a:ff:56:89:64:8a:b2:57:76:cb:ab:75:
c6:86:21:5e:49:2b:e7:99:ba:2b:d0:fd:a7:0f:23:
db:39:80:b4:a7:58:43:83:eb:e6:60:fa:05:f6:00:
57:4c:a6:c0:bb:8f:13:6d:5e:15:51:ef:78:5c:15:
68:15:e0:18:e5:3d:e9:f8:2c:57:02:cb:bc:24:52:
68:b2:fe:f1:ad:46:75:f5:e0:92:6a:f5:2a:ab:d2:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:F9:E0:21:CE:FA:06:74:A8:FD:0A:EA:14:93:C2:7B:C9:33:36
X509v3 Authority Key Identifier:
keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5f:75:a9:d4:13:e5:14:de:7a:8b:71:37:ed:45:b3:46:68:
a7:06:9b:96:7e:76:40:3d:58:7f:b1:9c:fc:fb:55:91:74:7f:
df:1a:2c:48:20:41:6a:01:f9:df:b9:de:1a:21:00:06:18:3b:
c4:76:09:31:03:1f:2b:cd:20:60:34:db:15:ca:01:a4:96:4f:
9b:75:c7:a1:1d:71:6d:75:68:26:5d:97:b5:b0:60:cc:a7:f6:
2a:37:62:6f:ca:51:40:d8:6d:7f:40:44:4c:e4:a1:58:44:a1:
14:11:15:61:64:2c:04:90:eb:69:bf:7f:8d:fd:41:19:94:fb:
13:a4:2d:f4:51:ad:41:74:cc:10:17:20:b9:82:9e:08:75:8f:
35:6c:fd:01:49:d6:90:14:cf:a5:40:57:d4:21:5d:1d:6b:0e:
03:54:13:b8:20:55:69:c4:9e:bf:9a:e4:78:5d:05:7d:e0:64:
50:8a:b4:1c:d6:c8:3e:0a:0e:7a:c3:16:cd:cf:0f:05:ee:5b:
2f:84:0a:f2:0a:aa:b8:30:53:7c:04:39:fc:25:17:6a:f7:30:
83:ef:08:ea:fb:43:4a:8c:75:b5:ed:0d:1b:68:db:67:55:90:
f0:86:93:35:20:6e:28:b0:47:bf:6a:44:77:13:43:18:4c:22:
c1:d8:2b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:53:25 2026 by rpki-client