Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
File: tHRnMbQxArluui3l04w9zShLj-Y.mft (raw, json)
Hash identifier: wli2BON5Ip9eawS1LIRKukQN9KjSIZpiLT8nD8iotIw=
Subject key identifier: 71:7E:95:4D:09:B7:00:4B:70:9C:09:BB:90:58:EF:E3:FA:E5:EE:83
Authority key identifier: B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
Certificate issuer: /CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Certificate serial: 01A08C438F9534D0A37AC655FF222E79FF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 17:00:32 +0000
Manifest this update: Thu 10 Sep 2026 17:00:32 +0000
Manifest next update: Fri 11 Sep 2026 17:00:32 +0000
Files and hashes: 1: fpHEmukzCf8sEZN1-1ROK3M58Hg.roa (hash: VqNpGMHhla64QbrRVajda2AOnqhRXGh5QpCi8IhSSCc=)
2: tHRnMbQxArluui3l04w9zShLj-Y.crl (hash: K/nYrRGsl+mMzOMtpxuTmrt6zY8ahKKONYZ4SQQR0hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:8f:95:34:d0:a3:7a:c6:55:ff:22:2e:79:ff:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4746731b43102b96eba2de5d38c3dcd284b8fe6
Validity
Not Before: Sep 10 17:00:32 2026 GMT
Not After : Sep 11 17:00:32 2026 GMT
Subject: CN=717e954d09b7004b709c09bb9058efe3fae5ee83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d3:93:19:19:5b:28:7d:0a:9f:6d:73:b1:c5:
81:46:34:b4:56:de:04:b6:71:ca:ed:a4:85:03:c3:
10:da:79:75:f7:be:d5:63:69:ea:af:61:5d:5c:c8:
3d:bc:6f:62:c7:b2:ae:05:96:a7:6a:87:5a:b2:5a:
ea:9f:3d:20:90:e8:02:04:2a:b5:19:07:1a:b5:e7:
79:46:19:8a:46:41:a7:b7:12:08:10:bf:f6:a2:4e:
86:47:29:0b:78:03:c0:60:a2:0f:f7:9c:e5:fe:df:
cf:ab:25:10:ee:8e:50:a7:14:8b:ff:0d:36:1f:33:
66:39:bb:db:55:10:31:72:6d:11:3d:4b:3e:22:8b:
f7:b5:fb:82:25:95:04:9b:e2:d3:f9:77:2d:31:d1:
9e:ac:76:02:ab:a8:77:7b:4b:3c:34:46:ee:5b:c5:
d5:1d:39:4b:f5:00:64:dd:ce:a2:c5:cd:f0:04:14:
0d:dc:56:bb:0c:df:29:ff:be:e2:ae:39:67:cc:b0:
50:fe:25:c5:50:9c:1c:12:90:dd:93:c9:e8:95:92:
c5:95:41:a3:72:a9:d0:9e:24:1c:59:93:16:04:78:
a4:6c:d1:71:60:78:ef:de:ba:af:c7:32:b6:16:b7:
a1:d9:61:7f:2a:03:dd:9a:16:cb:82:5a:40:6a:ed:
4f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:95:4D:09:B7:00:4B:70:9C:09:BB:90:58:EF:E3:FA:E5:EE:83
X509v3 Authority Key Identifier:
keyid:B4:74:67:31:B4:31:02:B9:6E:BA:2D:E5:D3:8C:3D:CD:28:4B:8F:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHRnMbQxArluui3l04w9zShLj-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c4f437-def7-49c7-bf0b-ba06429f42f5/1/tHRnMbQxArluui3l04w9zShLj-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3b:b5:fe:e8:cf:71:b1:ff:c0:1f:5a:74:6a:59:60:24:11:
95:83:dd:18:fc:59:1b:c8:30:f6:39:18:6a:0e:09:31:4e:08:
32:c3:eb:45:a9:41:ce:e8:12:94:32:07:bb:1e:e0:49:35:a8:
71:c7:ec:b5:2e:c7:c6:f2:76:2d:b5:16:44:ff:1d:53:03:89:
5a:5c:50:95:52:4e:82:97:d4:4a:29:15:8d:b2:e3:91:22:7b:
9c:3f:86:fe:9f:76:d4:76:33:c5:c2:99:8d:4a:17:0f:9e:99:
1e:1b:ce:a4:9d:c2:78:1f:af:b9:c8:11:19:95:69:f3:69:f5:
92:f2:7b:e7:c8:ff:af:78:f2:42:9d:ac:75:8e:7f:e5:d3:f7:
dd:46:f2:8b:f2:79:1f:02:fc:a2:09:d2:fa:17:d1:84:e9:ab:
1a:a7:f5:3d:06:01:ea:cf:d9:b1:90:a4:77:81:81:1b:79:f2:
26:d7:23:bb:6c:bf:a0:68:01:86:9d:4a:6a:86:22:ab:9d:c9:
53:63:30:9c:cd:b2:1e:c0:2e:e8:b8:80:09:b3:3e:50:f7:20:
54:a1:31:ba:44:75:af:61:17:a1:d9:37:82:b8:29:d3:ae:05:
e7:49:4f:af:a6:b0:7e:90:1e:53:cb:77:64:9b:d6:45:b6:5d:
3f:9a:4d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:58 2026 by rpki-client