Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: c6d03+NUucSHXH9qVkRmeJ2Dj5hL4xcPPvxrvs4JpeU=
Subject key identifier: B1:A1:B8:31:4D:D9:A8:44:BD:F0:58:03:19:A0:4E:AC:E9:B5:BE:95
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 01A11A505FAE97F44BDB08EDA55E7D0C6480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 169F
Signing time: Thu 08 Oct 2026 07:00:37 +0000
Manifest this update: Thu 08 Oct 2026 07:00:37 +0000
Manifest next update: Fri 09 Oct 2026 07:00:37 +0000
Files and hashes: 1: 1-QtHxqhDRc8Ad39doS8rj57e8O8.roa (hash: lx29AojPlQO1dFNnHX1vGuPHztiqJFCtnNtbhP7mv1A=)
2: 5X2xdQzfElgF3zafO63cD95jMFc.roa (hash: t+WketR4iod+dxOduLUjbSJaUEp6hc0nti9zqFInWO4=)
3: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: 7HN5EfLWCiOuZzbp1jnxvVA1YWZeeiVrU3CnFAnzgPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:5f:ae:97:f4:4b:db:08:ed:a5:5e:7d:0c:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Oct 8 07:00:37 2026 GMT
Not After : Oct 9 07:00:37 2026 GMT
Subject: CN=b1a1b8314dd9a844bdf0580319a04eace9b5be95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:50:a1:d9:e3:63:b5:bb:76:26:b8:3a:33:
df:74:44:01:af:b3:c0:46:30:ae:35:b6:76:53:99:
94:b9:44:c2:dc:3a:2c:0c:da:e0:6b:ed:91:76:21:
9b:77:43:bc:fe:51:7d:ca:6e:c2:c2:ad:f2:1f:cf:
d8:57:85:df:dc:b9:8e:01:54:4d:b6:fd:84:9a:72:
d9:18:61:e5:83:68:0b:3a:ab:45:4a:7d:8d:bf:d1:
49:97:c0:a1:5a:c1:24:a5:99:f3:89:64:2d:1a:a2:
ac:81:84:9c:b5:4f:ee:c7:2d:fa:79:10:da:d6:01:
4f:0b:1e:6c:1d:0e:0e:5a:fb:2d:32:6c:40:fc:a8:
74:a8:67:38:e2:77:f3:38:6e:d6:61:00:9e:2a:26:
7b:fd:3c:96:6e:6d:31:2c:b7:08:6d:12:0b:ed:bc:
c0:c5:91:d1:fb:37:d0:bf:20:d1:9f:9b:06:33:f2:
0a:d9:b9:c3:bf:bc:77:28:f6:3c:fc:30:1d:de:7e:
39:a7:85:20:15:74:b4:b2:49:53:37:65:f2:80:db:
12:eb:86:4f:d0:3c:d6:8a:00:55:40:ca:b6:9a:25:
63:34:56:eb:b4:3a:2b:7f:0a:b5:eb:85:10:4c:d3:
0f:bd:f3:8a:fa:cb:57:a1:52:fb:2a:36:31:20:ad:
9c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A1:B8:31:4D:D9:A8:44:BD:F0:58:03:19:A0:4E:AC:E9:B5:BE:95
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:eb:fb:2d:2f:e1:52:05:15:1e:52:29:7b:16:db:9a:96:b4:
24:2d:cf:f2:61:36:ac:17:c6:16:98:d4:e4:6a:51:66:d6:b6:
b7:fe:df:0d:60:bf:aa:70:57:d2:8a:87:f2:6a:7d:18:b8:52:
72:be:0d:22:0b:57:37:d7:5f:67:d8:c4:b6:cc:4c:a8:15:5c:
93:85:02:17:98:58:94:a4:b4:d7:72:4e:5b:c0:f6:c9:d9:db:
8b:b9:27:ad:02:56:74:f5:ec:8d:13:b1:78:64:06:58:5d:86:
20:16:a4:23:93:82:f6:11:b6:66:fb:49:e7:3e:e4:d7:d4:c0:
83:06:b9:3b:f1:f0:1c:a5:43:69:78:c0:e9:c6:bc:4b:d9:a4:
69:d0:3c:ad:be:c5:97:c9:de:1b:14:e5:16:9a:72:af:72:fd:
f2:77:46:d8:7f:3d:83:d6:f8:33:4e:00:8c:2b:32:c1:a8:0d:
a3:31:3a:14:65:78:2b:7d:a1:71:a3:e1:0a:85:60:09:7a:98:
53:17:06:21:97:16:48:44:12:9d:63:c8:48:e5:84:d0:c3:37:
06:b5:d4:cb:33:12:bb:bf:a4:98:aa:14:c9:6f:74:98:ba:f8:
42:3e:a6:71:7a:b8:74:f5:eb:1e:87:43:58:a7:39:59:2c:c1:
a2:45:4a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:06:02 2026 by rpki-client