Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: g07YUxELtPnS3pAYw6lf6UDwKDvJdkzhrid6p7OB/18=
Subject key identifier: 99:E8:27:8E:DD:7E:5A:26:99:B5:D8:DF:89:CC:D3:8D:13:D0:57:56
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 01A17DAA25A043461BF39684DF178A0C182B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 02DD
Signing time: Tue 27 Oct 2026 14:01:05 +0000
Manifest this update: Tue 27 Oct 2026 14:01:05 +0000
Manifest next update: Wed 28 Oct 2026 14:01:05 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: 9WEWXHZMrUE6AcAIiIX2SQgh5msGlXHdjxN51+7b7LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:25:a0:43:46:1b:f3:96:84:df:17:8a:0c:18:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Oct 27 14:01:05 2026 GMT
Not After : Oct 28 14:01:05 2026 GMT
Subject: CN=99e8278edd7e5a2699b5d8df89ccd38d13d05756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:f0:dd:83:91:2f:bc:26:4d:a5:8f:b4:61:
88:c8:7f:73:33:f4:c6:ae:1a:08:71:48:0e:92:3a:
b6:ad:7d:31:6e:8d:0f:66:c3:55:96:a0:cf:ca:e0:
c0:00:3a:3c:d5:11:d2:ad:35:75:4f:6a:06:b4:0d:
b7:33:e5:63:a7:42:0f:05:de:97:d0:fa:9b:43:5b:
01:6a:86:84:b5:f2:e5:27:50:ae:78:c5:52:91:18:
fb:52:61:38:26:79:d0:c4:08:87:b5:00:14:8a:81:
48:0f:bd:7d:56:a1:17:e6:33:b7:35:81:5c:be:c2:
7b:ea:49:1a:4f:b3:03:3a:1a:44:1c:43:6f:4e:ca:
de:b2:0a:da:94:dc:11:dc:72:28:8a:13:59:c8:b9:
d2:a3:68:42:6d:ae:17:21:1a:ec:b7:90:c4:e7:1d:
54:61:2c:06:52:e3:c3:f6:0f:e4:2c:d3:91:17:08:
1b:91:dc:87:46:8c:75:70:49:5f:22:f1:cf:4e:30:
0a:ff:30:2f:cc:88:5c:66:d5:fd:f0:05:7b:34:e3:
ee:c5:a5:1d:84:07:cd:a4:00:4c:a8:af:13:a8:fc:
7e:03:a8:c9:23:57:3e:f3:e1:d8:be:8c:e9:c0:3f:
5e:af:8c:c8:51:d0:81:bb:3a:a2:4e:30:e8:dc:0d:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E8:27:8E:DD:7E:5A:26:99:B5:D8:DF:89:CC:D3:8D:13:D0:57:56
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:38:ce:8d:3f:19:fa:77:56:52:d3:98:a9:fc:40:97:47:1d:
35:12:2c:fb:31:dc:35:91:3f:84:11:da:f1:23:93:22:56:be:
17:ab:6b:4b:64:3c:4f:49:ee:61:56:20:53:02:94:70:f6:1d:
47:8b:d5:31:ed:75:17:63:f4:f9:34:b7:6b:c8:09:df:62:6f:
34:34:90:7f:74:1d:f5:8e:bf:7c:d8:d7:b8:ca:78:7a:b3:7f:
05:91:85:29:42:10:9d:6f:af:85:8d:ac:f5:75:d5:4d:dd:38:
43:f3:f8:e5:1c:bf:34:aa:e0:97:d6:06:c9:52:17:c9:72:ea:
12:3d:26:6e:62:8d:d0:6d:46:b8:ce:e2:62:09:40:b3:26:f8:
ec:d2:48:96:f7:2f:b1:d0:f6:41:12:0d:06:ae:1b:1b:f6:6a:
4d:ec:ec:a6:6f:5a:0b:46:a3:87:f0:ba:28:47:33:88:1b:4e:
46:a2:37:0e:b0:be:54:b7:24:c9:82:1c:6c:48:d8:71:46:9e:
3f:1c:c6:bf:a1:69:a7:57:8a:83:32:5d:68:3d:fb:6f:a7:fe:
80:97:ec:e6:6c:03:64:1f:5d:58:e0:0f:3b:57:5f:9c:2f:36:
17:5f:f8:0c:56:e2:9d:09:47:dc:63:f5:67:d3:81:11:23:1c:
62:04:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:34:10 2026 by rpki-client