Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: oRvRQabY5Wj334vId+za3iGnWLvqP1rhuZjXayhB9qg=
Subject key identifier: 54:0F:C7:7A:5C:CF:15:16:17:6D:69:BC:FD:0A:E7:8F:47:9E:28:DC
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 01A180E2703FF0537528D045F0292473B4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1ACF
Signing time: Wed 28 Oct 2026 05:01:25 +0000
Manifest this update: Wed 28 Oct 2026 05:01:25 +0000
Manifest next update: Thu 29 Oct 2026 05:01:25 +0000
Files and hashes: 1: fK9aO2I8AtgF0c0rdh_GX4O4_G4.roa (hash: u0RKyLKqUhdTzKSmpaGBlbuO8M5rtJXGLGs1u6N9C1g=)
2: nUmXXOPkWjccJgN8O22tzPhWVlA.roa (hash: UqKB7riKgf3jbIKMj8rldXeyuF7eaO+XqFxWCXQioCw=)
3: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: Z8IzcGtGzcoQml4inQ3lxUz2cOUPEPcLKvmaYiXPnW4=)
4: xYSs50B2xtsvWdJxMD0UuyzwnRE.roa (hash: wUK1v8a3MmWnPSffQ5f8oxAVVqstmvh7KosqvxbaO78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:70:3f:f0:53:75:28:d0:45:f0:29:24:73:b4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Oct 28 05:01:25 2026 GMT
Not After : Oct 29 05:01:25 2026 GMT
Subject: CN=540fc77a5ccf1516176d69bcfd0ae78f479e28dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:7f:17:79:1c:d9:17:f4:90:e8:fd:60:b4:
71:4e:d5:2a:9a:a0:58:a5:6d:6f:06:3d:44:4e:55:
47:99:d8:e2:20:06:8b:e2:40:1b:27:41:63:2a:07:
fc:dc:2b:de:38:e0:2d:27:9b:5c:7a:58:66:a7:a1:
98:14:ca:5c:68:9c:e2:c0:50:e7:9d:5d:81:47:c9:
1a:86:53:32:e1:95:ac:cc:52:3b:c5:37:83:36:44:
36:99:98:b8:8b:57:a6:97:49:5a:42:80:db:d6:a7:
84:ef:ef:bb:b0:4a:ba:58:9d:4e:ac:62:e9:73:0c:
d2:ff:0e:09:47:fb:42:2c:ed:69:1e:4c:8d:d1:29:
6a:2e:9b:a5:78:61:83:d3:d3:24:f1:0c:3e:67:ac:
ab:e2:52:55:16:fd:35:76:28:b7:6e:4b:9c:3a:93:
79:32:e6:9c:2f:24:9d:58:55:b1:91:20:30:4c:0c:
6c:c5:79:df:40:27:73:bf:91:63:2a:03:68:84:e1:
e6:71:77:65:39:15:15:4e:6d:df:ce:d1:39:20:8e:
44:ec:61:88:6e:14:b5:08:ed:3e:21:3e:c2:52:ea:
04:f0:82:c9:b0:50:d0:f8:42:79:f8:39:f1:02:ce:
7b:a1:ed:63:79:5f:77:af:91:5b:a1:57:01:87:a5:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0F:C7:7A:5C:CF:15:16:17:6D:69:BC:FD:0A:E7:8F:47:9E:28:DC
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e0:5b:a8:cf:43:11:86:26:25:5f:00:eb:fe:6b:dc:81:6c:
39:ac:d0:2f:53:0d:62:10:26:ae:c8:da:49:6a:ed:12:45:de:
f7:73:6a:66:b1:02:ca:6b:14:3d:9c:9e:d7:4c:31:db:3e:31:
0d:fd:52:92:e9:a6:7a:04:44:99:3d:d2:43:a8:5a:6d:03:7c:
70:95:b4:ff:93:cb:d0:91:e3:ce:2e:04:5e:de:7d:21:ad:3d:
24:ca:36:ef:1a:56:2c:27:ba:bf:dc:62:c4:a1:71:5a:9e:ef:
5a:c3:40:1d:20:ca:73:0b:50:21:a7:2d:5d:d2:21:5b:cc:53:
a1:25:79:33:56:f5:c7:e2:7f:a3:2c:2a:c6:00:af:48:f9:e5:
aa:22:e0:11:6f:41:ea:c0:b2:71:56:ff:8b:36:47:af:b6:b4:
82:e4:b4:1e:33:7e:88:36:d5:4a:04:4d:3e:0e:ce:3c:74:b6:
bd:5a:bc:59:3b:e8:4f:fd:87:69:8e:79:46:97:b1:10:8e:57:
a3:c0:aa:35:45:b9:25:6e:28:bb:e6:82:1d:f5:ee:fd:ec:52:
cd:04:1b:4c:0e:b6:fc:8f:b5:22:ac:73:2d:44:45:eb:b6:5e:
9c:b9:ae:79:68:18:48:02:e7:97:7b:d0:8c:17:2b:45:ef:34:
1f:ef:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:44:38 2026 by rpki-client