Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: oNFAsZLHqZMcmzAk6N4n+7ssqC+qzwC1y1Ls8iTp3D8=
Subject key identifier: 7E:5A:EB:0B:1F:F5:97:45:0A:BF:3C:FF:1B:6D:B9:D9:DD:F1:BD:0A
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 01A08E325030DD349F42C677E802C6C45148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 1A47
Signing time: Fri 11 Sep 2026 02:00:57 +0000
Manifest this update: Fri 11 Sep 2026 02:00:57 +0000
Manifest next update: Sat 12 Sep 2026 02:00:57 +0000
Files and hashes: 1: awToJLBsyk0T4IcWFD08IQBrMn8.roa (hash: D6jszyrJ34yNygrEuO9QJPaleqlFTsrRTxhepr3reTI=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: k0oaNIPEwOhJiZIlWsdxkUwQ4xqZcFP8/GYC/PIq76U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:50:30:dd:34:9f:42:c6:77:e8:02:c6:c4:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Sep 11 02:00:57 2026 GMT
Not After : Sep 12 02:00:57 2026 GMT
Subject: CN=7e5aeb0b1ff597450abf3cff1b6db9d9ddf1bd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:49:b4:53:46:8a:11:c0:cc:f3:f4:4d:6a:
9b:4f:a4:b9:c2:85:5b:b3:d7:1b:7c:d0:1c:b5:a7:
09:cb:3c:06:70:d2:0f:0d:5a:15:3c:a9:d2:cc:38:
be:25:a9:d3:7b:6e:17:94:3f:91:f9:89:03:4c:35:
da:86:a2:47:26:2d:d0:37:21:92:f9:ce:9f:61:25:
f5:e1:7b:65:11:c1:81:bf:df:bd:a0:bf:09:ce:75:
64:fd:31:a2:05:4b:51:86:11:80:88:10:d4:c6:b3:
1c:9b:5f:73:48:8c:ca:7c:a2:ad:a3:11:8b:18:54:
d0:9d:57:79:ec:16:ee:19:23:ea:96:1f:97:ab:2a:
e9:62:c0:4d:a0:69:b2:59:56:24:aa:c5:f0:1c:99:
d3:20:80:93:52:30:2b:90:57:d0:0e:60:07:d0:81:
e2:6c:d7:83:7a:a3:3d:c8:00:b1:91:40:a9:a2:05:
be:10:d2:ab:c4:45:73:96:8f:7b:36:3f:f6:b3:ee:
05:16:97:66:df:33:31:1b:42:ae:6f:23:a1:4d:52:
e2:ae:c3:2e:4c:0a:aa:3b:c7:be:4d:52:64:08:76:
c6:2b:7b:7f:8c:02:46:df:86:95:bf:ad:f5:47:69:
d8:8d:f6:8a:a4:c0:5e:5e:04:fb:bf:8e:4a:fa:9b:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:EB:0B:1F:F5:97:45:0A:BF:3C:FF:1B:6D:B9:D9:DD:F1:BD:0A
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:df:55:93:6f:00:b9:79:00:4e:7c:a5:a2:36:ff:6e:82:82:
4e:b7:37:44:c5:e6:84:bb:27:aa:d4:8c:b8:d9:93:76:8c:44:
22:3c:cc:08:22:64:ec:44:e2:63:71:ce:c7:60:c1:7f:52:d6:
bd:ca:e7:71:73:b4:52:2a:c6:a6:4d:8c:7f:62:e9:8d:63:12:
33:4f:ce:d4:d8:56:2f:65:4d:09:44:1b:83:9b:80:ef:68:13:
aa:d9:1b:99:b3:ad:b0:f0:b9:8a:bf:bf:47:15:7e:44:71:60:
59:a8:fc:d2:8a:d2:c7:65:6d:2c:5b:87:20:0b:82:8a:63:a9:
78:0d:f3:78:fd:ed:7c:b1:78:b7:6c:1c:3d:f7:5b:f5:72:56:
ea:e2:ba:23:a5:16:78:b7:d7:c5:e7:12:24:b9:b8:1d:5e:14:
b9:8d:65:b2:6a:4c:3d:11:2d:9f:72:f4:b1:f1:22:4e:dd:56:
8e:b5:b5:75:d9:e6:74:88:d8:52:2c:0d:d6:ea:69:60:2b:ea:
8b:4e:46:8b:23:93:de:b4:1d:4b:7d:21:42:ff:f0:83:12:e3:
6d:5c:93:6f:b4:61:60:12:4d:3c:24:69:b3:f4:dc:23:07:12:
18:40:25:d0:52:8f:ad:19:fa:17:9c:5d:d1:8e:f9:04:dc:43:
6a:73:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:07:52 2026 by rpki-client