Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: PXr2UqrrGzoyh6SSfDQxjO52PzaF2HZyldvy3xZ3dmk=
Subject key identifier: FC:DD:CD:B7:BF:D1:09:93:16:2D:F0:8F:76:5D:32:60:F0:6F:76:35
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 01A1186188163F3F0A68866997614E36DB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 169E
Signing time: Wed 07 Oct 2026 22:00:07 +0000
Manifest this update: Wed 07 Oct 2026 22:00:07 +0000
Manifest next update: Thu 08 Oct 2026 22:00:07 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: 5X2xdQzfElgF3zafO63cD95jMFc.roa (hash: t+WketR4iod+dxOduLUjbSJaUEp6hc0nti9zqFInWO4=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 24m8gFnk/uCHuV7hKBI/mRhfdP4d5jAntn9B/lPvO+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:88:16:3f:3f:0a:68:86:69:97:61:4e:36:db:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Oct 7 22:00:07 2026 GMT
Not After : Oct 8 22:00:07 2026 GMT
Subject: CN=fcddcdb7bfd10993162df08f765d3260f06f7635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:1c:59:70:dc:ae:d5:f8:f0:3c:ab:c0:6d:
85:5a:f5:22:33:87:ed:e0:29:80:43:36:88:d9:83:
af:12:3c:65:a5:9a:46:ce:bb:8f:a7:82:99:1d:8b:
dc:d5:2e:65:24:b5:7a:11:2a:a1:b7:7f:91:92:21:
60:0a:06:4d:19:66:25:04:3e:62:47:93:59:11:bf:
07:a9:80:50:b8:5b:ab:87:a3:57:13:50:65:ca:ec:
a1:ff:55:b8:f3:7d:35:07:94:c6:55:3f:47:bc:4f:
44:1f:aa:e6:6d:47:88:4c:69:8c:b3:b5:a3:f2:86:
7d:6f:94:6a:2c:30:4e:61:92:de:17:19:19:44:3f:
9b:b6:61:03:f2:3d:57:f0:62:50:7f:98:ef:58:a8:
05:35:12:96:6d:0d:d8:f3:89:7f:09:ab:6f:d4:9c:
b1:35:ff:ac:65:de:15:66:02:49:d3:ad:a3:d0:8b:
38:28:01:e7:a6:03:00:4d:a5:2d:60:bd:fd:af:90:
80:96:55:a6:e7:50:3d:04:59:8c:18:d8:6f:54:c3:
22:4a:fa:76:5d:99:07:bf:c1:a5:bc:25:fc:72:5a:
ff:28:d6:2f:13:60:37:a4:0b:66:03:c0:aa:89:51:
a6:91:6d:74:f0:f9:be:24:37:0c:03:95:7b:c5:e4:
6d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DD:CD:B7:BF:D1:09:93:16:2D:F0:8F:76:5D:32:60:F0:6F:76:35
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cb:48:c1:19:7f:93:37:43:d4:45:3b:cd:5c:ba:43:b2:4c:
57:e3:ae:24:ce:39:04:26:07:f5:3a:c7:ba:3e:47:cd:84:1c:
46:b6:bf:a5:4d:09:9f:b0:7a:55:a6:ae:37:43:d0:89:d4:3a:
a9:69:4c:2b:ce:b6:2b:12:f9:a9:0d:be:bb:50:ad:28:38:cc:
95:7f:02:35:fd:25:ef:e4:54:b6:bb:78:ae:ff:fc:a8:dd:da:
3b:bb:f7:e7:b2:69:f1:4b:ef:9b:d2:14:63:5d:9d:ee:8c:f9:
e4:df:f2:25:c8:a0:3a:f3:8b:45:fc:01:df:2c:8e:72:d3:75:
1e:7f:69:49:9a:f3:b4:71:c9:af:81:da:3c:dc:36:a1:4e:37:
9d:e3:0f:c7:83:a0:3a:4b:bf:7f:83:c7:80:28:71:58:ee:31:
44:f9:ba:e9:d3:a2:7b:b8:0d:0e:37:1c:b0:93:cf:32:ef:f3:
d5:79:83:55:07:f9:a1:03:c5:98:92:0d:95:45:08:49:cd:c9:
68:0f:21:ca:06:29:d0:58:7b:dd:97:ab:8a:60:1a:71:87:b7:
1c:3c:61:3b:af:c8:ec:3d:c6:29:fc:69:51:e1:84:21:31:dc:
97:2d:bb:b2:c1:01:df:56:ec:0a:4a:2e:34:b7:82:a9:04:bb:
45:ba:bd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:23:29 2026 by rpki-client